last executing test programs: 3m9.172615066s ago: executing program 1 (id=362): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r4, 0x10000201, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 3m9.110836006s ago: executing program 1 (id=363): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r1) rmdir(&(0x7f0000000640)='./file0\x00') 3m9.064049698s ago: executing program 1 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 3m8.9952467s ago: executing program 1 (id=366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x4000801, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m8.960872416s ago: executing program 1 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m8.865047851s ago: executing program 1 (id=370): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xc4, 0x7, 0xe1, 0x1, 0x9, 0xd9, 0x49, 0x44, 0xf7, 0x5, 0xc, 0x0, 0xfa, 0x40, 0x5, 0x5}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0xfffffff8, 0x9, 0x2000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m53.799700994s ago: executing program 32 (id=370): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xc4, 0x7, 0xe1, 0x1, 0x9, 0xd9, 0x49, 0x44, 0xf7, 0x5, 0xc, 0x0, 0xfa, 0x40, 0x5, 0x5}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0xfffffff8, 0x9, 0x2000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 428.120092ms ago: executing program 2 (id=6295): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003f00)={&(0x7f0000002f00)=""/4096, 0x1000}) 427.750446ms ago: executing program 2 (id=6297): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="010028bd7000fbdbdf251a0000000c00060002", @ANYRES32, @ANYBLOB="859c27e65989d71aa2e19326eeb430a409b2be670b662ec4eed9e1182936ab88ef8499340a2c52619357fa8f012849d7376ad7e09d07c3bef311bff8da60cde5bba792d0d016c9e66648c9d535fa53f38dba972e5c1983ac22d986ef0dbec65370e2bcaf3f8ab7650f025dfcf1872ca9d5bb2211b40d3e8e7d"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x8001) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x41c}}}, 0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 383.47908ms ago: executing program 2 (id=6299): getpid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) syz_emit_ethernet(0x7a, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d2dad5", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 383.39762ms ago: executing program 3 (id=6300): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) 319.857195ms ago: executing program 0 (id=6301): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000009c0)=0x5, 0x2) 319.450206ms ago: executing program 2 (id=6303): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a", 0x20}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r4, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 300.045232ms ago: executing program 2 (id=6305): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) 299.975354ms ago: executing program 3 (id=6306): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c6, 0x0, 0x2, 0x200004, 0x3, 0x3d000, 0xfffffffc, 0x100, 0x9, 0xd, 0x3, 0xfffffffe, 0xc00, 0xfa, 0x13, 0x100, 0xffffffa7, 0x9, 0x34b, 0x11, 0xed5, 0x2, 0x5, 0x6, 0x23, 0xfffffffd, 0x8, 0x0, 0x31dc0000, 0xf58, 0xb13]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0) 250.012409ms ago: executing program 0 (id=6307): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/197, 0xc5}, {0x0}], 0x2, 0x4, 0x6) 249.792602ms ago: executing program 4 (id=6308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 194.280851ms ago: executing program 3 (id=6309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) 194.182266ms ago: executing program 0 (id=6310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010705000000000000000000010000050900010073797a300000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4c064) 194.097763ms ago: executing program 4 (id=6311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 185.702429ms ago: executing program 2 (id=6312): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/213, 0xd5}], 0x1, 0x7f, 0x1) 160.871745ms ago: executing program 4 (id=6313): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010001", 0x7) 110.459543ms ago: executing program 0 (id=6314): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 110.244668ms ago: executing program 3 (id=6315): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 110.14688ms ago: executing program 4 (id=6316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000001411"], 0x0) 48.676984ms ago: executing program 0 (id=6317): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 48.577103ms ago: executing program 3 (id=6318): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 489.999µs ago: executing program 4 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) 339.071µs ago: executing program 0 (id=6320): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) 228.757µs ago: executing program 4 (id=6321): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 0s ago: executing program 3 (id=6322): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',grou']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=6324): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x16b080, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=0 [ 108.208399][ T5839] usb 9-1: USB disconnect, device number 4 [ 108.288664][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 108.290824][ T24] usbtmc 8-1:16.0: can't read capabilities [ 108.323273][ T24] usb 5-1: USB disconnect, device number 7 [ 108.357028][ T8295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.444487][ T42] audit: type=1400 audit(1782598410.305:643): avc: denied { write } for pid=8300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.491637][ T8270] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -71 [ 108.495006][ T34] usb 8-1: USB disconnect, device number 9 [ 108.495641][ T42] audit: type=1400 audit(1782598410.365:644): avc: denied { write } for pid=8305 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.783587][ T5830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.943560][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 108.946876][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.950899][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 108.956384][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.963940][ T5830] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 108.967391][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 108.970732][ T5830] usb 5-1: Product: syz [ 108.972310][ T5830] usb 5-1: Manufacturer: syz [ 108.973978][ T5830] usb 5-1: SerialNumber: syz [ 108.980689][ T5830] usb 5-1: config 0 descriptor?? [ 108.988113][ T8333] bond0: entered promiscuous mode [ 108.989777][ T8333] bond_slave_0: entered promiscuous mode [ 108.991678][ T8333] bond_slave_1: entered promiscuous mode [ 108.994792][ T8333] batadv0: entered promiscuous mode [ 108.999046][ T8333] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 109.004721][ T8333] syz_tun: entered promiscuous mode [ 109.009732][ T8333] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 109.037453][ T5830] rc_core: IR keymap rc-imon-rsc not found [ 109.039811][ T5830] Registered IR keymap rc-empty [ 109.046131][ T5830] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 109.055537][ T5830] input: iMON Station as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 109.192039][ T73] usb 5-1: USB disconnect, device number 8 [ 109.288844][ T8371] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 109.423665][ T5839] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 109.585153][ T5839] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.588600][ T5839] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.592260][ T5839] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.593899][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 109.600879][ T5839] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 109.603791][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 109.606191][ T5839] usb 8-1: Product: syz [ 109.607631][ T5839] usb 8-1: Manufacturer: syz [ 109.609276][ T5839] usb 8-1: SerialNumber: syz [ 109.612981][ T8406] bond6: entered promiscuous mode [ 109.614934][ T8406] bond6: entered allmulticast mode [ 109.766561][ T8416] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 109.810958][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 109.810974][ T42] audit: type=1400 audit(1782598411.675:650): avc: denied { bind } for pid=8417 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.821802][ T42] audit: type=1400 audit(1782598411.675:651): avc: denied { name_bind } for pid=8417 comm="syz.2.863" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 109.829342][ T5839] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.840134][ T42] audit: type=1400 audit(1782598411.675:652): avc: denied { node_bind } for pid=8417 comm="syz.2.863" saddr=224.0.0.1 src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 109.863535][ T5733] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 110.029686][ T42] audit: type=1400 audit(1782598411.895:653): avc: denied { read write } for pid=8361 comm="syz.3.844" name="lp0" dev="devtmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.033148][ T5830] usb 8-1: USB disconnect, device number 10 [ 110.036963][ T42] audit: type=1400 audit(1782598411.895:654): avc: denied { open } for pid=8361 comm="syz.3.844" path="/dev/usb/lp0" dev="devtmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.040334][ T5830] usblp0: removed [ 110.264978][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 110.281488][ T8439] bond1: entered promiscuous mode [ 110.283074][ T8439] bond1: entered allmulticast mode [ 110.584737][ T42] audit: type=1400 audit(1782598412.455:655): avc: denied { read } for pid=8453 comm="syz.0.877" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.592256][ T42] audit: type=1400 audit(1782598412.455:656): avc: denied { open } for pid=8453 comm="syz.0.877" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.611785][ T8455] netlink: 'syz.0.877': attribute type 25 has an invalid length. [ 110.909446][ T8473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.083576][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.174977][ T5733] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 111.183564][ T8478] netlink: 'syz.0.892': attribute type 25 has an invalid length. [ 111.248611][ T8482] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 111.269095][ T8485] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 111.307661][ T8493] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.413532][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 111.563523][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 111.566271][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.569295][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 111.572516][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.577585][ T9] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 111.580241][ T9] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 111.582570][ T9] usb 9-1: Product: syz [ 111.583946][ T9] usb 9-1: Manufacturer: syz [ 111.585282][ T9] usb 9-1: SerialNumber: syz [ 111.588058][ T9] usb 9-1: config 0 descriptor?? [ 111.633529][ T9] rc_core: IR keymap rc-imon-rsc not found [ 111.635326][ T9] Registered IR keymap rc-empty [ 111.637545][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 111.641089][ T9] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input11 [ 111.673550][ T73] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 111.743543][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.798670][ T7767] usb 9-1: USB disconnect, device number 5 [ 111.823628][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 111.826488][ T73] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.829976][ T73] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.833742][ T73] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.837369][ T73] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.842148][ T73] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.845761][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.913628][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 111.916894][ T24] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 111.919998][ T24] usb 5-1: config 0 has no interface number 0 [ 111.922468][ T24] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.926729][ T24] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 111.930818][ T24] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 111.935149][ T24] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 111.939156][ T24] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.945925][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 111.948901][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.951502][ T24] usb 5-1: Product: syz [ 111.953028][ T24] usb 5-1: Manufacturer: syz [ 111.954743][ T24] usb 5-1: SerialNumber: syz [ 111.958413][ T24] usb 5-1: config 0 descriptor?? [ 112.061512][ T73] usb 8-1: usb_control_msg returned -71 [ 112.065651][ T73] usbtmc 8-1:16.0: can't read capabilities [ 112.081330][ T73] usb 8-1: USB disconnect, device number 11 [ 112.171701][ T24] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 112.232320][ T8538] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 112.372407][ T73] usb 5-1: USB disconnect, device number 9 [ 112.375265][ T8558] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 112.448681][ T8567] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 112.543035][ T8577] netlink: 'syz.3.918': attribute type 25 has an invalid length. [ 112.551684][ T8579] ipvlan3: entered allmulticast mode [ 112.553457][ T8579] batadv_slave_1: entered allmulticast mode [ 112.559199][ T8579] batman_adv: batadv0: Adding interface: ipvlan3 [ 112.561270][ T8579] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.569990][ T8579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.573139][ T8579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.577424][ T8579] batman_adv: batadv0: Interface activated: ipvlan3 [ 112.710488][ T8594] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 112.748903][ T8596] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 112.751297][ T8596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.754948][ T8596] IPv6: NLM_F_CREATE should be set when creating new route [ 112.757218][ T8596] IPv6: NLM_F_CREATE should be set when creating new route [ 112.759654][ T8596] IPv6: NLM_F_CREATE should be set when creating new route [ 112.836574][ T8600] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 112.914311][ T8604] netlink: 'syz.4.929': attribute type 25 has an invalid length. [ 112.981048][ T8608] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 112.986493][ T8608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.017316][ T42] audit: type=1400 audit(1782598414.885:657): avc: denied { name_bind } for pid=8611 comm="syz.4.933" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.224568][ T42] audit: type=1400 audit(1782598415.095:658): avc: denied { read } for pid=8628 comm="syz.0.939" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.231282][ T42] audit: type=1400 audit(1782598415.095:659): avc: denied { open } for pid=8628 comm="syz.0.939" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.487104][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 113.508597][ T8647] bond5: entered promiscuous mode [ 113.510808][ T8647] bond5: entered allmulticast mode [ 113.648430][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 113.913606][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 114.016458][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 114.030491][ T8672] bond2: entered promiscuous mode [ 114.032054][ T8672] bond2: entered allmulticast mode [ 114.063562][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 114.067327][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 114.070912][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.087063][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.089973][ T9] pvrusb2: ********** [ 114.091594][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.095853][ T9] pvrusb2: Important functionality might not be entirely working. [ 114.098952][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.103395][ T9] pvrusb2: ********** [ 114.230257][ T8678] netlink: 'syz.0.960': attribute type 25 has an invalid length. [ 114.283072][ T2515] pvrusb2: Invalid write control endpoint [ 114.298861][ T8682] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.320667][ T2515] pvrusb2: Invalid write control endpoint [ 114.323131][ T2515] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 114.326814][ T2515] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 114.329510][ T2515] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 114.332474][ T2515] pvrusb2: Device being rendered inoperable [ 114.336845][ T2515] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 114.339673][ T2515] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 114.344396][ T2515] pvrusb2: Attached sub-driver cx25840 [ 114.346537][ T2515] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 114.349618][ T2515] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 114.482029][ T8661] pvrusb2: Attempted to execute control transfer when device not ok [ 114.486564][ T9] usb 8-1: USB disconnect, device number 12 [ 114.946044][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 114.951358][ T8699] team0: Device macvlan2 is already an upper device of the team interface [ 115.070314][ T8708] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 115.083213][ T8705] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 115.181383][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 115.190263][ T8719] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 115.192684][ T24] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 115.245373][ T8724] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 115.277756][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 115.277767][ T42] audit: type=1400 audit(1782598417.145:662): avc: denied { ioctl } for pid=8732 comm="syz.0.980" path="socket:[21460]" dev="sockfs" ino=21460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.369213][ T8744] tipc: Enabled bearer , priority 10 [ 115.420828][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 115.425908][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 115.486668][ T8752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.705533][ T8764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 116.091624][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 116.105270][ T8787] bond3: entered promiscuous mode [ 116.106871][ T8787] bond3: entered allmulticast mode [ 116.186707][ T7767] hid-generic 0005:10CF:0040.0002: item fetching failed at offset 2/3 [ 116.190562][ T7767] hid-generic 0005:10CF:0040.0002: probe with driver hid-generic failed with error -22 [ 116.220016][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 116.340146][ T8805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.466218][ T8828] xfrm0 speed is unknown, defaulting to 1000 [ 116.490968][ T9] tipc: Node number set to 3535473011 [ 116.529818][ T8832] pim6reg: entered allmulticast mode [ 116.565645][ T8837] TCP: TCP_TX_DELAY enabled [ 116.598961][ T8840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.831783][ T8849] xfrm0 speed is unknown, defaulting to 1000 [ 116.902629][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 116.922932][ T8863] bond9: entered promiscuous mode [ 116.924839][ T8863] bond9: entered allmulticast mode [ 117.459776][ T8887] erspan0: entered promiscuous mode [ 117.533726][ T5839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.683743][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 117.689470][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 117.692336][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.697214][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.700827][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.705798][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.710382][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.718325][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.725247][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 117.728469][ T8909] validate_nla: 7 callbacks suppressed [ 117.728482][ T8909] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 117.736050][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 117.739291][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.744022][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.748419][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.752853][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.756955][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.757086][ T8909] 8021q: adding VLAN 0 to HW filter on device bond10 [ 117.760445][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.760463][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 117.761249][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 117.763572][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.766699][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.776232][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.779682][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.783166][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.786869][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.790338][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.794439][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 117.799533][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 117.801361][ T5839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.804388][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.811507][ T5839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.933634][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 117.937810][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 117.941259][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.945339][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.949297][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.953279][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.958357][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.961948][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.019333][ T5830] usb 5-1: USB disconnect, device number 10 [ 118.175095][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 118.176841][ T9] usbtmc 8-1:16.0: can't read capabilities [ 118.379850][ T5839] usb 8-1: USB disconnect, device number 13 [ 118.687201][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 118.699555][ T8944] bond5: entered promiscuous mode [ 118.701231][ T8944] bond5: entered allmulticast mode [ 118.729014][ T8947] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 118.871454][ T8962] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 118.956164][ T8960] block nbd0: shutting down sockets [ 118.986351][ T8967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.989430][ T8967] 8021q: adding VLAN 0 to HW filter on device bond9 [ 119.423099][ T42] audit: type=1400 audit(1782598421.285:663): avc: denied { remount } for pid=8995 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.838475][ T9002] netlink: 'syz.3.1074': attribute type 25 has an invalid length. [ 119.855123][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 119.882032][ T9009] xfrm0 speed is unknown, defaulting to 1000 [ 119.896973][ T9013] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1079'. [ 119.898243][ T42] audit: type=1400 audit(1782598421.765:664): avc: denied { ioctl } for pid=9012 comm="syz.2.1079" path="socket:[28697]" dev="sockfs" ino=28697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.133451][ T9031] netlink: 'syz.3.1086': attribute type 25 has an invalid length. [ 120.188711][ T9035] wg1: entered allmulticast mode [ 120.493250][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.733552][ T41] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 120.754126][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 120.885570][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 120.893329][ T41] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 120.896180][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.898591][ T41] usb 8-1: Product: syz [ 120.899829][ T9065] bond6: entered promiscuous mode [ 120.899879][ T41] usb 8-1: Manufacturer: syz [ 120.901648][ T9065] bond6: entered allmulticast mode [ 120.903329][ T41] usb 8-1: SerialNumber: syz [ 120.914086][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 120.916943][ T24] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.920526][ T24] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.923865][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 120.926626][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.930243][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.939254][ T24] usb 9-1: config 0 descriptor?? [ 121.013267][ T9072] xfrm0 speed is unknown, defaulting to 1000 [ 121.138164][ T41] rtl8150 8-1:1.0: couldn't reset the device [ 121.142220][ T41] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 121.147541][ T41] usb 8-1: USB disconnect, device number 14 [ 121.355393][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 121.358101][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 121.360330][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 121.362528][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 121.364827][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 121.368835][ T24] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 121.554617][ T24] usb 9-1: USB disconnect, device number 6 [ 121.771616][ T9086] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 121.952952][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.039219][ T9126] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 122.042243][ T9] IPVS: starting estimator thread 0... [ 122.095193][ T42] audit: type=1400 audit(1782598423.965:665): avc: denied { accept } for pid=9136 comm="syz.2.1128" lport=52867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.119678][ T9139] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 122.134094][ T9127] IPVS: using max 45 ests per chain, 108000 per kthread [ 122.139921][ T9139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 122.145528][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1129'. [ 122.148350][ T42] audit: type=1400 audit(1782598424.015:666): avc: denied { name_bind } for pid=9143 comm="syz.3.1131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.323637][ T7767] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 122.394131][ T5733] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 122.413610][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 122.483786][ T7767] usb 9-1: Using ep0 maxpacket: 8 [ 122.487607][ T7767] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 122.490722][ T7767] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.495211][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.499870][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.508549][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.516518][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.521157][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.526847][ T7767] usb 9-1: config 168 interface 0 has no altsetting 0 [ 122.530745][ T7767] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 122.533878][ T7767] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.538332][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.542942][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.547859][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.551904][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.557015][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.561128][ T7767] usb 9-1: config 168 interface 0 has no altsetting 0 [ 122.564273][ T7767] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 122.565023][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.566622][ T7767] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.570461][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.573791][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.573808][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.573820][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.573834][ T7767] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.573847][ T7767] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.573861][ T7767] usb 9-1: config 168 interface 0 has no altsetting 0 [ 122.576017][ T7767] usb 9-1: string descriptor 0 read error: -22 [ 122.588246][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.588922][ T7767] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.597126][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.598455][ T7767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.600820][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.605278][ T9161] netlink: 'syz.0.1138': attribute type 25 has an invalid length. [ 122.612969][ T24] usb 8-1: config 0 descriptor?? [ 122.614758][ T7767] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.692097][ T9163] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 122.732751][ T9167] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 122.820502][ T5839] usb 9-1: USB disconnect, device number 7 [ 122.987429][ T42] audit: type=1400 audit(1782598424.855:667): avc: denied { write } for pid=9173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.024693][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 123.026691][ T42] audit: type=1400 audit(1782598424.895:668): avc: denied { write } for pid=9178 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.033240][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 123.038290][ T9181] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 123.040103][ T24] usb 8-1: USB disconnect, device number 15 [ 123.056240][ T9181] 8021q: adding VLAN 0 to HW filter on device bond11 [ 123.060715][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 123.409620][ T42] audit: type=1400 audit(1782598425.275:669): avc: denied { bind } for pid=9207 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.625280][ T9216] xfrm0 speed is unknown, defaulting to 1000 [ 123.722383][ T9221] netlink: 'syz.0.1159': attribute type 25 has an invalid length. [ 123.783734][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 123.879174][ T9227] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.933657][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 123.938547][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.943068][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.946555][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 123.948688][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.951582][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.955769][ T24] usb 8-1: config 0 descriptor?? [ 123.976398][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1164'. [ 124.135388][ T9241] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1168'. [ 124.292136][ T42] audit: type=1400 audit(1782598426.155:670): avc: denied { bind } for pid=9249 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.365252][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 124.375327][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 124.379124][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 124.381399][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 124.383724][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 124.386620][ T9259] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 124.386787][ T24] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 124.419038][ T9259] 8021q: adding VLAN 0 to HW filter on device bond12 [ 124.437624][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 124.465944][ T9262] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 124.564645][ T24] usb 8-1: USB disconnect, device number 16 [ 124.708865][ T9288] netlink: 'syz.0.1185': attribute type 10 has an invalid length. [ 124.735783][ T42] audit: type=1400 audit(1782598426.605:671): avc: denied { mmap_zero } for pid=9301 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 124.963678][ T6089] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.043568][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 125.113638][ T6089] usb 5-1: Using ep0 maxpacket: 8 [ 125.116949][ T6089] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 125.119487][ T6089] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.122459][ T6089] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.125574][ T6089] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.128577][ T6089] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.132492][ T6089] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.135697][ T6089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.194346][ T24] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 125.198669][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.202297][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.207039][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.211204][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.214813][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.218390][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.221652][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.224511][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.227870][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.230597][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.233367][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.236637][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.239381][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.242081][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.245284][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.248491][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.251210][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.254372][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.257065][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.259845][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.263020][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.265801][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.268384][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.271514][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.275063][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.277756][ T24] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.280206][ T24] usb 9-1: Product: syz [ 125.281485][ T24] usb 9-1: Manufacturer: syz [ 125.283081][ T24] usb 9-1: SerialNumber: syz [ 125.285886][ T24] usb 9-1: config 0 descriptor?? [ 125.291664][ T24] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.345600][ T6089] usb 5-1: usb_control_msg returned -32 [ 125.347369][ T6089] usbtmc 5-1:16.0: can't read capabilities [ 125.498488][ T9321] netlink: 'syz.3.1199': attribute type 10 has an invalid length. [ 125.594451][ C2] usb 9-1: yurex_control_callback - control failed: -71 [ 125.599910][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 125.601152][ T24] usb 9-1: USB disconnect, device number 8 [ 125.606138][ T24] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 125.612876][ T9332] netlink: 'syz.3.1203': attribute type 25 has an invalid length. [ 125.656901][ T9338] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 125.679717][ T9340] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 125.691242][ T9340] 8021q: adding VLAN 0 to HW filter on device bond13 [ 125.696410][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 125.749680][ T9346] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 126.025495][ T9367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 126.030626][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 126.133985][ T42] audit: type=1400 audit(1782598428.005:672): avc: denied { bind } for pid=9377 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.209890][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 126.304151][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 126.463632][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 126.467191][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.470858][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.474899][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.478601][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.483368][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.486985][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.696101][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 126.698290][ T9] usbtmc 8-1:16.0: can't read capabilities [ 126.900105][ T5839] usb 8-1: USB disconnect, device number 17 [ 126.906767][ T9404] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 126.945249][ T9406] bond14: entered promiscuous mode [ 126.946872][ T9406] bond14: entered allmulticast mode [ 127.178629][ T42] audit: type=1400 audit(1782598429.045:673): avc: denied { write } for pid=9428 comm="syz.4.1245" path="socket:[29222]" dev="sockfs" ino=29222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.473595][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 127.633547][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 127.636511][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 127.641293][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 127.644428][ T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 127.647010][ T9] usb 9-1: Product: syz [ 127.648351][ T9] usb 9-1: Manufacturer: syz [ 127.649830][ T9] usb 9-1: SerialNumber: syz [ 127.652701][ T9] usb 9-1: config 0 descriptor?? [ 127.655418][ T9436] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.658574][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 127.660623][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 127.723600][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.741989][ T5830] usb 5-1: USB disconnect, device number 11 [ 128.182310][ T9481] validate_nla: 9 callbacks suppressed [ 128.182322][ T9481] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 128.195097][ T9481] 8021q: adding VLAN 0 to HW filter on device bond15 [ 128.263583][ T5839] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.285593][ T9436] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 128.435964][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 128.439270][ T5839] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.440015][ T9500] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 128.441866][ T5839] usb 5-1: config 179 has no interface number 0 [ 128.447368][ T5839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 128.447786][ T9436] usb 9-1: device firmware changed [ 128.450835][ T5839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 128.454115][ T24] usb 9-1: USB disconnect, device number 9 [ 128.455731][ T5839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.460849][ T5839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 128.464420][ T5839] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.468351][ T5839] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.471052][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.475977][ T9469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.554372][ T9507] cgroup: fork rejected by pids controller in /syz3 [ 128.594805][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 128.695890][ T5839] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input12 [ 128.764143][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 128.768295][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 128.775968][ T24] usb 9-1: string descriptor 0 read error: -22 [ 128.777975][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 128.781011][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 128.784946][ T24] usb 9-1: config 0 descriptor?? [ 128.786995][ T9453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.789959][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 128.791864][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 128.885799][ T9] usb 5-1: USB disconnect, device number 12 [ 128.885916][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.890539][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 129.079615][T10615] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 129.135207][ T41] usb 9-1: USB disconnect, device number 10 [ 129.385454][T11227] »»»»»»: renamed from vlan0 (while UP) [ 129.456128][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 129.467208][T11366] bond8: entered promiscuous mode [ 129.468870][T11366] bond8: entered allmulticast mode [ 129.521489][T11544] cgroup: fork rejected by pids controller in /syz0 [ 129.615779][T11913] netlink: 'syz.2.1308': attribute type 10 has an invalid length. [ 129.664649][T12050] bond5: entered promiscuous mode [ 129.666280][T12050] bond5: entered allmulticast mode [ 129.739592][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1317'. [ 129.764470][T12419] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 