last executing test programs: 43.022257299s ago: executing program 3 (id=1031): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 42.89076756s ago: executing program 3 (id=1034): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 42.831362099s ago: executing program 3 (id=1037): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 42.80835893s ago: executing program 3 (id=1038): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 42.731384521s ago: executing program 3 (id=1040): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 42.388402945s ago: executing program 3 (id=1055): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 42.281312207s ago: executing program 32 (id=1055): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 8.927587083s ago: executing program 1 (id=1811): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f00000003c0)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) 8.857761159s ago: executing program 1 (id=1813): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 8.780589628s ago: executing program 1 (id=1815): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x22, 0x0, 0x0) 8.780265035s ago: executing program 1 (id=1816): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8.688838661s ago: executing program 1 (id=1818): socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x400, 0xfffffffc, 0x2d0}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 8.383172756s ago: executing program 1 (id=1826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b67", 0x8, 0x8010, 0x0, 0x0) 8.235701004s ago: executing program 33 (id=1826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b67", 0x8, 0x8010, 0x0, 0x0) 3.239923407s ago: executing program 2 (id=1926): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="9d8a4d910050b3beb235239c3f70"}}}}}}, 0x0) 3.180970627s ago: executing program 2 (id=1927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x321000, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.309733853s ago: executing program 2 (id=1934): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 2.309467658s ago: executing program 2 (id=1935): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x1, 0x5, {0x5, 0xe, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x81, 0x0, 0x0}) 1.347311077s ago: executing program 4 (id=1956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 738.592673ms ago: executing program 2 (id=1961): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0xff}, 0x18) 671.039527ms ago: executing program 2 (id=1963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) 531.025133ms ago: executing program 5 (id=1967): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b8441"], 0xdd12}], 0x1}, 0x20040890) 530.732979ms ago: executing program 5 (id=1968): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r3, 0x11, 0x0, r1, @void, @value=r3}, 0x20) 484.843188ms ago: executing program 4 (id=1969): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 484.695939ms ago: executing program 5 (id=1970): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x8001, 0x3ff, 0xfffffff1}, &(0x7f00000000c0)=0x14) 409.483931ms ago: executing program 5 (id=1971): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 402.724145ms ago: executing program 5 (id=1973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x2, 0xffffffff, 0x1, 0x401, 0xb, 0x6, 0x2}, {0x1, 0x4, 0x3, 0x8000, 0x27, 0x7, 0x3}, {0x80000007, 0x8, 0x3, 0x3fb, 0x7ffffdff, 0xae, 0xffff}, {0x80000019, 0xe5f, 0x3, 0x2, 0x2df3, 0x6, 0x5}, {0x80000000, 0x222be, 0x1, 0xd, 0x3, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0xb, 0x2, 0x3}, {0x0, 0x1, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x9}]}) 330.671145ms ago: executing program 0 (id=1974): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 312.715721ms ago: executing program 0 (id=1975): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 281.908894ms ago: executing program 4 (id=1976): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 260.705079ms ago: executing program 5 (id=1977): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "dd09e2ed"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_4={0x3, 0x2, 0x5, "b118d7dc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 219.353045ms ago: executing program 0 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8844) 216.478545ms ago: executing program 4 (id=1979): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 213.648742ms ago: executing program 0 (id=1980): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 142.856521ms ago: executing program 0 (id=1981): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 142.031479ms ago: executing program 4 (id=1982): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 139.503904ms ago: executing program 0 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): ][ T5926] Bluetooth: hci2: Malformed LE Event: 0x0d [ 65.349523][ T5977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 65.356358][ T5977] usb 8-1: no configurations [ 65.358568][ T5977] usb 8-1: can't read configurations, error -22 [ 65.451610][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 65.455567][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 65.456182][ T6082] bond0: entered promiscuous mode [ 65.462249][ T6082] bond_slave_0: entered promiscuous mode [ 65.464371][ T6082] bond_slave_1: entered promiscuous mode [ 65.468059][ T6082] batadv0: entered promiscuous mode [ 65.490777][ T6082] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 65.501047][ T6082] bond0: left promiscuous mode [ 65.503544][ T6082] bond_slave_0: left promiscuous mode [ 65.515660][ T6082] bond_slave_1: left promiscuous mode [ 65.519038][ T6082] batadv0: left promiscuous mode [ 65.845599][ T6102] pimreg: entered allmulticast mode [ 65.852687][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.858397][ T6102] pimreg: left allmulticast mode [ 65.860719][ T5926] Bluetooth: hci0: command tx timeout [ 65.873485][ T5926] Bluetooth: hci1: command tx timeout [ 65.873831][ T63] Bluetooth: hci2: command tx timeout [ 65.940005][ T5926] Bluetooth: hci3: command tx timeout [ 66.090622][ T6123] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 66.093533][ T6123] netlink: 156 bytes leftover after parsing attributes in process `syz.2.50'. [ 66.098272][ T6123] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 66.101697][ T6123] netlink: 156 bytes leftover after parsing attributes in process `syz.2.50'. [ 66.150688][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 66.418731][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 66.425631][ T6146] bond1: invalid ARP target 0.0.0.0 specified for addition [ 66.428265][ T6146] bond1: option arp_ip_target: invalid value (0) [ 66.432927][ T6146] bond1 (unregistering): Released all slaves [ 66.678899][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 66.678917][ T40] audit: type=1400 audit(1770899487.437:173): avc: denied { read } for pid=6164 comm="syz.2.71" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.749364][ T6168] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure [ 66.761129][ T40] audit: type=1400 audit(1770899487.527:174): avc: denied { setopt } for pid=6166 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.818027][ T6178] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 66.853308][ T40] audit: type=1400 audit(1770899487.617:175): avc: denied { unlink } for pid=6179 comm="syz.0.77" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.863424][ T40] audit: type=1400 audit(1770899487.617:176): avc: denied { mount } for pid=6179 comm="syz.0.77" name="/" dev="overlay" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.907931][ T40] audit: type=1400 audit(1770899487.667:177): avc: denied { connect } for pid=6183 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.989925][ T6012] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.018292][ T40] audit: type=1400 audit(1770899487.777:178): avc: denied { setopt } for pid=6189 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.075893][ T1149] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.082980][ T6192] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 67.134305][ T40] audit: type=1400 audit(1770899487.897:179): avc: denied { read } for pid=6195 comm="syz.1.85" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.144713][ T40] audit: type=1400 audit(1770899487.897:180): avc: denied { open } for pid=6195 comm="syz.1.85" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.153269][ T40] audit: type=1400 audit(1770899487.897:181): avc: denied { ioctl } for pid=6195 comm="syz.1.85" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.161675][ T6012] usb 7-1: Using ep0 maxpacket: 16 [ 67.165202][ T6012] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.168481][ T6012] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.175826][ T6012] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.182711][ T6012] usb 7-1: config 1 interface 0 has no altsetting 0 [ 67.190873][ T6012] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.193737][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.207258][ T6012] usb 7-1: Product: syz [ 67.208574][ T6012] usb 7-1: Manufacturer: syz [ 67.210362][ T6012] usb 7-1: SerialNumber: syz [ 67.431351][ T6012] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 67.439080][ T40] audit: type=1400 audit(1770899488.197:182): avc: denied { ioctl } for pid=6208 comm="syz.3.91" path="socket:[11433]" dev="sockfs" ino=11433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.632269][ T24] usb 7-1: USB disconnect, device number 2 [ 67.638942][ T24] usblp0: removed [ 67.860518][ T1149] wlan1: Trigger new scan to find an IBSS to join [ 67.939815][ T63] Bluetooth: hci2: command tx timeout [ 67.942046][ T5933] Bluetooth: hci1: command tx timeout [ 67.942086][ T5282] Bluetooth: hci0: command tx timeout [ 68.019794][ T5933] Bluetooth: hci3: command tx timeout [ 68.464105][ T6237] Zero length message leads to an empty skb [ 68.471895][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.140486][ T5926] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.140972][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 69.279060][ T6284] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 69.720273][ T6315] mkiss: ax0: crc mode is auto. [ 69.728671][ T5926] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 69.736779][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 69.736808][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.736821][ T5926] Workqueue: hci1 hci_rx_work [ 69.736849][ T5926] Call Trace: [ 69.736855][ T5926] [ 69.736864][ T5926] dump_stack_lvl+0x100/0x190 [ 69.736895][ T5926] sysfs_warn_dup.cold+0x1c/0x28 [ 69.736923][ T5926] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.736949][ T5926] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.736974][ T5926] ? find_held_lock+0x2b/0x80 [ 69.736994][ T5926] ? kobject_add_internal+0x25f/0x930 [ 69.737021][ T5926] ? kobject_add_internal+0x25f/0x930 [ 69.737051][ T5926] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.737081][ T5926] kobject_add_internal+0x2c8/0x930 [ 69.737111][ T5926] kobject_add+0x16a/0x1e0 [ 69.737126][ T5926] ? __pfx_kobject_add+0x10/0x10 [ 69.737140][ T5926] ? class_to_subsys+0x10f/0x150 [ 69.737171][ T5926] ? kobject_put+0xb9/0x640 [ 69.737194][ T5926] ? _raw_spin_unlock+0x28/0x50 [ 69.737221][ T5926] device_add+0x294/0x1950 [ 69.737246][ T5926] ? __pfx_dev_set_name+0x10/0x10 [ 69.737263][ T5926] ? __pfx_device_add+0x10/0x10 [ 69.737288][ T5926] ? mgmt_send_event_skb+0x2fb/0x460 [ 69.737316][ T5926] hci_conn_add_sysfs+0x1a3/0x260 [ 69.737341][ T5926] le_conn_complete_evt+0x11cb/0x1f40 [ 69.737369][ T5926] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 69.737396][ T5926] hci_le_conn_complete_evt+0x23c/0x3a0 [ 69.737418][ T5926] ? skb_pull_data+0x15f/0x1e0 [ 69.737437][ T5926] hci_le_meta_evt+0x34a/0x5f0 [ 69.737459][ T5926] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 69.737483][ T5926] hci_event_packet+0x682/0x11c0 [ 69.737503][ T5926] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 69.737526][ T5926] ? __pfx_hci_event_packet+0x10/0x10 [ 69.737550][ T5926] ? kcov_remote_start+0x374/0x660 [ 69.737567][ T5926] ? lockdep_hardirqs_on+0x78/0x100 [ 69.737595][ T5926] hci_rx_work+0x451/0xfc0 [ 69.737620][ T5926] process_one_work+0x9c2/0x1840 [ 69.737654][ T5926] ? __pfx_process_one_work+0x10/0x10 [ 69.737686][ T5926] ? __pfx_hci_rx_work+0x10/0x10 [ 69.737707][ T5926] worker_thread+0x5da/0xe40 [ 69.737739][ T5926] ? kthread+0x13a/0x450 [ 69.737800][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 69.737822][ T5926] kthread+0x370/0x450 [ 69.737844][ T5926] ? __pfx_kthread+0x10/0x10 [ 69.737869][ T5926] ret_from_fork+0x754/0xd80 [ 69.737895][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 69.737918][ T5926] ? rcu_is_watching+0x12/0xc0 [ 69.737933][ T5926] ? __switch_to+0x7b4/0x10c0 [ 69.737950][ T5926] ? __pfx_kthread+0x10/0x10 [ 69.737974][ T5926] ret_from_fork_asm+0x1a/0x30 [ 69.738005][ T5926] [ 69.738032][ T5926] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.794528][ T6327] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.797132][ T5926] Bluetooth: hci1: failed to register connection device [ 70.020642][ T5933] Bluetooth: hci2: command tx timeout [ 70.029994][ T5933] Bluetooth: hci0: command tx timeout [ 70.030220][ T5926] Bluetooth: hci1: command tx timeout [ 70.099801][ T5926] Bluetooth: hci3: command tx timeout [ 70.278749][ T6367] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.340470][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.382883][ T6373] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 70.386489][ T6373] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 70.529819][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 70.538875][ T10] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 70.543005][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.545667][ T10] usb 8-1: Product: syz [ 70.547355][ T10] usb 8-1: Manufacturer: syz [ 70.548888][ T10] usb 8-1: SerialNumber: syz [ 70.554353][ T10] usb 8-1: config 0 descriptor?? [ 70.558421][ T10] option 8-1:0.0: GSM modem (1-port) converter detected [ 70.762185][ T10] usb 8-1: USB disconnect, device number 4 [ 70.767282][ T10] option 8-1:0.0: device disconnected [ 70.795028][ T6393] netem: unknown loss type 0 [ 70.797512][ T6393] netem: change failed [ 70.802003][ T6390] input: syz1 as /devices/virtual/input/input6 [ 70.805872][ T6390] input: failed to attach handler leds to device input6, error: -6 [ 70.895609][ T6399] bridge0: port 3(syz_tun) entered blocking state [ 70.898982][ T6399] bridge0: port 3(syz_tun) entered disabled state [ 70.899971][ T1149] wlan1: Trigger new scan to find an IBSS to join [ 70.903713][ T6399] syz_tun: entered allmulticast mode [ 70.906919][ T6399] syz_tun: entered promiscuous mode [ 70.909083][ T6399] bridge0: port 3(syz_tun) entered blocking state [ 70.911424][ T6399] bridge0: port 3(syz_tun) entered forwarding state [ 70.959078][ T6401] mmap: syz.1.176 (6401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.107196][ T6415] __nla_validate_parse: 7 callbacks suppressed [ 71.107211][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 71.147431][ T6421] netlink: 'syz.0.183': attribute type 9 has an invalid length. [ 71.200351][ T6426] binder: 6425:6426 ioctl c0306201 2000000001c0 returned -22 [ 71.435343][ T6444] Bluetooth: MGMT ver 1.23 [ 71.543311][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.688430][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 71.688446][ T40] audit: type=1400 audit(1770899492.447:239): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.701185][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.704392][ T10] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.708581][ T10] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.717556][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 71.721013][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.724226][ T10] usb 5-1: Product: syz [ 71.725097][ T40] audit: type=1400 audit(1770899492.487:240): avc: denied { setopt } for pid=6466 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.726034][ T10] usb 5-1: Manufacturer: syz [ 71.726056][ T10] usb 5-1: SerialNumber: syz [ 71.727655][ T6455] SELinux: failed to load policy [ 71.733068][ T40] audit: type=1400 audit(1770899492.487:241): avc: denied { getopt } for pid=6466 comm="syz.3.205" laddr=::ffff:172.20.20.170 lport=39872 faddr=::ffff:172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.757217][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 71.825652][ T6473] netlink: 'syz.2.209': attribute type 13 has an invalid length. [ 71.829524][ T6473] syz_tun: refused to change device tx_queue_len [ 71.964047][ T10] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 72.121689][ T40] audit: type=1400 audit(1770899492.887:242): avc: denied { create } for pid=6494 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.127806][ T40] audit: type=1400 audit(1770899492.887:243): avc: denied { write } for pid=6494 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.164405][ T838] usb 5-1: USB disconnect, device number 2 [ 72.170297][ T838] usblp0: removed [ 72.187842][ T5926] Bluetooth: hci3: command tx timeout [ 72.331052][ T6512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.422130][ T6512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.486338][ T6512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.509291][ T6519] fuse: Bad value for 'fd' [ 72.555606][ T6512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.669113][ T1149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.677924][ T1149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.703205][ T6531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.237'. [ 72.709139][ T1143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.723639][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.727460][ T40] audit: type=1400 audit(1770899493.487:244): avc: denied { listen } for pid=6532 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.743954][ T40] audit: type=1400 audit(1770899493.507:245): avc: denied { create } for pid=6534 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.899491][ T40] audit: type=1400 audit(1770899493.657:246): avc: denied { create } for pid=6547 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.915234][ T40] audit: type=1400 audit(1770899493.657:247): avc: denied { connect } for pid=6547 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.923858][ T40] audit: type=1400 audit(1770899493.657:248): avc: denied { ioctl } for pid=6547 comm="syz.0.244" path="socket:[12025]" dev="sockfs" ino=12025 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.970111][ T6558] misc userio: Begin command sent, but we're already running [ 73.370016][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.388336][ T6586] tipc: Started in network mode [ 73.394102][ T6586] tipc: Node identity ac14140f, cluster identity 4711 [ 73.396924][ T6586] tipc: New replicast peer: 255.255.255.255 [ 73.400851][ T6586] tipc: Enabled bearer , priority 10 [ 73.412500][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 73.416258][ T6586] tipc: Disabling bearer [ 73.519864][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 73.526994][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.530707][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.534302][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.562557][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.569394][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.573563][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.753543][ T6615] pimreg: tun_chr_ioctl cmd 1074025676 [ 73.755805][ T6615] pimreg: owner set to 0 [ 73.789282][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 73.798946][ T10] usbtmc 6-1:16.0: can't read capabilities [ 73.863842][ T13] wlan1: Trigger new scan to find an IBSS to join [ 74.000873][ T24] usb 6-1: USB disconnect, device number 2 [ 74.174329][ T6650] netlink: 112 bytes leftover after parsing attributes in process `syz.2.292'. [ 74.265349][ T6656] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 74.274916][ T6658] ata1.00: invalid multi_count 128 ignored [ 74.573860][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 74.752395][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.793547][ T61] wlan1: Creating new IBSS network, BSSID ba:1b:d1:32:ef:4f [ 74.910068][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 74.915786][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.922841][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.926924][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.941992][ T10] usb 7-1: config 0 descriptor?? [ 74.942210][ T6707] netlink: 'syz.1.319': attribute type 14 has an invalid length. [ 74.991970][ T6709] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.001606][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 75.169967][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 75.310553][ T6728] TCP: TCP_TX_DELAY enabled [ 75.396467][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 75.406918][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 75.447570][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 75.452636][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 75.969803][ T6012] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.121541][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.125793][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.129029][ T6012] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.133896][ T6012] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.136464][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.142115][ T6012] usb 6-1: config 0 descriptor?? [ 76.432072][ T59] usb 7-1: USB disconnect, device number 3 [ 76.555565][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.558746][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.561306][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.564032][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.566625][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.568952][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.571300][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.573657][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.576166][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.578550][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.589159][ T6012] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.596139][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.598807][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.764682][ T6792] netlink: 'syz.3.357': attribute type 2 has an invalid length. [ 76.767910][ T6792] __nla_validate_parse: 5 callbacks suppressed [ 76.767924][ T6792] netlink: 100 bytes leftover after parsing attributes in process `syz.3.357'. [ 76.812318][ T59] usb 6-1: USB disconnect, device number 3 [ 76.833782][ T6796] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.940761][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 76.940783][ T40] audit: type=1400 audit(1770899497.707:275): avc: denied { create } for pid=6807 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.982511][ T40] audit: type=1326 audit(1770899497.747:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.3.368" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20599bf79 code=0x0 [ 77.185588][ T40] audit: type=1400 audit(1770899497.947:277): avc: denied { map } for pid=6829 comm="syz.2.375" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.194864][ T40] audit: type=1400 audit(1770899497.947:278): avc: denied { execute } for pid=6829 comm="syz.2.375" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.195214][ T6830] ptrace attach of "/syz-executor exec"[5924] was attempted by ""[6830] [ 77.474316][ T6844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.382'. [ 78.049899][ T40] audit: type=1400 audit(1770899498.817:279): avc: denied { accept } for pid=6863 comm="syz.0.391" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.154879][ T6871] tun0: tun_chr_ioctl cmd 1074025678 [ 78.156758][ T6871] tun0: group set to 0 [ 78.259767][ T40] audit: type=1400 audit(1770899499.017:280): avc: denied { create } for pid=6875 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.261974][ T6876] batadv_slave_1: entered promiscuous mode [ 78.266303][ T40] audit: type=1400 audit(1770899499.027:281): avc: denied { ioctl } for pid=6875 comm="syz.2.396" path="socket:[13659]" dev="sockfs" ino=13659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.277317][ T40] audit: type=1400 audit(1770899499.027:282): avc: denied { setopt } for pid=6875 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.287095][ T6875] batadv_slave_1: left promiscuous mode [ 78.333242][ T6882] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 78.350080][ T6882] team0: Device vxcan1 is of different type [ 78.367444][ T40] audit: type=1400 audit(1770899499.127:283): avc: denied { search } for pid=5634 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.375347][ T40] audit: type=1400 audit(1770899499.127:284): avc: denied { search } for pid=5634 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.550645][ T6904] netlink: 312 bytes leftover after parsing attributes in process `syz.2.406'. [ 78.642957][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'. [ 78.776934][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 78.788879][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 78.864592][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 78.871499][ T6928] bridge0: entered promiscuous mode [ 78.873464][ T6928] macsec1: entered allmulticast mode [ 78.875299][ T6928] bridge0: entered allmulticast mode [ 78.878011][ T6928] bridge0: port 4(macsec1) entered blocking state [ 78.881141][ T6928] bridge0: port 4(macsec1) entered disabled state [ 78.886302][ T6928] bridge0: left allmulticast mode [ 78.888053][ T6928] bridge0: left promiscuous mode [ 79.106063][ T6941] ======================================================= [ 79.106063][ T6941] WARNING: The mand mount option has been deprecated and [ 79.106063][ T6941] and is ignored by this kernel. Remove the mand [ 79.106063][ T6941] option from the mount to silence this warning. [ 79.106063][ T6941] ======================================================= [ 79.396075][ T6969] syz_tun: left allmulticast mode [ 79.397785][ T6969] syz_tun: left promiscuous mode [ 79.399469][ T6969] bridge0: port 3(syz_tun) entered disabled state [ 79.406547][ T6969] bridge_slave_1: left allmulticast mode [ 79.409076][ T6969] bridge_slave_1: left promiscuous mode [ 79.414028][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.414839][ T6973] capability: warning: `syz.3.433' uses 32-bit capabilities (legacy support in use) [ 79.433331][ T6969] bridge_slave_0: left allmulticast mode [ 79.435763][ T6969] bridge_slave_0: left promiscuous mode [ 79.438696][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.457373][ T6977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 79.504550][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 79.532581][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 