129.775937][T12419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.780308][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1318'. [ 130.082030][T13533] xfrm0 speed is unknown, defaulting to 1000 [ 130.179092][T13917] xfrm0 speed is unknown, defaulting to 1000 [ 131.113616][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 131.283592][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 131.287878][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 131.291450][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 131.295083][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 131.298584][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.301828][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.307717][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.311657][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.315353][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.320247][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 131.323584][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.331638][ T9] usb 9-1: config 0 descriptor?? [ 131.537927][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.740146][ T9] usb 9-1: USB disconnect, device number 11 [ 131.744053][ T9] usblp0: removed [ 132.743628][ T5817] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 132.903640][ T5817] usb 9-1: Using ep0 maxpacket: 8 [ 132.911928][ T5817] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 132.916250][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.920967][ T5817] usb 9-1: Product: syz [ 132.922234][ T5817] usb 9-1: Manufacturer: syz [ 132.926205][ T5817] usb 9-1: SerialNumber: syz [ 132.931121][ T5817] usb 9-1: config 0 descriptor?? [ 132.934639][ T5817] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 132.937208][ T5817] pctv452e: pctv452e_power_ctrl: 1 [ 132.937208][ T5817] [ 132.939597][ T5817] usb 9-1: selecting invalid altsetting 3 [ 132.941360][ T5817] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 132.941360][ T5817] [ 132.945410][ T5817] dvb-usb: bulk message failed: -22 (5/0) [ 132.949327][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.952473][ T5817] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 132.955141][ T5817] usb 9-1: media controller created [ 132.956985][ T5817] dvb-usb: bulk message failed: -22 (8/0) [ 132.958843][ T5817] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 132.961371][ T5817] dvb-usb: MAC address reading failed. [ 132.969076][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.995077][ T5817] DVB: Unable to find symbol stb0899_attach() [ 132.996963][ T5817] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 133.043693][ T5817] rc_core: IR keymap rc-tt-1500 not found [ 133.045633][ T5817] Registered IR keymap rc-empty [ 133.047960][ T5817] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 133.051693][ T5817] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input13 [ 133.056128][ T5817] dvb-usb: schedule remote query interval to 100 msecs. [ 133.058180][ T5817] pctv452e: pctv452e_power_ctrl: 0 [ 133.058180][ T5817] [ 133.060385][ T5817] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 133.164917][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 133.169940][ T5817] dvb-usb: error -22 while querying for an remote control event. [ 133.283627][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 133.287304][ T5817] dvb-usb: error -22 while querying for an remote control event. [ 133.339915][ T6089] usb 9-1: USB disconnect, device number 12 [ 133.378504][ T6089] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 134.031575][T28020] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 134.052846][T28020] 8021q: adding VLAN 0 to HW filter on device bond16 [ 134.057335][T28020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1503'. [ 134.231542][T28706] hsr0: entered promiscuous mode [ 134.235647][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 134.243956][T28706] hsr_slave_0: left promiscuous mode [ 134.246444][T28706] hsr_slave_1: left promiscuous mode [ 134.259547][T28706] hsr0 (unregistering): left promiscuous mode [ 134.407722][ T42] audit: type=1400 audit(1782598436.275:674): avc: denied { map } for pid=29303 comm="syz.4.1523" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.418236][ T42] audit: type=1400 audit(1782598436.285:675): avc: denied { write } for pid=29303 comm="syz.4.1523" path="socket:[31973]" dev="sockfs" ino=31973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.748071][T30332] 8021q: adding VLAN 0 to HW filter on device bond14 [ 134.757943][ T7067] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 134.793093][ T42] audit: type=1400 audit(1782598436.655:676): avc: denied { set_context_mgr } for pid=30680 comm="syz.4.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 134.799880][T30681] binder: 30680:30681 ioctl c0306201 200000000480 returned -14 [ 135.148152][ T42] audit: type=1400 audit(1782598437.015:677): avc: denied { ioctl } for pid=32007 comm="syz.4.1569" path="socket:[32882]" dev="sockfs" ino=32882 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.317944][T32534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 135.616100][ T1389] netlink: 'syz.4.1592': attribute type 25 has an invalid length. [ 135.751011][ T42] audit: type=1326 audit(1782598437.615:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.2.1600" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85079ce59 code=0x0 [ 136.605269][ T5334] fuse: fd is not a fuse device [ 136.652943][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 136.789179][ T5932] qrtr: Invalid version 0 [ 137.767338][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 137.778696][ T9800] bond7: entered promiscuous mode [ 137.780275][ T9800] bond7: entered allmulticast mode [ 137.911371][T10345] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 137.939968][T10345] 8021q: adding VLAN 0 to HW filter on device bond17 [ 137.950332][T10345] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.975083][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.977022][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.013093][ T42] audit: type=1400 audit(1782598439.875:679): avc: denied { wake_alarm } for pid=10657 comm="syz.4.1706" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.123121][T11072] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 138.136642][T11072] 8021q: adding VLAN 0 to HW filter on device bond18 [ 138.142547][T11072] bond17: (slave veth0_to_bond): Releasing backup interface [ 138.148988][T11072] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.923639][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 138.982408][T14554] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 139.000526][T14554] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.011333][T14554] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.052347][ T42] audit: type=1400 audit(1782598440.915:680): avc: denied { read } for pid=14805 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.160890][T15139] qrtr: Invalid version 0 [ 139.261674][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 139.307313][T15656] capability: warning: `syz.2.1774' uses deprecated v2 capabilities in a way that may be insecure [ 139.417987][T15969] overlayfs: failed to clone upperpath [ 139.422265][T15971] evm: overlay not supported [ 139.785944][ T41] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 139.857797][T17445] trusted_key: syz.2.1801 sent an empty control message without MSG_MORE. [ 139.945950][ T41] usb 9-1: config 0 has no interfaces? [ 139.950225][ T41] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.952991][ T41] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.955809][ T41] usb 9-1: Product: syz [ 139.957070][ T41] usb 9-1: Manufacturer: syz [ 139.959846][ T41] usb 9-1: config 0 descriptor?? [ 140.167880][ T41] usb 9-1: USB disconnect, device number 13 [ 140.813554][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 140.976248][ T9] usb 9-1: config 0 has no interfaces? [ 140.980903][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.983936][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.986445][ T9] usb 9-1: Product: syz [ 140.987717][ T9] usb 9-1: Manufacturer: syz [ 140.990762][ T9] usb 9-1: config 0 descriptor?? [ 141.197217][ T5808] usb 9-1: USB disconnect, device number 14 [ 141.794475][T25201] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 141.890003][ T42] audit: type=1400 audit(1782598443.755:681): avc: denied { name_bind 0x1000000 } for pid=25531 comm="syz.2.1896" path="socket:[34817]" dev="sockfs" ino=34817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.938178][T25590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.941774][T25590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.945012][T25638] fuse: fd is not a fuse device [ 141.945695][T25590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.949651][T25590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.022901][T25853] netlink: 'syz.4.1902': attribute type 25 has an invalid length. [ 142.097100][T26178] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 142.100023][ T42] audit: type=1400 audit(1782598443.965:682): avc: denied { map } for pid=26164 comm="syz.4.1906" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 142.385446][T27170] qrtr: Invalid version 0 [ 142.564816][T27769] netlink: 'syz.4.1929': attribute type 25 has an invalid length. [ 143.611261][T31282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 144.047854][T32749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1984'. [ 144.104747][T32749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1984'. [ 144.107944][T32749] nbd: device at index 64 is going down [ 144.181130][ T6784] udevd[6784]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 144.191004][ T6784] udevd[6784]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 144.265748][ T42] audit: type=1400 audit(1782598446.135:683): avc: denied { read } for pid=873 comm="syz.4.1991" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 144.272861][ T42] audit: type=1400 audit(1782598446.135:684): avc: denied { open } for pid=873 comm="syz.4.1991" path="/208/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 144.413004][ T5809] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x51 [ 144.639793][ T42] audit: type=1400 audit(1782598446.505:685): avc: denied { getopt } for pid=2281 comm="syz.4.2010" lport=34372 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.695575][ T42] audit: type=1400 audit(1782598446.565:686): avc: denied { create } for pid=2468 comm="syz.2.2016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.703898][ T42] audit: type=1400 audit(1782598446.575:687): avc: denied { read write } for pid=2468 comm="syz.2.2016" name="file0" dev="tmpfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.712156][ T42] audit: type=1400 audit(1782598446.575:688): avc: denied { open } for pid=2468 comm="syz.2.2016" path="/504/file0" dev="tmpfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.721044][ T42] audit: type=1400 audit(1782598446.575:689): avc: denied { ioctl } for pid=2468 comm="syz.2.2016" path="/504/file0" dev="tmpfs" ino=2581 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.872947][ T3128] fuse: fd is not a fuse device [ 144.908309][ T42] audit: type=1400 audit(1782598446.775:690): avc: denied { create } for pid=3238 comm="syz.2.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.069564][ T3768] xt_hashlimit: size too large, truncated to 1048576 [ 147.172768][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 147.192668][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2117'. [ 147.563773][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 148.378657][T13977] fuse: fd is not a fuse device [ 149.356416][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2198'. [ 150.396720][T20581] kvm: MWAIT instruction emulated as NOP! [ 151.197851][T22926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 151.226789][T22926] netlink: 'syz.2.2265': attribute type 16 has an invalid length. [ 151.229368][T22926] bond22: entered promiscuous mode [ 151.231065][T22926] bond22: entered allmulticast mode [ 152.083187][T25318] qrtr: Invalid version 0 [ 152.222429][T25616] xfrm0 speed is unknown, defaulting to 1000 [ 152.704429][ T41] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 152.927530][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 152.934158][ T41] usb 9-1: not running at top speed; connect to a high speed hub [ 152.938440][ T41] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 152.943661][ T41] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 152.946674][ T41] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 152.949762][ T41] usb 9-1: config 14 has no interface number 0 [ 152.951753][ T41] usb 9-1: config 14 has no interface number 1 [ 152.954009][ T41] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 152.958166][ T41] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 152.962438][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.966827][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.969846][ T41] usb 9-1: config 14 interface 57 has no altsetting 0 [ 152.971895][ T41] usb 9-1: config 14 interface 228 has no altsetting 0 [ 152.976388][ T41] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 152.983568][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.985926][ T41] usb 9-1: Product: syz [ 152.987524][ T41] usb 9-1: Manufacturer: syz [ 152.988902][ T41] usb 9-1: SerialNumber: syz [ 153.007219][T27103] fuse: fd is not a fuse device [ 153.043024][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 153.043040][ T42] audit: type=1800 