79.620081][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.624884][ T6989] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 79.635533][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.642127][ T6989] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.771316][ T39] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 79.773980][ T39] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.777085][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.783049][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.785986][ T39] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.788623][ T39] usb 5-1: Product: syz [ 79.790314][ T39] usb 5-1: Manufacturer: syz [ 79.791833][ T39] usb 5-1: SerialNumber: syz [ 79.801994][ T39] usb 5-1: config 0 descriptor?? [ 79.804725][ T39] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.806694][ T39] hub 5-1:0.0: probe with driver hub failed with error -5 [ 79.814617][ T39] usb 5-1: selecting invalid altsetting 0 [ 80.721029][ T6967] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 80.903115][ T6967] usb 5-1: device firmware changed [ 80.917478][ T34] usb 5-1: USB disconnect, device number 3 [ 81.089768][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.262205][ T34] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 81.265572][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.274237][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.284109][ T34] usb 5-1: string descriptor 0 read error: -22 [ 81.286837][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.290783][ T34] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.295820][ T34] usb 5-1: config 0 descriptor?? [ 81.302693][ T34] hub 5-1:0.0: bad descriptor, ignoring hub [ 81.305016][ T34] hub 5-1:0.0: probe with driver hub failed with error -5 [ 81.312653][ T34] usb 5-1: selecting invalid altsetting 0 [ 81.631299][ T838] usb 5-1: USB disconnect, device number 4 [ 82.506757][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 82.506770][ T40] audit: type=1400 audit(1770899503.267:321): avc: denied { setopt } for pid=7169 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.722970][ T40] audit: type=1400 audit(1770899503.487:322): avc: denied { watch_mount watch_reads } for pid=7198 comm="syz.0.538" path="/119" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.872961][ T7216] ªªªªªª: renamed from vlan0 (while UP) [ 82.884834][ T7218] netlink: 92 bytes leftover after parsing attributes in process `syz.0.546'. [ 82.891047][ T40] audit: type=1400 audit(1770899503.657:323): avc: denied { read } for pid=7213 comm="syz.1.544" laddr=::ffff:172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.097584][ T7235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.618331][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 83.925028][ T40] audit: type=1400 audit(1770899504.687:324): avc: denied { execute } for pid=7266 comm="syz.1.569" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 84.059239][ T7289] input: syz0 as /devices/virtual/input/input9 [ 84.151133][ T40] audit: type=1400 audit(1770899504.917:325): avc: denied { getopt } for pid=7296 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.158960][ T7297] bpf: Bad value for 'gid' [ 84.199492][ T40] audit: type=1326 audit(1770899504.957:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf0b79bf79 code=0x0 [ 84.226363][ T40] audit: type=1400 audit(1770899504.987:327): avc: denied { getopt } for pid=7305 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.507917][ T7336] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 84.513924][ T7336] bond1 (unregistering): Released all slaves [ 84.526481][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 84.530411][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 84.561898][ T40] audit: type=1400 audit(1770899505.327:328): avc: denied { mount } for pid=7340 comm="syz.3.600" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.601932][ T40] audit: type=1326 audit(1770899505.367:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.602" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20599bf79 code=0x0 [ 84.746406][ T40] audit: type=1400 audit(1770899505.507:330): avc: denied { create } for pid=7350 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.811925][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.960200][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 84.965939][ T34] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 84.969664][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.973044][ T34] usb 6-1: Product: syz [ 84.974644][ T34] usb 6-1: Manufacturer: syz [ 84.976638][ T34] usb 6-1: SerialNumber: syz [ 84.987659][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 85.198071][ T34] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 85.206448][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 85.209972][ T34] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 85.213054][ T34] usb 6-1: media controller created [ 85.219881][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.399449][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 85.428437][ T34] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 85.434257][ T34] usb 6-1: USB disconnect, device number 4 [ 85.560040][ T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 85.642431][ T7406] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.629'. [ 85.721476][ T39] usb 5-1: config 0 has no interfaces? [ 85.725903][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.729524][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.733340][ T39] usb 5-1: Product: syz [ 85.735055][ T39] usb 5-1: Manufacturer: syz [ 85.736972][ T39] usb 5-1: SerialNumber: syz [ 85.741809][ T39] usb 5-1: config 0 descriptor?? [ 85.951416][ T29] usb 5-1: USB disconnect, device number 5 [ 86.120567][ T7444] option changes via remount are deprecated (pid=7443 comm=syz.1.646) [ 86.129461][ T7444] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 86.148706][ T7448] could not open pipe file descriptor [ 86.271044][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 86.777967][ T7502] sctp: [Deprecated]: syz.1.673 (pid 7502) Use of int in max_burst socket option deprecated. [ 86.777967][ T7502] Use struct sctp_assoc_value instead [ 86.835652][ T1460] cfg80211: failed to load regulatory.db [ 86.918856][ T7518] Bluetooth: MGMT ver 1.23 [ 87.131080][ T7543] GUP no longer grows the stack in syz.1.694 (7543): 200000007000-20000000a000 (200000004000) [ 87.135663][ T7543] CPU: 3 UID: 0 PID: 7543 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.135694][ T7543] Tainted: [L]=SOFTLOCKUP [ 87.135699][ T7543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.135708][ T7543] Call Trace: [ 87.135714][ T7543] [ 87.135721][ T7543] dump_stack_lvl+0x100/0x190 [ 87.135750][ T7543] gup_vma_lookup.cold+0x83/0x96 [ 87.135777][ T7543] __get_user_pages+0x241/0x34d0 [ 87.135807][ T7543] ? xdp_umem_create+0x65f/0x11e0 [ 87.135824][ T7543] ? xsk_setsockopt+0x7ba/0xa90 [ 87.135838][ T7543] ? do_sock_setsockopt+0xf3/0x1d0 [ 87.135866][ T7543] ? __pfx___get_user_pages+0x10/0x10 [ 87.135887][ T7543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.135913][ T7543] __gup_longterm_locked+0x279/0x16f0 [ 87.135935][ T7543] ? __lock_acquire+0x440/0x2630 [ 87.135961][ T7543] ? __pfx___gup_longterm_locked+0x10/0x10 [ 87.135995][ T7543] pin_user_pages+0x13c/0x160 [ 87.136018][ T7543] ? __pfx_pin_user_pages+0x10/0x10 [ 87.136038][ T7543] ? rcu_is_watching+0x12/0xc0 [ 87.136055][ T7543] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 87.136073][ T7543] ? security_capset+0x250/0x270 [ 87.136095][ T7543] xdp_umem_create+0x73e/0x11e0 [ 87.136122][ T7543] xsk_setsockopt+0x7ba/0xa90 [ 87.136141][ T7543] ? __pfx_xsk_setsockopt+0x10/0x10 [ 87.136159][ T7543] ? find_held_lock+0x2b/0x80 [ 87.136176][ T7543] ? __fget_files+0x215/0x3d0 [ 87.136196][ T7543] ? selinux_socket_setsockopt+0x6a/0x80 [ 87.136217][ T7543] ? __pfx_xsk_setsockopt+0x10/0x10 [ 87.136238][ T7543] do_sock_setsockopt+0xf3/0x1d0 [ 87.136266][ T7543] __sys_setsockopt+0x195/0x220 [ 87.136294][ T7543] __x64_sys_setsockopt+0xbd/0x160 [ 87.136312][ T7543] ? do_syscall_64+0x95/0xf80 [ 87.136335][ T7543] ? lockdep_hardirqs_on+0x78/0x100 [ 87.136358][ T7543] do_syscall_64+0x106/0xf80 [ 87.136380][ T7543] ? clear_bhb_loop+0x40/0x90 [ 87.136401][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.136419][ T7543] RIP: 0033:0x7f80bdf9bf79 [ 87.136433][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.136447][ T7543] RSP: 002b:00007f80bee46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.136465][ T7543] RAX: ffffffffffffffda RBX: 00007f80be215fa0 RCX: 00007f80bdf9bf79 [ 87.136476][ T7543] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 87.136486][ T7543] RBP: 00007f80be0327e0 R08: 0000000000000020 R09: 0000000000000000 [ 87.136496][ T7543] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 87.136506][ T7543] R13: 00007f80be216038 R14: 00007f80be215fa0 R15: 00007ffe0888fa18 [ 87.136531][ T7543] [ 87.294877][ T5926] Bluetooth: Wrong link type (-57) [ 87.439490][ T7572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.707'. [ 87.524888][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 87.524900][ T40] audit: type=1400 audit(1770899508.287:352): avc: denied { watch } for pid=7576 comm="syz.3.709" path="/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.540508][ T40] audit: type=1400 audit(1770899508.287:353): avc: denied { watch_sb watch_reads } for pid=7576 comm="syz.3.709" path="/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.563896][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.711'. [ 87.567903][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.711'. [ 87.611144][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.781392][ T9] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 87.785739][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.790156][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.793193][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.796710][ T9] usb 6-1: Product: syz [ 87.798394][ T9] usb 6-1: Manufacturer: syz [ 87.801169][ T9] usb 6-1: SerialNumber: syz [ 87.804871][ T9] usb 6-1: config 0 descriptor?? [ 87.815994][ T9] usb 6-1: selecting invalid altsetting 0 [ 87.882850][ T7600] netem: change failed [ 87.923403][ T7604] batadv_slave_1: entered promiscuous mode [ 87.926058][ T7603] batadv_slave_1: left promiscuous mode [ 88.016391][ T9] usb 6-1: USB disconnect, device number 5 [ 88.587396][ T7622] netlink: 'syz.2.732': attribute type 32 has an invalid length. [ 88.589894][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 88.607178][ T7622] bond1: Setting coupled_control to off (0) [ 88.682256][ T7637] kvm: kvm [7636]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x7 [ 88.799004][ T40] audit: type=1400 audit(1770899509.557:354): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.852278][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 89.028587][ T7681] netlink: 268 bytes leftover after parsing attributes in process `syz.0.757'. [ 89.061050][ T7687] vivid-000: disconnect [ 89.070311][ T7687] vivid-000: reconnect [ 89.111934][ T7691] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 89.164144][ T40] audit: type=1400 audit(1770899765.919:355): avc: denied { write } for pid=7696 comm="syz.0.766" path="socket:[17637]" dev="sockfs" ino=17637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.208297][ T40] audit: type=1400 audit(1770899765.969:356): avc: denied { unlink } for pid=7702 comm="syz.2.770" name="file1" dev="9p" ino=72614111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 89.219644][ T40] audit: type=1400 audit(1770899765.979:357): avc: denied { create } for pid=7702 comm="syz.2.770" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.219735][ T7705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.232902][ T7705] bond0: (slave bond1): Enslaving as an active interface with an up link [ 89.289742][ T40] audit: type=1400 audit(1770899766.049:358): avc: denied { create } for pid=7713 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.291803][ T7717] tmpfs: Invalid gid '0x00000000ffffffff' [ 89.297500][ T40] audit: type=1400 audit(1770899766.059:359): avc: denied { getopt } for pid=7713 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.360443][ T7723] Attempt to restore checkpoint with obsolete wellknown handles [ 89.445610][ T5926] Bluetooth: hci3: hcon ffff88802d670000 sent 3 < count 13 [ 89.449141][ T5926] Bluetooth: hci3: hcon ffff88802fd14000 sent 1 < count 4 [ 89.451709][ T5926] Bluetooth: hci3: hcon ffff88802fd14000 sent 0 < count 255 [ 90.265017][ T7774] netlink: 71 bytes leftover after parsing attributes in process `syz.2.794'. [ 90.329791][ T1460] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.378055][ T40] audit: type=1400 audit(1770899767.139:360): avc: denied { append } for pid=7784 comm="syz.0.799" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.383218][ T7785] loop6: detected capacity change from 0 to 524287999 [ 90.397116][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.408247][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.412841][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.416187][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.426299][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.429285][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.432449][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.435320][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.437882][ T6391] ldm_validate_partition_table(): Disk read failed. [ 90.492504][ T1460] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.496066][ T1460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.498800][ T1460] usb 6-1: Product: syz [ 90.501113][ T1460] usb 6-1: Manufacturer: syz [ 90.502935][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.503408][ T1460] usb 6-1: SerialNumber: syz [ 90.506956][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.515592][ T6391] Dev loop6: unable to read RDB block 0 [ 90.518630][ T6391] loop6: unable to read partition table [ 90.523436][ T7785] ldm_validate_partition_table(): Disk read failed. [ 90.525831][ T7785] Dev loop6: unable to read RDB block 0 [ 90.527797][ T7785] loop6: unable to read partition table [ 90.529881][ T7785] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 90.533515][ T7790] ldm_validate_partition_table(): Disk read failed. [ 90.536124][ T7790] Dev loop6: unable to read RDB block 0 [ 90.538141][ T7790] loop6: unable to read partition table [ 90.540825][ T7790] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 90.561369][ T7792] block nbd0: server does not support multiple connections per device. [ 90.568744][ T7792] block nbd0: shutting down sockets [ 90.621901][ T40] audit: type=1400 audit(1770899767.389:361): avc: denied { ioctl } for pid=7797 comm="syz.2.805" path="socket:[16910]" dev="sockfs" ino=16910 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.745908][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 90.772250][ T1460] rtl8150 6-1:1.0: couldn't reset the device [ 90.780246][ T1460] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 90.796127][ T1460] usb 6-1: USB disconnect, device number 6 [ 90.813196][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 90.868145][ T7820] tmpfs: Invalid uid '0x00000000ffffffff' [ 91.115958][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 91.279427][ T7873] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 91.284169][ T7873] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 91.421860][ T7893] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 91.540752][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 91.555675][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 91.660654][ T7922] syz.3.866 uses obsolete (PF_INET,SOCK_PACKET) [ 91.859957][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 91.864208][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 92.406005][ T7983] binder: 7982:7983 ioctl c0306201 200000000480 returned -14 [ 92.451432][ T7985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.893'. [ 92.913593][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 92.913610][ T40] audit: type=1400 audit(1770899769.679:373): avc: denied { remount } for pid=8021 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.624230][ T8057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.627556][ T8057] IPv6: NLM_F_CREATE should be set when creating new route [ 93.669249][ T8061] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.026573][ T40] audit: type=1400 audit(1770899770.789:374): avc: denied { listen } for pid=8082 comm="syz.0.936" lport=42589 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.036127][ T40] audit: type=1400 audit(1770899770.799:375): avc: denied { accept } for pid=8082 comm="syz.0.936" lport=42589 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.046204][ T40] audit: type=1400 audit(1770899770.809:376): avc: denied { setopt } for pid=8082 comm="syz.0.936" lport=42589 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.063650][ T40] audit: type=1400 audit(1770899770.829:377): avc: denied { connect } for pid=8084 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.086653][ T40] audit: type=1400 audit(1770899770.849:378): avc: denied { connect } for pid=8086 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.101869][ T40] audit: type=1400 audit(1770899770.869:379): avc: denied { write } for pid=8086 comm="syz.0.938" path="socket:[19765]" dev="sockfs" ino=19765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.153735][ T8090] __nla_validate_parse: 2 callbacks suppressed [ 94.153754][ T8090] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.939'. [ 94.216694][ T40] audit: type=1400 audit(1770899770.979:380): avc: denied { getopt } for pid=8091 comm="syz.0.940" lport=55974 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.231518][ T40] audit: type=1400 audit(1770899770.989:381): avc: denied { open } for pid=8093 comm="syz.2.941" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 94.241639][ T40] audit: type=1400 audit(1770899770.989:382): avc: denied { ioctl } for pid=8093 comm="syz.2.941" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 94.291341][ T8101] can0: slcan on pty24. [ 94.352062][ T8093] can0 (unregistered): slcan off pty24. [ 94.361111][ T8106] syzkaller1: entered promiscuous mode [ 94.363589][ T8106] syzkaller1: entered allmulticast mode [ 94.486893][ T8110] syz.3.948 (8110) used greatest stack depth: 18952 bytes left [ 95.089864][ T6000] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 95.241366][ T6000] usb 7-1: Using ep0 maxpacket: 8 [ 95.245149][ T6000] usb 7-1: config 0 has no interfaces? [ 95.247393][ T6000] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.251276][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.256917][ T6000] usb 7-1: config 0 descriptor?? [ 95.452091][ T8191] netlink: 'syz.1.986': attribute type 1 has an invalid length. [ 95.457067][ T8191] netlink: 'syz.1.986': attribute type 2 has an invalid length. [ 95.568548][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 95.718533][ T8217] netlink: 204 bytes leftover after parsing attributes in process `syz.3.998'. [ 95.807724][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.179918][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.329875][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 96.333496][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.337702][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.341555][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.345625][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.351593][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.355162][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.567811][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 96.570379][ T29] usbtmc 6-1:16.0: can't read capabilities [ 96.768278][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.772518][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.775503][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.778283][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.780956][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.783958][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.786886][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.789903][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.792940][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.795826][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.801586][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.804958][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.808475][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.811460][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.814364][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.817295][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 96.821875][ T9] usb 6-1: USB disconnect, device number 7 [ 96.944303][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1020'. [ 97.042189][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.045537][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.048447][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.051135][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.054053][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.056618][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.059229][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.061859][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.064342][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.066946][ T8275] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.086311][ T6391] udevd[6391]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 97.640821][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 97.662325][ T1460] usb 7-1: USB disconnect, device number 5 [ 98.072951][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.113849][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 98.113867][ T40] audit: type=1400 audit(1770899774.879:398): avc: denied { execute } for pid=8344 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 98.127777][ T40] audit: type=1400 audit(1770899774.879:399): avc: denied { execute_no_trans } for pid=8344 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 98.137952][ T40] audit: type=1400 audit(1770899774.899:400): avc: denied { append } for pid=8345 comm="syz.1.1057" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 98.210104][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.214968][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.219791][ T40] audit: type=1400 audit(1770899774.979:401): avc: denied { create } for pid=8352 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.220303][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.233015][ T5933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.235163][ T40] audit: type=1400 audit(1770899774.999:402): avc: denied { write } for pid=8352 comm="syz.1.1059" path="socket:[20055]" dev="sockfs" ino=20055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.236897][ T5933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.250368][ T5933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.319118][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.331760][ T8360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 98.337011][ T8360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 98.386682][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.460175][ T8350] chnl_net:caif_netlink_parms(): no params data found [ 98.509727][ T40] audit: type=1400 audit(1770899775.269:403): avc: denied { map } for pid=8368 comm="syz.1.1065" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.593871][ T1142] bridge_slave_1: left allmulticast mode [ 98.596151][ T1142] bridge_slave_1: left promiscuous mode [ 98.599337][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.605729][ T1142] bridge_slave_0: left allmulticast mode [ 98.607882][ T1142] bridge_slave_0: left promiscuous mode [ 98.610573][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.629843][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.687065][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 98.789789][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 98.793289][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.797432][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.801426][ T34] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.805602][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.812077][ T34] usb 5-1: config 0 descriptor?? [ 98.828909][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.836742][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.842445][ T1142] bond0 (unregistering): Released all slaves [ 98.872025][ T8374] batadv_slave_1: entered promiscuous mode [ 98.888282][ T8375] team0 (unregistering): Port device team_slave_0 removed [ 98.897307][ T8375] team0 (unregistering): Port device team_slave_1 removed [ 98.919094][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.922071][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.924940][ T8350] bridge_slave_0: entered allmulticast mode [ 98.928227][ T8350] bridge_slave_0: entered promiscuous mode [ 98.944630][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.947896][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.957727][ T8350] bridge_slave_1: entered allmulticast mode [ 98.962137][ T8350] bridge_slave_1: entered promiscuous mode [ 99.023583][ T40] audit: type=1400 audit(1770899775.789:404): avc: denied { create } for pid=8383 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.023619][ T8373] batadv_slave_1: left promiscuous mode [ 99.032292][ T40] audit: type=1400 audit(1770899775.799:405): avc: denied { write } for pid=8383 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.037658][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.048980][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.125456][ T8350] team0: Port device team_slave_0 added [ 99.138020][ T8350] team0: Port device team_slave_1 added [ 99.227264][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.233236][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.250625][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.252978][ T34] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 99.258590][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.263165][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.272576][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.305813][ T1142] hsr_slave_0: left promiscuous mode [ 99.308341][ T1142] hsr_slave_1: left promiscuous mode [ 99.311874][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.315162][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.323499][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.326736][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.339362][ T1142] veth1_macvtap: left promiscuous mode [ 99.341378][ T1142] veth0_macvtap: left promiscuous mode [ 99.343897][ T1142] veth1_vlan: left promiscuous mode [ 99.345744][ T1142] veth0_vlan: left promiscuous mode [ 99.388073][ T8410] loop5: detected capacity change from 0 to 7 [ 99.392484][ T8410] buffer_io_error: 39 callbacks suppressed [ 