audit(1782598454.905:696): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2328" name="nullb0" dev="tmpfs" ino=601 res=0 errno=0 [ 153.406976][ T41] legousbtower 9-1:14.57: interrupt endpoints not found [ 153.806897][ T41] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 153.812586][ T41] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 154.289955][ T42] audit: type=1400 audit(1782598456.155:697): avc: denied { setopt } for pid=31933 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.354563][ T42] audit: type=1804 audit(1782598456.225:698): pid=32104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2385" name="file0" dev="tmpfs" ino=2879 res=1 errno=0 [ 154.364858][T32203] usb 9-1: Couldn't submit interrupt_in_urb -90 [ 154.567406][ T41] usb 9-1: USB disconnect, device number 15 [ 154.588585][ T41] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 155.572811][ T3921] overlayfs: failed to clone upperpath [ 156.420240][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2475'. [ 156.562936][ T42] audit: type=1400 audit(1782598458.425:699): avc: denied { ioctl } for pid=7580 comm="syz.4.2482" path="/247/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 156.563264][ T7607] sd 0:0:0:0: PR command failed: 1026 [ 156.572450][ T7607] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 156.576245][ T7607] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 157.669399][T11875] io-wq is not configured for unbound workers [ 157.953671][ T6089] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 158.128290][ T6089] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.132844][ T6089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 158.137763][ T6089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.142161][ T6089] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.147373][ T6089] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.151081][ T6089] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.161965][ T6089] usb 9-1: config 0 descriptor?? [ 158.167647][T12002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.581798][ T6089] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 158.610999][ T6089] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 158.836483][ T5808] usb 9-1: USB disconnect, device number 16 [ 159.663634][ T42] audit: type=1400 audit(1782598461.515:700): avc: denied { override_creds } for pid=19230 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.723635][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.792066][T19525] xt_hashlimit: max too large, truncated to 1048576 [ 159.837916][T19743] overlayfs: failed to clone upperpath [ 159.952586][ T42] audit: type=1400 audit(1782598461.815:701): avc: denied { create } for pid=20155 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.961369][ T42] audit: type=1400 audit(1782598461.815:702): avc: denied { setopt } for pid=20155 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.990556][ T42] audit: type=1400 audit(1782598461.855:703): avc: denied { create } for pid=20291 comm="syz.4.2629" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.009175][ T42] audit: type=1400 audit(1782598461.875:704): avc: denied { link } for pid=20291 comm="syz.4.2629" name="#12" dev="tmpfs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.047191][ T42] audit: type=1400 audit(1782598461.915:705): avc: denied { unlink } for pid=7626 comm="syz-executor" name="file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.167319][T20810] fuse: fd is not a fuse device [ 160.331536][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 160.367104][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 161.415294][T25046] fuse: fd is not a fuse device [ 161.418063][T25046] overlayfs: failed to clone upperpath [ 161.753076][T26267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2707'. [ 161.776607][T26267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'. [ 162.070448][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 162.218666][ T42] audit: type=1400 audit(1782598464.085:706): avc: denied { connect } for pid=27800 comm="syz.2.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.882283][T30103] tipc: Started in network mode [ 162.885082][T30103] tipc: Node identity fa30813b6ffc, cluster identity 4711 [ 162.888471][T30103] tipc: Enabled bearer , priority 10 [ 162.910211][T30165] fuse: fd is not a fuse device [ 162.976489][T30367] overlayfs: failed to clone upperpath [ 163.047892][T30708] fuse: fd is not a fuse device [ 163.079544][T30765] fuse: fd is not a fuse device [ 163.131610][T30972] fuse: fd is not a fuse device [ 163.554276][T32464] mmap: syz.2.2795 (32464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.893651][ T6089] tipc: Node number set to 2513207611 [ 164.094369][ T42] audit: type=1400 audit(1782598465.965:707): avc: denied { mount } for pid=2010 comm="syz.4.2820" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 164.104500][ T2014] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.129502][ T42] audit: type=1400 audit(1782598465.995:708): avc: denied { unmount } for pid=7626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 164.203712][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 164.667361][ T4079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2845'. [ 164.701151][ T4285] fuse: fd is not a fuse device [ 164.768748][ T4521] bridge0: port 3(dummy0) entered blocking state [ 164.772936][ T4521] bridge0: port 3(dummy0) entered disabled state [ 164.778404][ T4521] dummy0: entered allmulticast mode [ 164.787866][ T4521] dummy0: entered promiscuous mode [ 164.791133][ T4521] bridge0: port 3(dummy0) entered blocking state [ 164.793765][ T4521] bridge0: port 3(dummy0) entered forwarding state [ 165.281606][ T6325] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 165.284618][ T6325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 166.162203][ T9773] qrtr: Invalid version 0 [ 166.688588][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 166.715437][T11541] bond24: entered promiscuous mode [ 166.717933][T11541] bond24: entered allmulticast mode [ 167.860585][T14814] overlayfs: failed to clone upperpath [ 167.953209][T15128] fuse: fd is not a fuse device [ 168.026566][ T64] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 168.330618][ T42] audit: type=1326 audit(1782598470.195:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16345 comm="syz.2.2998" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85079ce59 code=0x0 [ 169.204329][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'. [ 169.214692][T19602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3033'. [ 169.389453][T20239] team0: Port device vlan2 added [ 170.416276][T23722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.420912][T23722] block device autoloading is deprecated and will be removed. [ 171.459977][T26833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3119'. [ 174.065254][T25671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.265670][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3218'. [ 174.381105][ T42] audit: type=1400 audit(1782598476.245:710): avc: denied { call } for pid=4119 comm="syz.4.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.418535][ T42] audit: type=1400 audit(1782598476.285:711): avc: denied { create } for pid=4263 comm="syz.4.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.472388][ T4289] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 174.591459][ T4725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.700260][ T5169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 174.704198][ T5169] netlink: 'syz.4.3238': attribute type 7 has an invalid length. [ 174.709890][ T5169] netlink: 'syz.4.3238': attribute type 8 has an invalid length. [ 174.713041][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3238'. [ 174.720742][ T5169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 174.725058][ T5169] netlink: 'syz.4.3238': attribute type 7 has an invalid length. [ 174.728281][ T5169] netlink: 'syz.4.3238': attribute type 8 has an invalid length. [ 174.731415][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3238'. [ 175.433608][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 175.597226][ T9] usb 9-1: config index 0 descriptor too short (expected 51016, got 96) [ 175.600929][ T9] usb 9-1: config 216 has too many interfaces: 192, using maximum allowed: 32 [ 175.606620][ T9] usb 9-1: config 216 has an invalid descriptor of length 0, skipping remainder of the config [ 175.610833][ T9] usb 9-1: config 216 has 0 interfaces, different from the descriptor's value: 192 [ 175.618685][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.622542][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.626159][ T9] usb 9-1: Product: syz [ 175.627889][ T9] usb 9-1: Manufacturer: syz [ 175.705107][ T8428] fuse: fd is not a fuse device [ 175.850095][ T7766] usb 9-1: USB disconnect, device number 17 [ 175.884733][ T5739] Bluetooth: hci1: command 0x0406 tx timeout [ 175.893638][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 176.023175][ T9380] fuse: fd is not a fuse device [ 177.379606][T14001] fuse: fd is not a fuse device [ 177.405508][T14120] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 177.422122][T14120] 8021q: adding VLAN 0 to HW filter on device bond25 [ 177.427466][T14120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=14120 comm=syz.2.3340 [ 177.441919][T14120] bond25: (slave geneve3): making interface the new active one [ 177.447411][T14120] bond25: (slave geneve3): Enslaving as an active interface with an up link [ 177.751947][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888000252800: rx timeout, send abort [ 177.758187][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888000126c00: rx timeout, send abort [ 177.761035][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888000126c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.765678][ T42] audit: type=1400 audit(1782598479.635:712): avc: denied { read } for pid=5123 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 177.765729][ T42] audit: type=1400 audit(1782598479.635:713): avc: denied { search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.765751][ T42] audit: type=1400 audit(1782598479.635:714): avc: denied { write search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.765771][ T42] audit: type=1400 audit(1782598479.635:715): avc: denied { add_name } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.765791][ T42] audit: type=1400 audit(1782598479.635:716): avc: denied { create } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.765811][ T42] audit: type=1400 audit(1782598479.635:717): avc: denied { append open } for pid=5123 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.765832][ T42] audit: type=1400 audit(1782598479.635:718): avc: denied { getattr } for pid=5123 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.257478][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888000252800: abort rx timeout. Force session deactivation [ 178.327056][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.332430][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.337034][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.341184][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.345149][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.348960][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.353800][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.358996][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 178.365937][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.4.3373 [ 179.366637][ T42] audit: type=1400 audit(1782598481.235:719): avc: denied { setopt } for pid=20697 comm="syz.4.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.873653][ T41] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 180.045348][ T41] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.048297][ T41] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 180.051443][ T41] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.054410][ T41] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.057923][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.061471][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.066265][ T41] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.069104][ T41] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.071612][ T41] usb 9-1: Product: syz [ 180.072895][ T41] usb 9-1: Manufacturer: syz [ 180.077004][T21739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.080176][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 180.081923][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 180.087579][ T41] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 180.089523][ T41] cdc_wdm 9-1:1.0: Unknown control protocol [ 180.281936][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.284012][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.286074][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.288069][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.290211][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.292214][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.295164][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.297192][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.299314][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.301417][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.303411][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.305471][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.307530][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.309519][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.311662][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.313682][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.315744][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.317730][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.319756][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 180.321753][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 180.365401][ T7767] usb 9-1: USB disconnect, device number 18 [ 180.365490][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 180.941096][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 180.941106][ T42] audit: type=1400 audit(1782598482.805:722): avc: denied { getopt } for pid=27179 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.154177][T27963] binder_alloc: 27962: binder_alloc_buf, no vma [ 181.401736][T28730] netlink: 'syz.2.3507': attribute type 4 has an invalid length. [ 181.414868][T28730] netlink: 'syz.2.3507': attribute type 4 has an invalid length. [ 181.432011][T28883] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 181.446373][T28883] 8021q: adding VLAN 0 to HW filter on device bond10 [ 181.484946][T28883] bond10: (slave veth3): Enslaving as an active interface with a down link [ 181.515257][T28883] bond10: (slave dummy0): making interface the new active one [ 181.518375][T28883] dummy0: entered promiscuous mode [ 181.520236][T28883] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 181.530926][T28883] netlink: 'syz.4.3510': attribute type 10 has an invalid length. [ 181.533384][T28883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3510'. [ 181.540878][T28883] bond10: (slave dummy0): Releasing active interface [ 181.608008][ T42] audit: type=1400 audit(1782598483.475:723): avc: denied { transfer } for pid=29403 comm="syz.4.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 181.761971][T29413] binder: 29403:29413 ioctl c0306201 2000000009c0 returned -14 [ 182.679779][ T1583] syzkaller0: entered promiscuous mode [ 182.681548][ T1583] syzkaller0: entered allmulticast mode [ 184.066185][ T7673] veth1_macvtap: left promiscuous mode [ 184.183771][ T42] audit: type=1400 audit(1782598486.055:724): avc: denied { write } for pid=8153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.221183][ T42] audit: type=1400 audit(1782598486.085:725): avc: denied { write } for pid=8331 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.256905][ T5443] veth1_macvtap: entered promiscuous mode [ 184.345085][ T42] audit: type=1400 audit(1782598486.215:726): avc: denied { write } for pid=8743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.388181][ T42] audit: type=1400 audit(1782598486.255:727): avc: denied { write } for pid=8997 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.500837][ T9382] syzkaller0: entered promiscuous mode [ 184.502494][ T9382] syzkaller0: entered allmulticast mode [ 184.622640][ T9839] syzkaller0: entered promiscuous mode [ 184.626111][ T9839] syzkaller0: entered allmulticast mode [ 184.932388][ T5733] Bluetooth: hci1: unexpected event for opcode 0x080b [ 185.196480][T12196] syzkaller0: entered promiscuous mode [ 185.198511][T12196] syzkaller0: entered allmulticast mode [ 185.730695][T13148] fuse: fd is not a fuse device [ 185.750147][ T42] audit: type=1400 audit(1782598487.615:728): avc: denied { read } for pid=13147 comm="syz.4.3705" lport=44417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.880419][ T42] audit: type=1800 audit(1782598487.745:729): pid=13740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3707" name="nullb0" dev="tmpfs" ino=601 res=0 errno=0 [ 185.942387][T13894] team0: Port device vlan3 added [ 186.585918][T16508] fuse: Unknown parameter '00000000000000000000' [ 186.634440][ T42] audit: type=1400 audit(1782598488.505:730): avc: denied { append } for pid=16657 comm="syz.4.3744" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 186.973627][ T34] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 187.133593][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 187.136405][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 187.141536][ T34] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.146037][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.149637][ T34] usb 9-1: Product: syz [ 187.151369][ T34] usb 9-1: Manufacturer: syz [ 187.153280][ T34] usb 9-1: SerialNumber: syz [ 187.158308][ T34] usb 9-1: config 0 descriptor?? [ 187.167632][ T34] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.171404][ T34] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 187.532319][T20156] fuse: fd is not a fuse device [ 187.770396][ T34] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 188.093432][T21783] fuse: fd is not a fuse device [ 188.182970][ T34] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 188.190006][ T34] em28xx 9-1:0.0: board has no eeprom [ 188.256650][T17014] em28xx 9-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 188.693611][ T34] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 188.696636][ T34] em28xx 9-1:0.0: dvb set to bulk mode. [ 188.699671][ T41] em28xx 9-1:0.0: Binding DVB extension [ 188.708243][ T34] usb 9-1: USB disconnect, device number 19 [ 188.714735][ T34] em28xx 9-1:0.0: Disconnecting em28xx [ 188.732735][ T41] em28xx 9-1:0.0: Registering input extension [ 188.735493][ T34] em28xx 9-1:0.0: Closing input extension [ 188.759632][ T34] em28xx 9-1:0.0: Freeing device [ 189.234074][ T42] audit: type=1804 audit(1782598491.095:731): pid=22808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.3813" name="/newroot/349/file1" dev="fuse" ino=1 res=1 errno=0 [ 189.247410][ T42] audit: type=1800 audit(1782598491.115:732): pid=22808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3813" name="/" dev="fuse" ino=1 res=0 errno=0 [ 189.279378][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3817'. [ 190.132551][T25166] fuse: fd is not a fuse device [ 192.337602][T25325] syz_tun: entered allmulticast mode [ 192.345298][T25325] dvmrp6: entered allmulticast mode [ 192.348877][T25319] syz_tun: left allmulticast mode [ 192.542938][T26058] binder_alloc: 26049: binder_alloc_buf size 562949953437696 failed, no address space [ 192.547526][T26058] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 192.723030][T26491] syzkaller0: entered promiscuous mode [ 192.725161][T26491] syzkaller0: entered allmulticast mode [ 192.946513][T27057] qrtr: Invalid version 0 [ 193.002581][T27221] tipc: Enabled bearer , priority 0 [ 193.006068][T27221] syzkaller0: entered promiscuous mode [ 193.010326][T27221] syzkaller0: entered allmulticast mode [ 193.019636][T27221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.031851][T27221] tipc: Resetting bearer [ 193.036659][T27202] tipc: Resetting bearer [ 193.046745][T27202] tipc: Disabling bearer [ 193.145370][T27753] netlink: 'syz.4.3886': attribute type 39 has an invalid length. [ 193.270936][ T42] audit: type=1400 audit(1782598495.135:733): avc: denied { create } for pid=28166 comm="syz.2.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 193.296750][T28309] fuse: fd is not a fuse device [ 193.332240][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 193.337160][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 193.383787][T28547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3901'. [ 193.389046][T28547] netlink: 'syz.2.3901': attribute type 7 has an invalid length. [ 193.392275][T28547] netlink: 'syz.2.3901': attribute type 8 has an invalid length. [ 193.394968][T28547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'. [ 193.400563][T28547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3901'. [ 193.403929][T28556] syzkaller0: entered promiscuous mode [ 193.405717][T28556] syzkaller0: entered allmulticast mode [ 193.407534][T28547] netlink: 'syz.2.3901': attribute type 7 has an invalid length. [ 193.410085][T28547] netlink: 'syz.2.3901': attribute type 8 has an invalid length. [ 193.416200][T28547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'. [ 193.542784][ T64] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 193.669924][T29359] orangefs_devreq_write_iter: total:4: must be at least:8240: [ 193.672485][T29563] fuse: fd is not a fuse device [ 193.790207][ T42] audit: type=1400 audit(1782598495.655:734): avc: denied { map } for pid=29802 comm="syz.2.3923" path="socket:[52253]" dev="sockfs" ino=52253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.029155][ T42] audit: type=1400 audit(1782598495.895:735): avc: denied { create } for pid=30502 comm="syz.2.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.035805][ T42] audit: type=1400 audit(1782598495.905:736): avc: denied { ioctl } for pid=30502 comm="syz.2.3934" path="socket:[51594]" dev="sockfs" ino=51594 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.181444][T31348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3943'. [ 194.225067][T31480] overlayfs: failed to clone upperpath [ 194.393662][ T5817] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 194.544087][ T5817] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 194.547299][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.550092][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.553371][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.556363][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.559177][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.562458][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.569122][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.571882][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.575450][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.578210][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.581041][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.584560][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.587307][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.590104][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.593347][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.596337][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.599083][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.602323][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.606236][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.608958][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.612209][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.615166][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.617861][ T5817] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.621133][ T5817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.624777][ T5817] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.627591][ T5817] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.630109][ T5817] usb 9-1: Product: syz [ 194.631389][ T5817] usb 9-1: Manufacturer: syz [ 194.637425][ T5817] usb 9-1: SerialNumber: syz [ 194.641854][ T5817] usb 9-1: config 0 descriptor?? [ 194.647913][ T5817] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.650240][ T64] Bluetooth: hci1: unexpected event for opcode 0x041b [ 194.677685][T32596] fuse: fd is not a fuse device [ 194.909778][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 194.910280][ T9] usb 9-1: USB disconnect, device number 20 [ 194.917190][ T9] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 194.938797][ T42] audit: type=1400 audit(1782598496.805:737): avc: denied { write } for pid=32747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.011546][ T42] audit: type=1400 audit(1782598496.875:738): avc: denied { write } for pid=32751 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.327059][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 195.454293][ T303] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 195.508843][T32596] orangefs_mount: mount request failed with -4 [ 195.611845][ T491] kvm: pic: non byte write [ 195.743356][ T42] audit: type=1400 audit(1782598497.605:739): avc: denied { write } for pid=695 comm="syz.4.3969" name="/" dev="9p" ino=71827947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.752623][ T42] audit: type=1400 audit(1782598497.615:740): avc: denied { add_name } for pid=695 comm="syz.4.3969" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.761084][ T42] audit: type=1400 audit(1782598497.615:741): avc: denied { create } for pid=695 comm="syz.4.3969" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 195.768313][ T42] audit: type=1400 audit(1782598497.615:742): avc: denied { associate } for pid=695 comm="syz.4.3969" name="blkio.throttle.