99.392553][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.397432][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.400971][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.409414][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.413122][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.416901][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.420549][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.423636][ T8410] ldm_validate_partition_table(): Disk read failed. [ 99.426483][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.431568][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.434687][ T8410] Buffer I/O error on dev loop5, logical block 0, async page read [ 99.438672][ T8410] Dev loop5: unable to read RDB block 0 [ 99.441871][ T8410] loop5: unable to read partition table [ 99.444780][ T8410] loop5: partition table beyond EOD, truncated [ 99.447839][ T8410] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 99.484620][ T7069] usb 5-1: USB disconnect, device number 6 [ 99.624888][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 99.632017][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 99.711497][ T8350] hsr_slave_0: entered promiscuous mode [ 99.714190][ T8350] hsr_slave_1: entered promiscuous mode [ 99.716502][ T8350] debugfs: 'hsr0' already exists in 'hsr' [ 99.718730][ T8350] Cannot create hsr debugfs directory [ 99.730136][ T8427] loop2: detected capacity change from 0 to 7 [ 99.736075][ T6391] Dev loop2: unable to read RDB block 7 [ 99.738071][ T6391] loop2: AHDI p1 p2 [ 99.739405][ T6391] loop2: partition table partially beyond EOD, truncated [ 99.742564][ T6391] loop2: p1 start 1818582900 is beyond EOD, truncated [ 99.752496][ T8427] Dev loop2: unable to read RDB block 7 [ 99.754831][ T8427] loop2: AHDI p1 p2 [ 99.756497][ T8427] loop2: partition table partially beyond EOD, truncated [ 99.770118][ T8427] loop2: p1 start 1818582900 is beyond EOD, truncated [ 99.858532][ T40] audit: type=1400 audit(1770899776.619:406): avc: denied { associate } for pid=8432 comm="syz.2.1085" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.878409][ T40] audit: type=1400 audit(1770899776.639:407): avc: denied { append } for pid=8432 comm="syz.2.1085" path="/276/file0/cpuset.effective_cpus" dev="9p" ino=72614127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.908031][ T8438] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.938071][ T8350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.953043][ T8440] binder: 8439:8440 ioctl c0306201 2000000003c0 returned -14 [ 99.979742][ T8350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.003839][ T8350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.019658][ T8350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.129229][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.138644][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.144457][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.147657][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.158359][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.161495][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.316968][ T8473] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1088'. [ 100.339873][ T5926] Bluetooth: hci2: command tx timeout [ 100.353934][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.621301][ T8350] veth0_vlan: entered promiscuous mode [ 100.631114][ T8350] veth1_vlan: entered promiscuous mode [ 100.659326][ T8350] veth0_macvtap: entered promiscuous mode [ 100.665091][ T8350] veth1_macvtap: entered promiscuous mode [ 100.676010][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.682666][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.695474][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.698887][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.705386][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.709079][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.750671][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.753536][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.766487][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.769765][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.145117][ T8534] SELinux: failed to load policy [ 101.839090][ T8560] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 101.960386][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 102.132459][ T8582] xt_hashlimit: size too large, truncated to 1048576 [ 102.307206][ T8599] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1140'. [ 102.317168][ T8597] kvm: user requested TSC rate below hardware speed [ 102.430454][ T5926] Bluetooth: hci2: command tx timeout [ 102.475649][ T8613] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1146'. [ 102.523373][ T8619] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1149'. [ 102.617337][ T8632] syzkaller1: entered promiscuous mode [ 102.621133][ T8632] syzkaller1: entered allmulticast mode [ 102.625915][ T8633] syzkaller1: entered promiscuous mode [ 102.628600][ T8633] syzkaller1: entered allmulticast mode [ 103.107439][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 103.111252][ T8675] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 103.244206][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 103.307640][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 103.311619][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 103.348764][ T8694] net_ratelimit: 45 callbacks suppressed [ 103.348775][ T8694] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 103.723645][ T8720] netlink: 'syz.4.1197': attribute type 29 has an invalid length. [ 103.728145][ T8720] netlink: 'syz.4.1197': attribute type 29 has an invalid length. [ 103.732627][ T8720] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1197'. [ 103.736720][ T8720] unsupported nla_type 58 [ 103.760942][ T8722] veth0_to_bridge: entered promiscuous mode [ 103.764594][ T8721] veth0_to_bridge: left promiscuous mode [ 103.913276][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 103.913288][ T40] audit: type=1400 audit(1770899781.677:415): avc: denied { read } for pid=8738 comm="syz.2.1205" path="socket:[23209]" dev="sockfs" ino=23209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.985205][ T40] audit: type=1400 audit(1770899781.747:416): avc: denied { accept } for pid=8744 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.031600][ T8752] kvm: user requested TSC rate below hardware speed [ 104.157177][ T40] audit: type=1400 audit(1770899781.917:417): avc: denied { ioctl } for pid=8754 comm="syz.4.1212" path="socket:[23220]" dev="sockfs" ino=23220 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.509830][ T5926] Bluetooth: hci2: command tx timeout [ 104.919778][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 104.949807][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.069810][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 105.073503][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 105.077048][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.081636][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.085642][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.090279][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.095714][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.099525][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.109781][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 105.113364][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.116352][ T59] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.119962][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.125456][ T59] usb 5-1: config 0 descriptor?? [ 105.439830][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 105.539450][ T59] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 105.591526][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.594637][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.598670][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.603205][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.749118][ T9] usb 5-1: USB disconnect, device number 7 [ 105.813517][ T10] usb 6-1: usb_control_msg returned -32 [ 105.815926][ T10] usbtmc 6-1:16.0: can't read capabilities [ 105.868412][ T8785] usbtmc 7-1:16.0: simple control status returned 2d [ 106.070367][ T1460] usb 7-1: USB disconnect, device number 6 [ 106.589837][ T5926] Bluetooth: hci2: command tx timeout [ 106.646370][ T8811] __nla_validate_parse: 2 callbacks suppressed [ 106.646391][ T8811] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.1237'. [ 106.710141][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.861396][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 106.865171][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.868725][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.873847][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.878864][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.883325][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.887704][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.891988][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.100329][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.158351][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.161074][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 107.259786][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 107.263218][ T34] usb 7-1: config 0 has no interfaces? [ 107.265098][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.268064][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.272414][ T34] usb 7-1: config 0 descriptor?? [ 107.431812][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.434309][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 107.662847][ T8864] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 107.867015][ T34] usb 5-1: USB disconnect, device number 8 [ 107.940354][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.942944][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 107.978779][ T8857] ceph: No mds server is up or the cluster is laggy [ 108.083285][ T8880] netlink: 'syz.4.1253': attribute type 29 has an invalid length. [ 108.088176][ T8880] netlink: 'syz.4.1253': attribute type 29 has an invalid length. [ 108.092504][ T8880] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1253'. [ 108.205331][ T10] usb 6-1: USB disconnect, device number 8 [ 108.308045][ T9] IPVS: starting estimator thread 0... [ 108.338557][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 108.403662][ T8896] IPVS: using max 41 ests per chain, 98400 per kthread [ 108.503863][ T40] audit: type=1400 audit(1770899786.267:418): avc: denied { read } for pid=8912 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.552078][ T40] audit: type=1400 audit(1770899786.317:419): avc: denied { shutdown } for pid=8914 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.616116][ T40] audit: type=1400 audit(1770899786.377:420): avc: denied { read } for pid=8922 comm="syz.4.1269" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.625813][ T40] audit: type=1400 audit(1770899786.377:421): avc: denied { open } for pid=8922 comm="syz.4.1269" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.639775][ T40] audit: type=1400 audit(1770899786.387:422): avc: denied { ioctl } for pid=8922 comm="syz.4.1269" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.709503][ T5926] Bluetooth: hci3: link tx timeout [ 109.204260][ T8962] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.863607][ T59] usb 7-1: USB disconnect, device number 7 [ 109.979870][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.131380][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.136191][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.142103][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.147353][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.155063][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.169810][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.173275][ T10] usb 5-1: Manufacturer: syz [ 110.179202][ T10] usb 5-1: config 0 descriptor?? [ 110.332390][ T8995] tun0: tun_chr_ioctl cmd 1074025675 [ 110.334128][ T8995] tun0: persist enabled [ 110.335979][ T8995] tun0: tun_chr_ioctl cmd 1074025675 [ 110.337896][ T8995] tun0: persist disabled [ 110.593968][ T10] hid_parser_main: 28 callbacks suppressed [ 110.593988][ T10] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 110.607769][ T10] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 110.866982][ T10] usb 5-1: USB disconnect, device number 9 [ 111.057259][ T9037] veth1_to_bond: entered promiscuous mode [ 111.059479][ T9037] veth1_to_bond: entered allmulticast mode [ 111.095936][ T9040] mmap: syz.4.1321 (9040): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 111.217338][ T5926] Bluetooth: Unknown LE signaling command 0xfe [ 111.220175][ T5926] Bluetooth: Wrong link type (-22) [ 111.321912][ T9059] netlink: set zone limit has 4 unknown bytes [ 111.367059][ T9065] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1332'. [ 111.376611][ T40] audit: type=1400 audit(1770899789.127:423): avc: denied { watch } for pid=9063 comm="syz.4.1331" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.409988][ T40] audit: type=1400 audit(1770899789.167:424): avc: denied { create } for pid=9069 comm="syz.2.1334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.429833][ T40] audit: type=1400 audit(1770899789.187:425): avc: denied { read } for pid=9069 comm="syz.2.1334" name="file0" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.438336][ T40] audit: type=1400 audit(1770899789.197:426): avc: denied { open } for