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 196.027418][ T1478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3983'. [ 196.472853][ T2101] syzkaller0: entered promiscuous mode [ 196.475390][ T2101] syzkaller0: entered allmulticast mode [ 196.727942][ T2625] kvm: pic: non byte write [ 196.843787][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 197.015742][ T3535] fuse: fd is not a fuse device [ 197.170824][ T5733] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 197.238495][ T64] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 199.405211][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.407671][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.850591][ T5733] Bluetooth: hci1: unexpected event for opcode 0x202d [ 200.889430][ T5063] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 200.889430][ T5063] program syz.4.4034 not setting count and/or reply_len properly [ 201.028255][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 201.028267][ T42] audit: type=1804 audit(1782598502.895:757): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.4042" name="file0" dev="tmpfs" ino=3924 res=1 errno=0 [ 201.072111][ T5733] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 201.914228][ T9356] xfrm0 speed is unknown, defaulting to 1000 [ 202.226892][T10535] syzkaller0: entered promiscuous mode [ 202.228662][T10535] syzkaller0: entered allmulticast mode [ 203.172692][T12775] kAFS: unable to lookup cell '(,c¾ûL' [ 203.176276][T12775] kAFS: unable to lookup cell '(,c¾ûL' [ 203.221652][T12941] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4137'. [ 204.014784][T15773] syzkaller0: entered promiscuous mode [ 204.016639][T15773] syzkaller0: entered allmulticast mode [ 205.582119][T20908] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 205.584921][T20908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.590915][T20908] vhci_hcd vhci_hcd.0: Device attached [ 205.595976][T20920] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 205.603163][ T5809] vhci_hcd vhci_hcd.4: stop threads [ 205.605984][ T5809] vhci_hcd vhci_hcd.4: release socket [ 205.608206][ T5809] vhci_hcd vhci_hcd.4: disconnect device [ 206.188729][T22935] syzkaller0: entered promiscuous mode [ 206.191065][T22935] syzkaller0: entered allmulticast mode [ 206.435241][ T5733] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 206.833668][ T41] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 206.986216][ T41] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.990345][ T41] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.994170][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.998446][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.002209][ T41] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.005971][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.015660][ T41] hub 9-1:1.0: bad descriptor, ignoring hub [ 207.018193][ T41] hub 9-1:1.0: probe with driver hub failed with error -5 [ 207.021628][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 207.026350][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 207.033308][ T41] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 207.036432][ T41] cdc_wdm 9-1:1.0: Unknown control protocol [ 207.323161][T24134] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 207.359214][ T5817] usb 9-1: USB disconnect, device number 21 [ 208.293710][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 208.453704][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 208.457321][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.462568][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.467076][ T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.470849][ T9] usb 9-1: Product: syz [ 208.472199][ T9] usb 9-1: Manufacturer: syz [ 208.473783][ T9] usb 9-1: SerialNumber: syz [ 208.476694][ T9] usb 9-1: config 0 descriptor?? [ 208.479368][T28454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.748368][ T24] usb 9-1: USB disconnect, device number 22 [ 209.676479][ T1292] xfrm0 speed is unknown, defaulting to 1000 [ 209.704420][ T5817] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 209.869880][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.875353][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.879667][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.884978][ T5817] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.888440][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.899997][ T5817] usb 9-1: config 0 descriptor?? [ 210.315749][ T5817] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 212.229949][ T2075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4409'. [ 212.694419][ T5817] usb 9-1: reset high-speed USB device number 23 using dummy_hcd [ 212.705153][ T5817] usb 9-1: device reset changed ep0 maxpacket size! [ 212.716962][ T41] usb 9-1: USB disconnect, device number 23 [ 212.873646][ T41] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 213.023603][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 213.028274][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 213.032500][ T41] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 213.035847][ T41] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 213.038515][ T41] usb 9-1: config 14 has no interface number 0 [ 213.040496][ T41] usb 9-1: config 14 has no interface number 1 [ 213.043079][ T41] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 213.047417][ T41] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 213.051960][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 213.056616][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 213.061130][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 213.065498][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.069365][ T41] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.074618][ T41] usb 9-1: config 14 interface 57 has no altsetting 0 [ 213.077339][ T41] usb 9-1: config 14 interface 228 has no altsetting 0 [ 213.082501][ T41] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 213.086366][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.089527][ T41] usb 9-1: Product: syz [ 213.091369][ T41] usb 9-1: Manufacturer: syz [ 213.093246][ T41] usb 9-1: SerialNumber: syz [ 213.304370][ T41] legousbtower 9-1:14.57: interrupt endpoints not found [ 213.337050][ T4463] pimreg: entered allmulticast mode [ 213.706013][ T41] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 213.711512][ T41] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 214.923899][ T2485] usb 9-1: LEGO USB Tower reset control request failed [ 214.928318][ T41] usb 9-1: USB disconnect, device number 24 [ 214.936453][ T41] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 215.794600][ T42] audit: type=1400 audit(1782598517.665:758): avc: denied { create } for pid=6492 comm="syz.4.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.800409][ T42] audit: type=1400 audit(1782598517.665:759): avc: denied { bind } for pid=6492 comm="syz.4.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.011680][ T7009] xfrm0 speed is unknown, defaulting to 1000 [ 216.952240][T10103] syzkaller0: entered promiscuous mode [ 216.954740][T10103] syzkaller0: entered allmulticast mode [ 218.556127][T10665] xfrm0 speed is unknown, defaulting to 1000 [ 219.745836][T18337] kvm: kvm [18330]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 219.749916][T18337] kvm: kvm [18330]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 219.883692][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.173243][T19848] input: syz0 as /devices/virtual/input/input16 [ 220.270337][ T42] audit: type=1400 audit(1782598522.135:760): avc: denied { write } for pid=19922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.332472][ T42] audit: type=1400 audit(1782598522.195:761): avc: denied { write } for pid=20146 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.437734][ T42] audit: type=1400 audit(1782598522.305:762): avc: denied { write } for pid=20464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.500741][ T42] audit: type=1400 audit(1782598522.365:763): avc: denied { write } for pid=20725 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.607993][ T42] audit: type=1400 audit(1782598522.475:764): avc: denied { write } for pid=20923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.674950][ T42] audit: type=1400 audit(1782598522.545:765): avc: denied { write } for pid=21163 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.754941][ T42] audit: type=1400 audit(1782598522.625:766): avc: denied { write } for pid=21367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.793582][ T34] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 220.832629][ T42] audit: type=1400 audit(1782598522.695:767): avc: denied { write } for pid=21552 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.931667][ T42] audit: type=1400 audit(1782598522.795:768): avc: denied { write } for pid=21763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.953778][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 220.957743][ T34] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 220.960358][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.963560][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.967400][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.970453][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.975663][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.979160][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.987759][ T42] audit: type=1400 audit(1782598522.855:769): avc: denied { write } for pid=21966 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.087830][ T42] audit: type=1400 audit(1782598522.955:770): avc: denied { write } for pid=22190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.146213][ T42] audit: type=1400 audit(1782598523.015:771): avc: denied { write } for pid=22421 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.189914][ T34] usb 9-1: usb_control_msg returned -32 [ 221.191677][ T34] usbtmc 9-1:16.0: can't read capabilities [ 221.555910][T23897] usbtmc 9-1:16.0: control status returned 0 [ 221.757501][ T7767] usb 9-1: USB disconnect, device number 25 [ 221.996588][T25319] fuse: fd is not a fuse device [ 222.363632][ T5733] Bluetooth: hci1: command 0x0406 tx timeout [ 222.366055][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 222.371995][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 222.578313][T26389] veth0_to_team: entered promiscuous mode [ 222.581949][T26389] erspan0: entered promiscuous mode [ 223.653204][T30139] syzkaller0: entered promiscuous mode [ 223.656135][T30139] syzkaller0: entered allmulticast mode [ 223.689065][T30200] fuse: fd is not a fuse device [ 223.780750][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 224.453589][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 224.453651][ T5733] Bluetooth: hci0: command 0x0406 tx timeout [ 224.455841][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 225.255551][T30978] fuse: fd is not a fuse device [ 225.959671][T32543] fuse: fd is not a fuse device [ 226.191158][ T658] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.523989][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 226.530579][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 226.533901][ T5733] Bluetooth: hci2: command 0x0406 tx timeout [ 226.946652][ T2875] syzkaller0: entered promiscuous mode [ 226.948376][ T2875] syzkaller0: entered allmulticast mode [ 227.797696][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'. [ 227.800504][ T5459] netlink: 'syz.2.4880': attribute type 15 has an invalid length. [ 227.810667][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'. [ 227.810742][ T5602] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.813564][ T5459] netlink: 'syz.2.4880': attribute type 15 has an invalid length. [ 227.831795][ T5602] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.842128][ T5602] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.846730][ T5602] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.763728][ T5733] Bluetooth: hci4: command 0x0406 tx timeout [ 228.768215][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 228.772987][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 231.024366][ T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 231.173596][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 231.176899][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.180650][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.186742][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.198975][ T9] usb 9-1: config 0 descriptor?? [ 231.408320][ T9] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 231.475821][T15675] fuse: fd is not a fuse device [ 231.608415][ T9] usb 9-1: USB disconnect, device number 26 [ 232.579068][T17643] fuse: fd is not a fuse device [ 232.882429][T18117] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.958208][T18335] fuse: fd is not a fuse device [ 233.191861][ T42] audit: type=1400 audit(1782598535.055:772): avc: denied { mount } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.199920][ T42] audit: type=1400 audit(1782598535.055:773): avc: denied { search } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.216787][ T42] audit: type=1400 audit(1782598535.055:774): avc: denied { search } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.225290][ T42] audit: type=1400 audit(1782598535.055:775): avc: denied { read } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.232849][ T42] audit: type=1400 audit(1782598535.055:776): avc: denied { read open } for pid=19012 comm="syz.4.5071" path="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.241606][ T42] audit: type=1400 audit(1782598535.065:777): avc: denied { search } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.250609][ T42] audit: type=1400 audit(1782598535.065:778): avc: denied { read } for pid=19012 comm="syz.4.5071" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.343257][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 233.525118][ T34] bridge0: entered promiscuous mode [ 234.225045][T21678] fuse: fd is not a fuse device [ 234.996359][T24153] selinux_netlink_send: 2629 callbacks suppressed [ 234.996372][T24153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24153 comm=syz.4.5141 [ 235.940463][T27224] syzkaller0: entered promiscuous mode [ 235.942728][T27224] syzkaller0: entered allmulticast mode [ 237.139447][T31176] overlayfs: failed to clone upperpath [ 237.148829][ T42] audit: type=1400 audit(1782598539.015:779): avc: denied { remount } for pid=31124 comm="syz.2.5226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 237.881085][ T42] audit: type=1400 audit(1782598539.745:780): avc: denied { shutdown } for pid=761 comm="syz.4.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.074676][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9f00 [ 238.077941][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9f00 [ 238.118531][ T1467] fuse: fd is not a fuse device [ 238.529276][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xea00 [ 238.532299][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x5800 [ 238.556795][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x7e00 [ 238.579748][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xec00 [ 238.584296][ T1047] kvm: kvm [1037]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5a00 [ 238.812623][ T42] audit: type=1400 audit(1782598540.675:781): avc: denied { mounton } for pid=3485 comm="syz.2.5289" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.846710][ T42] audit: type=1400 audit(1782598540.715:782): avc: denied { read } for pid=3574 comm="syz.2.5292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.829413][ T42] audit: type=1400 audit(1782598542.695:783): avc: denied { setattr } for pid=6005 comm="syz.4.5320" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 240.951809][ T42] audit: type=1400 audit(1782598542.815:784): avc: denied { read } for pid=6589 comm="syz.2.5332" path="socket:[62080]" dev="sockfs" ino=62080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.001788][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5335'. [ 241.593605][ T42] audit: type=1400 audit(1782598543.455:785): avc: denied { write } for pid=8229 comm="syz.4.5354" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 241.698555][ T42] audit: type=1400 audit(1782598543.565:786): avc: denied { bind } for pid=8795 comm="syz.4.5360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.708116][ T42] audit: type=1400 audit(1782598543.565:787): avc: denied { node_bind } for pid=8795 comm="syz.4.5360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 241.784468][ T8980] syzkaller0: entered promiscuous mode [ 241.786737][ T8980] syzkaller0: entered allmulticast mode [ 243.094230][T10907] overlayfs: failed to clone upperpath [ 243.104605][T10907] overlayfs: failed to clone upperpath [ 243.206102][ T42] audit: type=1400 audit(1782598545.065:788): avc: denied { connect } for pid=11066 comm="syz.2.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 243.224839][ T42] audit: type=1400 audit(1782598545.075:789): avc: denied { write } for pid=11066 comm="syz.2.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.849546][T15887] syzkaller0: entered promiscuous mode [ 244.851853][T15887] syzkaller0: entered allmulticast mode [ 245.621857][T18143] fuse: fd is not a fuse device [ 245.787097][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'. [ 246.725322][T21293] overlayfs: failed to clone upperpath [ 246.802984][T21574] fuse: fd is not a fuse device [ 246.869663][T21770] fuse: fd is not a fuse device [ 247.328494][T23050] fuse: fd is not a fuse device [ 247.395670][ T42] audit: type=1326 audit(1782598549.265:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23127 comm="syz.2.5554" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85079ce59 code=0x0 [ 247.505094][T23427] syzkaller0: entered promiscuous mode [ 247.507425][T23427] syzkaller0: entered allmulticast mode [ 249.355715][T25403] syzkaller0: entered promiscuous mode [ 249.358026][T25403] syzkaller0: entered allmulticast mode [ 251.203141][ T42] audit: type=1804 audit(1782598553.065:791): pid=29176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.5624" name="/newroot/532/bus/file0" dev="overlay" ino=2830 res=1 errno=0 [ 253.147461][T30809] fuse: fd is not a fuse device [ 253.193892][T31002] fuse: fd is not a fuse device [ 253.338194][T31421] fuse: fd is not a fuse device [ 253.569923][ T42] audit: type=1400 audit(1782598555.435:792): avc: denied { name_bind } for pid=32029 comm="syz.2.5671" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 253.641711][T32239] fuse: fd is not a fuse device [ 254.547711][ T3278] fuse: fd is not a fuse device [ 254.583217][ T3444] fuse: fd is not a fuse device [ 254.770433][ T4078] fuse: fd is not a fuse device [ 254.915681][ T4619] fuse: fd is not a fuse device [ 254.942918][ T4687] fuse: fd is not a fuse device [ 254.977048][ T4825] overlayfs: failed to clone upperpath [ 255.123428][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5744'. [ 256.307514][ T8800] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4068aea3, magic ae != 6b] [ 256.363418][ T42] audit: type=1400 audit(1782598558.225:793): avc: denied { ioctl } for pid=9146 comm="syz.4.5795" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.381649][ T42] audit: type=1400 audit(1782598558.245:794): avc: denied { cmd } for pid=9146 comm="syz.4.5795" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=io_uring permissive=1 [ 257.310779][T12329] syzkaller0: entered promiscuous mode [ 257.313133][T12329] syzkaller0: entered allmulticast mode [ 257.526951][ T42] audit: type=1400 audit(1782598559.395:795): avc: denied { read } for pid=13031 comm="syz.4.5840" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 257.535805][ T42] audit: type=1400 audit(1782598559.395:796): avc: denied { open } for pid=13031 comm="syz.4.5840" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 257.580093][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803d93f400: rx timeout, send abort [ 257.584662][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803d93f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 257.684099][ T42] audit: type=1400 audit(1782598559.555:797): avc: denied { setopt } for pid=13360 comm="syz.2.5846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 257.691514][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5846'. [ 257.960074][T14068] bond11: entered allmulticast mode [ 257.963615][T14068] 8021q: adding VLAN 0 to HW filter on device bond11 [ 257.981037][T14068] ip6gretap1: entered allmulticast mode [ 257.985217][T14068] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 258.067004][T27216] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.194333][ T7067] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.472242][T15779] syzkaller0: entered promiscuous mode [ 258.474801][T15779] syzkaller0: entered allmulticast mode [ 258.848243][T16804] syzkaller0: entered promiscuous mode [ 258.850478][T16804] syzkaller0: entered allmulticast mode [ 260.843622][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 260.856226][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.858503][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.597154][T28424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28424 comm=syz.2.6031 [ 262.662354][T28512] fuse: fd is not a fuse device [ 263.036937][T29530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6048'. [ 263.313622][ T7766] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 263.478143][ T7766] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.487709][ T7766] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.498030][ T7766] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.505608][ T7766] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.509257][ T7766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.522138][ T7766] hub 9-1:1.0: bad descriptor, ignoring hub [ 263.524982][ T7766] hub 9-1:1.0: probe with driver hub failed with error -5 [ 263.725100][T29594] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 263.843937][ T24] usb 9-1: USB disconnect, device number 27 [ 264.280311][ T1127] syzkaller0: entered promiscuous mode [ 264.282281][ T1127] syzkaller0: entered allmulticast mode [ 264.419260][ T1710] tipc: Enabling of bearer rejected, failed to enable media [ 265.136819][ T42] audit: type=1400 audit(1782598567.005:798): avc: denied { connect } for pid=4059 comm="syz.4.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.608174][ T5320] bond0: (slave syz_tun): Releasing backup interface [ 265.614014][ T5320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 265.624559][ T5320] team0: Device xfrm0 is of different type [ 265.629866][ T5320] tipc: Enabled bearer , priority 0 [ 265.661005][ T5538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.100837][T10406] syzkaller0: entered promiscuous mode [ 267.103159][T10406] syzkaller0: entered allmulticast mode [ 267.287857][T10933] syzkaller0: entered promiscuous mode [ 267.289748][T10933] syzkaller0: entered allmulticast mode [ 267.304237][T10933] tipc: Enabled bearer , priority 0 [ 267.308980][T10933] tipc: Resetting bearer [ 267.318570][T10919] tipc: Resetting bearer [ 267.341816][T10919] tipc: Disabling bearer [ 267.436162][T11431] binder: 11429:11431 ioctl 4018620d 0 returned -22 [ 267.439172][T11431] binder: 11429:11431 ioctl c0306201 0 returned -14 [ 267.966457][T13063] syzkaller0: entered promiscuous mode [ 267.968497][T13063] syzkaller0: entered allmulticast mode [ 268.310595][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.177115][T16471] vivid-003: disconnect [ 269.179729][T16471] vivid-003: reconnect [ 269.275502][T16760] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6311'. [ 269.337454][T16922] xt_hashlimit: size too large, truncated to 1048576 [ 269.512266][T17474] [ 269.513347][T17474] ============================================ [ 269.515839][T17474] WARNING: possible recursive locking detected [ 269.518321][T17474] syzkaller #0 Not tainted [ 269.520575][T17474] -------------------------------------------- [ 269.523055][T17474] syz.4.6324/17474 is trying to acquire lock: [ 269.525505][T17474] ffff88803435a0f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 269.529062][T17474] [ 269.529062][T17474] but task is already holding lock: [ 269.531962][T17474] ffff88803435c8f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 269.535829][T17474] [ 269.535829][T17474] other info that might help us debug this: [ 269.539019][T17474] Possible unsafe locking scenario: [ 269.539019][T17474] [ 269.541972][T17474] CPU0 [ 269.543385][T17474] ---- [ 269.544796][T17474] lock(&dev->mutex#4); [ 269.546583][T17474] lock(&dev->mutex#4); [ 269.548309][T17474] [ 269.548309][T17474] *** DEADLOCK *** [ 269.548309][T17474] [ 269.551612][T17474] May be due to missing lock nesting notation [ 269.551612][T17474] [ 269.555007][T17474] 1 lock held by syz.4.6324/17474: [ 269.557064][T17474] #0: ffff88803435c8f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 269.561138][T17474] [ 269.561138][T17474] stack backtrace: [ 269.563548][T17474] CPU: 2 UID: 0 PID: 17474 Comm: syz.4.6324 Not tainted syzkaller #0 PREEMPT(full) [ 269.563572][T17474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.563582][T17474] Call Trace: [ 269.563588][T17474] [ 269.563594][T17474] dump_stack_lvl+0x100/0x190 [ 269.563622][T17474] print_deadlock_bug.cold+0xbd/0xca [ 269.563653][T17474] __lock_acquire+0x1256/0x1a40 [ 269.563679][T17474] lock_acquire+0x1b9/0x370 [ 269.563702][T17474] ? comedi_do_insn+0x2e/0x360 [ 269.563730][T17474] ? __pfx___might_resched+0x10/0x10 [ 269.563757][T17474] __mutex_lock+0x1a4/0x1bd0 [ 269.563785][T17474] ? comedi_do_insn+0x2e/0x360 [ 269.563813][T17474] ? comedi_do_insn+0x2e/0x360 [ 269.563841][T17474] ? __pfx___mutex_lock+0x10/0x10 [ 269.563870][T17474] ? __pfx___might_resched+0x10/0x10 [ 269.563892][T17474] ? rcu_is_watching+0x12/0xc0 [ 269.563919][T17474] ? __up_read+0x333/0x980 [ 269.563944][T17474] ? __lock_acquire+0x49f/0x1a40 [ 269.563967][T17474] ? comedi_do_insn+0x2e/0x360 [ 269.564000][T17474] comedi_do_insn+0x2e/0x360 [ 269.564030][T17474] comedi_dio_bitfield2+0x3c0/0x420 [ 269.564048][T17474] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 269.564065][T17474] ? find_held_lock+0x2b/0x80 [ 269.564084][T17474] ? lockdep_hardirqs_on+0x78/0x100 [ 269.564110][T17474] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 269.564134][T17474] ? stack_depot_save_flags+0x479/0x9d0 [ 269.564172][T17474] bonding_dio_insn_bits+0x2b9/0x570 [ 269.564196][T17474] ? comedi_unlocked_ioctl+0xf68/0x3310 [ 269.564218][T17474] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 269.564242][T17474] insn_rw_emulate_bits+0x2a2/0x5e0 [ 269.564269][T17474] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 269.564297][T17474] ? comedi_check_chanlist+0x27e/0x300 [ 269.564323][T17474] parse_insn+0x83f/0x19f0 [ 269.564341][T17474] ? __kasan_kmalloc+0xaa/0xb0 [ 269.564362][T17474] ? __pfx_parse_insn+0x10/0x10 [ 269.564406][T17474] ? do_insn_ioctl+0xda/0x4e0 [ 269.564431][T17474] do_insn_ioctl+0x152/0x4e0 [ 269.564453][T17474] comedi_unlocked_ioctl+0xf68/0x3310 [ 269.564478][T17474] ? tomoyo_path_number_perm+0x188/0x580 [ 269.564504][T17474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 269.564527][T17474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.564549][T17474] ? do_vfs_ioctl+0x226/0x13e0 [ 269.564576][T17474] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 269.564602][T17474] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 269.564634][T17474] ? __fget_files+0x215/0x3d0 [ 269.564651][T17474] ? hook_file_ioctl_common+0x140/0x440 [ 269.564674][T17474] ? selinux_file_ioctl+0x13b/0x290 [ 269.564700][T17474] ? selinux_file_ioctl+0xb6/0x290 [ 269.564726][T17474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 269.564749][T17474] __x64_sys_ioctl+0x18e/0x210 [ 269.564775][T17474] do_syscall_64+0x115/0x870 [ 269.564801][T17474] ? clear_bhb_loop+0x40/0x90 [ 269.564823][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.564843][T17474] RIP: 0033:0x7f9a0d59ce59 [ 269.564860][T17474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.564878][T17474] RSP: 002b:00007f9a0e40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.564896][T17474] RAX: ffffffffffffffda RBX: 00007f9a0d815fa0 RCX: 00007f9a0d59ce59 [ 269.564907][T17474] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 269.564919][T17474] RBP: 00007f9a0d632e6f R08: 0000000000000000 R09: 0000000000000000 [ 269.564930][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.564941][T17474] R13: 00007f9a0d816038 R14: 00007f9a0d815fa0 R15: 00007fff138218d8 [ 269.564959][T17474]