pid=9069 comm="syz.2.1334" path="/323/file0" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.447720][ T40] audit: type=1400 audit(1770899789.207:427): avc: denied { unlink } for pid=5924 comm="syz-executor" name="file0" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.206198][ T9123] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.288828][ T40] audit: type=1400 audit(1770899790.047:428): avc: denied { sqpoll } for pid=9128 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.328936][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 112.414690][ T9144] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.565061][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 112.568195][ T9161] netlink: 'syz.0.1365': attribute type 26 has an invalid length. [ 112.810138][ T40] audit: type=1400 audit(1770899790.577:429): avc: denied { setopt } for pid=9178 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.920861][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.939837][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 113.069845][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 113.073309][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.077590][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.082921][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.087063][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.093081][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.096864][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.099757][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 113.110763][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.114571][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.117425][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.131973][ T34] usb 9-1: config 0 descriptor?? [ 113.249923][ T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 113.308677][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 113.311709][ T9] usbtmc 5-1:16.0: can't read capabilities [ 113.346771][ T34] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 113.409888][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 113.413246][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.418091][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.422022][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 113.426781][ T59] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 113.431089][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.436118][ T59] usb 6-1: config 0 descriptor?? [ 113.513433][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.519330][ T29] usb 5-1: USB disconnect, device number 10 [ 113.621037][ T9195] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1380'. [ 113.621055][ T40] audit: type=1400 audit(1770899791.387:430): avc: denied { nlmsg_read } for pid=9194 comm="syz.2.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.743475][ T29] usb 9-1: USB disconnect, device number 2 [ 113.853046][ T59] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input12 [ 113.860977][ T40] audit: type=1400 audit(1770899791.617:431): avc: denied { read } for pid=5316 comm="acpid" name="mouse2" dev="devtmpfs" ino=2985 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.872174][ T40] audit: type=1400 audit(1770899791.627:432): avc: denied { open } for pid=5316 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2985 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.941305][ T59] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input13 [ 113.955410][ T9209] evm: overlay not supported [ 113.964404][ T59] kye 0003:0458:5011.0006: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 114.071635][ T9216] Invalid argument reading file caps for ./file0 [ 114.083709][ T1460] usb 6-1: USB disconnect, device number 9 [ 114.094417][ T9218] input: syz0 as /devices/virtual/input/input14 [ 114.365041][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 114.686110][ T9257] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1408'. [ 115.038695][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 115.125264][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 115.130859][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 115.173403][ T9289] vcan0: tx address claim with different name [ 115.839825][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.011737][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.015063][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.019634][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.023409][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 116.028406][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 116.035519][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.039192][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.042776][ T29] usb 5-1: Product: syz [ 116.044707][ T29] usb 5-1: Manufacturer: syz [ 116.052208][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 116.054560][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 116.058752][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 116.061586][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.338551][ T9338] Illegal XDP return value 4232815440 on prog (id 73) dev N/A, expect packet loss! [ 116.364015][ T838] usb 5-1: USB disconnect, device number 11 [ 116.494240][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 116.494257][ T40] audit: type=1400 audit(1770899794.257:437): avc: denied { shutdown } for pid=9345 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.532846][ T9351] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1446'. [ 116.570017][ T40] audit: type=1400 audit(1770899794.327:438): avc: denied { mounton } for pid=9353 comm="syz.2.1448" path="/proc/756" dev="proc" ino=26889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.592501][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1451'. [ 116.601434][ T9359] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 116.620361][ T9359] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 116.742813][ T40] audit: type=1400 audit(1770899794.507:439): avc: denied { ioctl } for pid=9372 comm="syz.2.1457" path="socket:[26027]" dev="sockfs" ino=26027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.743608][ T9373] netlink: 'syz.2.1457': attribute type 9 has an invalid length. [ 117.150016][ T40] audit: type=1400 audit(1770899794.917:440): avc: denied { write } for pid=9414 comm="syz.2.1474" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.209907][ T7069] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 117.371839][ T7069] usb 9-1: config 0 has an invalid interface number: 249 but max is 0 [ 117.375211][ T7069] usb 9-1: config 0 has no interface number 0 [ 117.377419][ T7069] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 117.381292][ T7069] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.388057][ T7069] usb 9-1: config 0 descriptor?? [ 117.392313][ T7069] port100 9-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 117.650075][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.801669][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.805402][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.809473][ T1460] usb 9-1: USB disconnect, device number 3 [ 117.817844][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.823741][ T39] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 117.827019][ T39] usb 5-1: can't read configurations, error -71 [ 117.889839][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 118.050962][ T838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.054152][ T838] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.059383][ T838] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 118.062538][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.065055][ T838] usb 7-1: Product: syz [ 118.066612][ T838] usb 7-1: Manufacturer: syz [ 118.068214][ T838] usb 7-1: SerialNumber: syz [ 118.071540][ T838] usb 7-1: config 0 descriptor?? [ 118.279535][ T40] audit: type=1400 audit(1770899796.037:441): avc: denied { node_bind } for pid=9446 comm="syz.2.1484" saddr=d813:1000:728f:102:301:902:1200:100 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 118.290559][ T838] usb 7-1: USB disconnect, device number 8 [ 118.359820][ T40] audit: type=1400 audit(1770899796.117:442): avc: denied { create } for pid=9451 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.366240][ T40] audit: type=1400 audit(1770899796.117:443): avc: denied { ioctl } for pid=9451 comm="syz.0.1486" path="socket:[27068]" dev="sockfs" ino=27068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.389491][ T40] audit: type=1400 audit(1770899796.147:444): avc: denied { ioctl } for pid=9453 comm="syz.0.1487" path="socket:[27073]" dev="sockfs" ino=27073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.424251][ T40] audit: type=1400 audit(1770899796.187:445): avc: denied { name_bind } for pid=9457 comm="syz.0.1489" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 118.608063][ T9470] input: syz1 as /devices/virtual/input/input15 [ 118.850049][ T40] audit: type=1400 audit(1770899796.617:446): avc: denied { name_bind } for pid=9483 comm="syz.2.1503" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 119.023819][ T9489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.059471][ T9491] sock: sock_set_timeout: `syz.2.1505' (pid 9491) tries to set negative timeout [ 119.091476][ T9495] __nla_validate_parse: 1 callbacks suppressed [ 119.091494][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 119.412173][ T9521] team_slave_0: entered promiscuous mode [ 119.414550][ T9521] team_slave_1: entered promiscuous mode [ 119.417196][ T9521] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 119.431800][ T9521] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 119.482645][ T9523] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1520'. [ 119.813701][ T9546] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1531'. [ 121.029893][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 121.032890][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 121.037257][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 121.040640][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 121.405976][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1579'. [ 121.504361][ T9657] input: syz1 as /devices/virtual/input/input16 [ 121.624741][ T9664] Bluetooth: MGMT ver 1.23 [ 121.626733][ T9664] Bluetooth: hci1: expected 546 bytes, got 2 bytes [ 121.664748][ T9661] PID 9661 killed due to inadequate hugepage pool [ 121.874429][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 122.077951][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 122.077968][ T40] audit: type=1400 audit(1770899799.837:450): avc: denied { watch watch_reads } for pid=9687 comm="syz.4.1596" path="pipe:[20049]" dev="pipefs" ino=20049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.090776][ T40] audit: type=1400 audit(1770899799.837:451): avc: denied { relabelfrom } for pid=9687 comm="syz.4.1596" name="" dev="pipefs" ino=26547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.180989][ T10] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 122.254634][ T9696] netlink: 'syz.4.1600': attribute type 3 has an invalid length. [ 122.257448][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 122.346028][ T5926] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 122.346052][ T5926] Bluetooth: hci3: Malformed LE Event: 0x0d [ 122.351753][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.355225][ T10] usb 5-1: no configurations [ 122.357177][ T10] usb 5-1: can't read configurations, error -22 [ 123.301103][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.307729][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 123.380753][ T5926] Bluetooth: hci2: command tx timeout [ 123.564161][ T40] audit: type=1400 audit(1770899801.327:452): avc: denied { listen } for pid=9752 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.571084][ T40] audit: type=1400 audit(1770899801.327:453): avc: denied { accept } for pid=9752 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.620155][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.710643][ T40] audit: type=1400 audit(1770899801.477:454): avc: denied { setopt } for pid=9766 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.956923][ T40] audit: type=1400 audit(1770899801.717:455): avc: denied { remount } for pid=9779 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 123.957733][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.979009][ T40] audit: type=1400 audit(1770899801.737:456): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 124.101300][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.287471][ T9809] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.660150][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.772210][ T9832] __nla_validate_parse: 6 callbacks suppressed [ 124.772231][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 124.778241][ T9832] netlink: 'syz.4.1655': attribute type 30 has an invalid length. [ 124.781818][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 124.883893][ T9837] veth0: entered promiscuous mode [ 124.890271][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 125.054917][ T40] audit: type=1400 audit(1770899802.817:457): avc: denied { mount } for pid=9842 comm="syz.0.1660" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.173802][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 125.177748][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 125.239921][ T838] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 125.393082][ T838] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.399831][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.403222][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.406268][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.412976][ T838] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.416403][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.427413][ T838] usb 9-1: config 0 descriptor?? [ 125.700100][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.801516][ T9881] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1677'. [ 125.847771][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.851208][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.853835][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.856377][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.858843][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.861878][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.864617][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.867083][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.869528][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.872245][ T838] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 125.890432][ T838] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 126.111050][ T838] usb 9-1: USB disconnect, device number 4 [ 126.748798][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.783180][ T9934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.802196][ T40] audit: type=1400 audit(1770899804.567:458): avc: denied { write } for pid=9942 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 126.857049][ T9951] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.908145][ T9934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.920503][ T9957] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1711'. [ 127.019145][ T9934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.104100][ T9934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.151298][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.159807][ T9978] netlink: 'syz.2.1723': attribute type 21 has an invalid length. [ 127.163109][ T9978] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1723'. [ 127.166951][ T9978] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1723'. [ 127.171792][ T9978] netlink: 'syz.2.1723': attribute type 21 has an invalid length. [ 127.175043][ T9978] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1723'. [ 127.243692][ T1143] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.246346][ T1143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.256336][ T1143] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.267449][ T1143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.378852][ T9996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.398258][ T40] audit: type=1400 audit(1770899805.157:459): avc: denied { bind } for pid=9995 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.674129][T10042] loop6: detected capacity change from 0 to 2560 [ 127.677253][ T6391] buffer_io_error: 15 callbacks suppressed [ 127.677268][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.683168][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.686883][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.692888][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.696125][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.698946][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.701871][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.704397][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.706858][ T6391] ldm_validate_partition_table(): Disk read failed. [ 127.709371][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.712438][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.715088][ T6391] Dev loop6: unable to read RDB block 0 [ 127.716910][ T6391] loop6: unable to read partition table [ 127.720719][T10042] ldm_validate_partition_table(): Disk read failed. [ 127.723004][T10042] Dev loop6: unable to read RDB block 0 [ 127.724913][T10042] loop6: unable to read partition table [ 127.727023][T10042] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 127.749521][ T5332] ldm_validate_partition_table(): Disk read failed. [ 127.754246][ T5332] Dev loop6: unable to read RDB block 0 [ 127.756665][ T5332] loop6: unable to read partition table [ 127.782673][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.826643][T10053] netlink: 'syz.2.1753': attribute type 30 has an invalid length. [ 127.944214][T10065] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 127.950918][ T40] audit: type=1400 audit(1770899805.707:460): avc: denied { map } for pid=10064 comm="syz.4.1759" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.960375][ T40] audit: type=1400 audit(1770899805.717:461): avc: denied { execute } for pid=10064 comm="syz.4.1759" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.420484][ T1460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.424039][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.549867][ T6000] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 128.570109][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 128.699780][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 128.703780][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.706412][ T6000] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 128.709991][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.720045][ T6000] usb 6-1: config 0 descriptor?? [ 128.730842][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 128.738405][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 128.743262][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.747524][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.751695][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.755581][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.760926][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.764859][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.820439][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.136499][ T6000] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 129.342494][ T7069] usb 6-1: USB disconnect, device number 10 [ 129.529922][T10119] usbtmc 9-1:16.0: simple usb_control_msg failed -32 [ 129.537316][ T6000] usb 9-1: USB disconnect, device number 5 [ 129.700693][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.861874][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.329803][ T59] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 130.482170][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 130.486447][ T59] usb 9-1: config 0 interface 0 has no altsetting 0 [ 130.489453][ T59] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 130.493726][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.498336][ T59] usb 9-1: config 0 descriptor?? [ 130.889981][ T40] audit: type=1400 audit(1770899808.647:462): avc: denied { module_load } for pid=10165 comm="syz.0.1798" path="/433/bus" dev="tmpfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 130.892483][T10166] Invalid ELF header magic: != ELF [ 130.902391][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.913229][ T59] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 131.090188][T10178] __nla_validate_parse: 4 callbacks suppressed [ 131.090208][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1803'. [ 131.128240][ T59] usb 9-1: USB disconnect, device number 6 [ 131.245585][ T40] audit: type=1400 audit(1770899809.007:463): avc: denied { mounton } for pid=10183 comm="syz.1.1806" path="/383/file0" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.469811][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.883748][ T40] audit: type=1800 audit(1770899809.647:464): pid=10218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1821" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 131.957102][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.977150][ T40] audit: type=1400 audit(1770899809.737:465): avc: denied { ioctl } for pid=10224 comm="syz.2.1824" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.222471][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.226552][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.229366][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.237460][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.241079][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.371507][T10238] chnl_net:caif_netlink_parms(): no params data found [ 132.430986][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.433734][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.436612][T10238] bridge_slave_0: entered allmulticast mode [ 132.441488][T10238] bridge_slave_0: entered promiscuous mode [ 132.445210][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.447758][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.452924][T10238] bridge_slave_1: entered allmulticast mode [ 132.461520][T10238] bridge_slave_1: entered promiscuous mode [ 132.486684][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.492554][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.521987][T10238] team0: Port device team_slave_0 added [ 132.525263][T10238] team0: Port device team_slave_1 added [ 132.543622][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.546147][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.556868][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.562477][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.565325][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.575206][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.600051][T10238] hsr_slave_0: entered promiscuous mode [ 132.602422][T10238] hsr_slave_1: entered promiscuous mode [ 132.604548][T10238] debugfs: 'hsr0' already exists in 'hsr' [ 132.606810][T10238] Cannot create hsr debugfs directory [ 132.746811][T10238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.751939][T10238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.756064][T10238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.762516][T10238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.792044][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.795226][T10238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.798629][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.801816][T10238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.830703][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.834520][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.864704][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.878054][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.886025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.888274][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.896708][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.899035][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.980084][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.066590][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.262950][T10238] veth0_vlan: entered promiscuous mode [ 133.268103][T10238] veth1_vlan: entered promiscuous mode [ 133.286677][T10238] veth0_macvtap: entered promiscuous mode [ 133.292805][T10238] veth1_macvtap: entered promiscuous mode [ 133.302508][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.309472][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.315527][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.318764][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.321830][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.327665][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.377411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.384839][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.409152][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.413133][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.529121][T10303] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 133.529121][T10303] The task syz.4.1847 (10303) triggered the difference, watch for misbehavior. [ 133.619917][ T5990] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.701595][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 133.785983][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.790921][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.795759][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.800018][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.805554][ T5990] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.809288][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.814855][ T5990] usb 5-1: config 0 descriptor?? [ 134.020114][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.180339][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.232977][ T5990] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 134.240675][ T5990] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.260059][ T5926] Bluetooth: hci0: command tx timeout [ 134.356200][T10318] tun0: tun_chr_ioctl cmd 1074025675 [ 134.358539][T10318] tun0: persist disabled [ 134.360985][T10318] tun0: tun_chr_ioctl cmd 1074025675 [ 134.363176][T10318] tun0: persist disabled [ 134.376163][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 134.380014][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 134.397343][ T1142] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.397464][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 134.401666][ T1142] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.404851][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 134.407593][ T1142] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.414835][ T1142] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.499956][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.535437][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 134.566313][ T40] audit: type=1400 audit(1770899812.327:466): avc: denied { remount } for pid=10333 comm="syz.2.1863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.795250][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'. [ 134.819917][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 134.973138][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.977597][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.983536][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.988759][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.992813][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.010676][ T34] usb 9-1: config 0 descriptor?? [ 135.060614][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.208242][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 135.226863][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 135.359825][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 135.366956][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 135.372239][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.376191][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.379587][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 135.384587][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 135.387441][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.391466][ T9] usb 10-1: config 0 descriptor?? [ 135.430837][ T34] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.694953][ T10] usb 9-1: USB disconnect, device number 7 [ 135.830306][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5013.000C/input/input18 [ 135.907339][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5013.000C/input/input19 [ 135.980417][ T9] kye 0003:0458:5013.000C: input,hiddev1,hidraw2: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 136.009273][ T9] usb 10-1: USB disconnect, device number 2 [ 136.039078][T10383] fido_id[10383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 136.100242][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.178777][T10391] input: syz1 as /devices/virtual/input/input20 [ 136.306092][ T5990] usb 5-1: USB disconnect, device number 16 [ 136.317018][ T40] audit: type=1400 audit(1770899814.077:467): avc: denied { read append } for pid=10407 comm="syz.2.1895" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.317246][T10409] random: crng reseeded on system resumption [ 136.326409][ T40] audit: type=1400 audit(1770899814.077:468): avc: denied { ioctl open } for pid=10407 comm="syz.2.1895" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.349950][ T5926] Bluetooth: hci0: command tx timeout [ 136.469446][ T5926] Bluetooth: hci2: connection err: -111 [ 136.582840][T10441] ipvlan1: entered allmulticast mode [ 136.585159][T10441] veth0_vlan: entered allmulticast mode [ 136.591691][T10441] team0: Device ipvlan1 failed to register rx_handler [ 136.801366][ T40] audit: type=1400 audit(1770899814.567:469): avc: denied { write } for pid=10465 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.874107][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 136.877878][T10476] netlink: 'syz.0.1918': attribute type 7 has an invalid length. [ 136.881827][T10476] netlink: 'syz.0.1918': attribute type 8 has an invalid length. [ 136.884861][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 136.913364][ T40] audit: type=1400 audit(1770899814.677:470): avc: denied { map } for pid=10483 comm="syz.2.1920" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 137.087012][T10499] Bluetooth: MGMT ver 1.23 [ 137.140165][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.230417][ T6000] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.389847][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 137.392793][ T6000] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 137.395680][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.399882][ T6000] usb 5-1: config 0 descriptor?? [ 137.412021][ T6000] as10x_usb: device has been detected [ 137.414941][ T6000] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.423856][ T6000] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 137.444331][ T40] audit: type=1400 audit(1770899815.207:471): avc: denied { firmware_load } for pid=6000 comm="kworker/2:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 137.445094][ T6000] as10x_usb: error during firmware upload part1 [ 137.455705][ T6000] Registered device nBox DVB-T Dongle [ 137.550185][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.607907][ T10] usb 5-1: USB disconnect, device number 17 [ 137.620090][ T10] Unregistered device nBox DVB-T Dongle [ 137.621589][ T10] as10x_usb: device has been disconnected [ 138.022960][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.025615][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.089854][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 138.180131][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.251444][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.255905][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.260038][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.260100][ T5977] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 138.264795][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.264820][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.266404][ T10] usb 10-1: config 0 descriptor?? [ 138.269083][ T5977] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 138.269793][ T5926] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.339968][ T838] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 138.350012][ T40] audit: type=1400 audit(1770899816.117:472): avc: denied { setopt } for pid=10527 comm="syz.0.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.420000][ T5926] Bluetooth: hci0: command tx timeout [ 138.490162][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 138.493102][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.495348][ T838] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.498379][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.503196][ T838] usb 7-1: config 0 descriptor?? [ 138.650234][T10540] tap0: tun_chr_ioctl cmd 1074025675 [ 138.652430][T10540] tap0: persist enabled [ 138.654640][T10540] tap0: tun_chr_ioctl cmd 1074025675 [ 138.656401][T10540] tap0: persist enabled [ 138.660275][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.692171][ T10] hid_parser_main: 10 callbacks suppressed [ 138.692190][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.699755][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.702121][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.704574][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.706980][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.719768][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.722964][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.725921][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.728931][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.732374][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 138.751641][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 138.930050][ T838] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 138.956267][ T10] usb 10-1: USB disconnect, device number 3 [ 139.120635][ T838] usb 7-1: USB disconnect, device number 9 [ 139.220804][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.300870][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.913159][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 139.942723][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.976705][T10601] team0: Port device team_slave_0 removed [ 139.993009][T10607] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1972'. [ 140.044661][T10612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 140.260226][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.263242][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 140.266667][T10628] chnl_net:caif_netlink_parms(): no params data found [ 140.340044][ T5926] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.342550][ T5977] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 140.344780][ T5977] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 140.380260][ T838] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 140.393098][ T5977] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 140.397163][ T5977] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 140.401134][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.405772][ T5977] Tainted: [L]=SOFTLOCKUP [ 140.407530][ T5977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.411005][ T5977] Workqueue: events rfkill_op_handler [ 140.412766][ T5977] RIP: 0010:klist_put+0x4d/0x1d0 [ 140.414607][ T5977] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 5c f8 0c [ 140.418246][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 140.421740][ T5977] RSP: 0018:ffffc900016ff870 EFLAGS: 00010202 [ 140.421756][ T5977] RAX: dffffc0000000000 RBX: ffff888034aa4460 RCX: 0000000000000000 [ 140.421764][ T5977] RDX: 000000000000000b RSI: ffffffff8b749295 RDI: 0000000000000058 [ 140.421771][ T5977] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2176c7c [ 140.421783][ T5977] R10: ffffffff90bb63e3 R11: 00000000000075d9 R12: 0000000000000000 [ 140.421790][ T5977] R13: 0000000000000001 R14: ffffffff90bb63a0 R15: dffffc0000000000 [ 140.421797][ T5977] FS: 0000000000000000(0000) GS:ffff8880d649d000(0000) knlGS:0000000000000000 [ 140.421825][ T5977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.431673][ T40] audit: type=1400 audit(1770899818.197:473): avc: denied { read } for pid=5313 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 140.434659][ T5977] CR2: 00007fffee584ff0 CR3: 000000003563f000 CR4: 0000000000352ef0 [ 140.434677][ T5977] Call Trace: [ 140.434684][ T5977] [ 140.434693][ T5977] klist_remove+0x14c/0x2e0 [ 140.438069][ T40] audit: type=1400 audit(1770899818.197:474): avc: denied { search } for pid=5313 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.441255][ T5977] ? __pfx_klist_remove+0x10/0x10 [ 140.441288][ T5977] ? kobject_put+0xb9/0x640 [ 140.441313][ T5977] device_move+0x12d/0x1140 [ 140.441360][ T5977] hci_conn_del_sysfs+0x86/0x1a0 [ 140.445958][ T40] audit: type=1400 audit(1770899818.197:475): avc: denied { search } for pid=5313 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.448246][ T5977] hci_conn_del+0x506/0x1180 [ 140.448268][ T5977] hci_conn_hash_flush+0x186/0x280 [ 140.450564][ T40] audit: type=1400 audit(1770899818.197:476): avc: denied { add_name } for pid=5313 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.458052][ T5977] hci_dev_close_sync+0x5a7/0x1240 [ 140.458079][ T5977] ? __pfx_bt_err+0x10/0x10 [ 140.458097][ T5977] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 140.461553][ T40] audit: type=1400 audit(1770899818.197:477): avc: denied { create } for pid=5313 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.462481][ T5977] ? do_raw_spin_lock+0x128/0x260 [ 140.463455][ T40] audit: type=1400 audit(1770899818.197:478): avc: denied { append open } for pid=5313 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.465302][ T5977] hci_dev_do_close+0x2e/0xb0 [ 140.472345][ T40] audit: type=1400 audit(1770899818.197:479): avc: denied { getattr } for pid=5313 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.473715][ T5977] hci_rfkill_set_block+0x225/0x3a0 [ 140.499806][ T5933] Bluetooth: hci0: command tx timeout [ 140.499976][ T5977] ? lockdep_hardirqs_on+0x78/0x100 [ 140.533007][ T5977] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 140.535026][ T5977] rfkill_set_block+0x205/0x510 [ 140.536620][ T5977] rfkill_epo+0x93/0x1e0 [ 140.538047][ T5977] rfkill_op_handler+0x230/0x260 [ 140.539731][ T5977] process_one_work+0x9c2/0x1840 [ 140.541405][ T5977] ? __pfx_process_one_work+0x10/0x10 [ 140.543180][ T5977] ? __pfx_rfkill_op_handler+0x10/0x10 [ 140.545069][ T5977] worker_thread+0x5da/0xe40 [ 140.546595][ T5977] ? __pfx_worker_thread+0x10/0x10 [ 140.548237][ T5977] ? kthread+0x13a/0x450 [ 140.549733][ T5977] ? __pfx_worker_thread+0x10/0x10 [ 140.551450][ T5977] kthread+0x370/0x450 [ 140.552797][ T5977] ? __pfx_kthread+0x10/0x10 [ 140.554659][ T5977] ret_from_fork+0x754/0xd80 [ 140.556541][ T5977] ? __pfx_ret_from_fork+0x10/0x10 [ 140.559034][ T5977] ? __switch_to+0x7b4/0x10c0 [ 140.561180][ T5977] ? __pfx_kthread+0x10/0x10 [ 140.563342][ T5977] ret_from_fork_asm+0x1a/0x30 [ 140.565773][ T5977] [ 140.567079][ T5977] Modules linked in: [ 140.571234][ T5977] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.582980][ T5977] RIP: 0010:klist_put+0x4d/0x1d0 [ 140.584697][ T5977] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 5c f8 0c [ 140.591549][ T5977] RSP: 0018:ffffc900016ff870 EFLAGS: 00010202 [ 140.594238][ T5977] RAX: dffffc0000000000 RBX: ffff888034aa4460 RCX: 0000000000000000 [ 140.609856][ T5977] RDX: 000000000000000b RSI: ffffffff8b749295 RDI: 0000000000000058 [ 140.613532][ T5977] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2176c7c [ 140.616628][ T5977] R10: ffffffff90bb63e3 R11: 00000000000075d9 R12: 0000000000000000 [ 140.632178][ T5977] R13: 0000000000000001 R14: ffffffff90bb63a0 R15: dffffc0000000000 [ 140.635457][ T5977] FS: 0000000000000000(0000) GS:ffff8880d649d000(0000) knlGS:0000000000000000 [ 140.638949][ T5977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.642170][ T5977] CR2: 0000562016c6da78 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 140.644889][ T5977] Kernel panic - not syncing: Fatal exception [ 140.647699][ T5977] Kernel Offset: disabled [ 140.649180][ T5977] Rebooting in 86400 seconds..