last executing test programs: 2m7.028663466s ago: executing program 3 (id=8062): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x9, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 2m7.028480269s ago: executing program 3 (id=8063): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xaf9a, 0x2, 0xfffffffe, 0x2000181}) close_range(r0, r0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) 2m6.073334305s ago: executing program 3 (id=8070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 2m6.072956202s ago: executing program 3 (id=8072): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 2m6.027390871s ago: executing program 3 (id=8074): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m5.771599844s ago: executing program 3 (id=8080): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0xbc2536767ff1cec2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x32}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2m5.680981711s ago: executing program 32 (id=8080): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0xbc2536767ff1cec2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x32}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1m40.388998164s ago: executing program 1 (id=9075): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x178) 1m40.388154305s ago: executing program 1 (id=9079): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m40.341462768s ago: executing program 1 (id=9082): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x804c4700, 0xfffffffffffffffe) 1m40.299378252s ago: executing program 1 (id=9084): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m40.284773861s ago: executing program 1 (id=9087): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1m39.984018848s ago: executing program 1 (id=9095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) 1m39.858540739s ago: executing program 33 (id=9095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) 53.209953864s ago: executing program 2 (id=11227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 53.124309849s ago: executing program 2 (id=11230): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0x10, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdf9, {0x0}, 0xd90b}]}, 0x6}) 53.084375887s ago: executing program 2 (id=11234): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x3, 0xebe, 0x1, {0x1, @pix_mp={0x6, 0x8, 0x47504a50, 0x9, 0x6, [{0x2776463d, 0x7}, {0xfffffffc, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x610, 0xfffffffc}, {0x7f, 0x6}], 0xa0, 0x7f, 0x1, 0x1, 0x5}}, 0x8}) 53.0294945s ago: executing program 2 (id=11237): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x60882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}]) 52.896475407s ago: executing program 2 (id=11248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 52.810618301s ago: executing program 2 (id=11250): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) 36.474739544s ago: executing program 34 (id=11250): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) 27.906974302s ago: executing program 6 (id=11603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 18.926150667s ago: executing program 6 (id=11603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 11.411881507s ago: executing program 6 (id=11603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 10.106483409s ago: executing program 4 (id=12140): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r1, 0x0) write(r0, &(0x7f0000000680)="17", 0x1) 10.051580581s ago: executing program 4 (id=12142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x414993d1f1b5c792}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 9.987135759s ago: executing program 4 (id=12143): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r2, 0x0, r1}) 9.929030294s ago: executing program 4 (id=12144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 9.928548008s ago: executing program 4 (id=12145): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffbf, 0x0, 0xcf, 0x2, 0x5, "0c411be01fbcd2b7cb366b00", 0x1004, 0xffffffff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0xd) 9.548406114s ago: executing program 4 (id=12150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 9.456002216s ago: executing program 35 (id=12150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.233699255s ago: executing program 6 (id=11603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 2.301801097s ago: executing program 7 (id=12151): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.775730896s ago: executing program 7 (id=12151): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.372176889s ago: executing program 7 (id=12151): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 674.6102ms ago: executing program 0 (id=12263): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 322.639068ms ago: executing program 0 (id=12270): creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 322.191712ms ago: executing program 0 (id=12271): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 239.851159ms ago: executing program 5 (id=12272): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 238.801995ms ago: executing program 0 (id=12273): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 170.70164ms ago: executing program 5 (id=12274): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 170.421671ms ago: executing program 0 (id=12275): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 99.971145ms ago: executing program 5 (id=12276): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 89.944397ms ago: executing program 0 (id=12277): unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 89.46058ms ago: executing program 5 (id=12278): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) read$snddsp(r1, &(0x7f0000004fc0)=""/73, 0x49) 2.416348ms ago: executing program 5 (id=12279): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020081000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 5 (id=12287): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5cf, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) kernel console output (not intermixed with test programs): (5) [ 224.815159][ T839] usb 5-1: config 0 has no interface number 0 [ 224.816642][T28408] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.822686][ T839] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.822841][T28408] vhci_hcd vhci_hcd.0: Device attached [ 224.827572][ T839] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.833926][ T839] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.837845][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.839399][T28408] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 224.844066][T28408] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.846673][T28408] vhci_hcd vhci_hcd.0: Device attached [ 224.851336][T28412] vhci_hcd: connection closed [ 224.851372][T28409] vhci_hcd: connection closed [ 224.851594][ T1183] vhci_hcd vhci_hcd.4: stop threads [ 224.852451][T28414] vhci_hcd: connection closed [ 224.852705][ T839] usb 5-1: config 0 descriptor?? [ 224.859515][ T839] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 224.860702][ T1183] vhci_hcd vhci_hcd.4: release socket [ 224.868852][ T1183] vhci_hcd vhci_hcd.4: disconnect device [ 224.871328][ T1183] vhci_hcd vhci_hcd.4: stop threads [ 224.873676][ T1183] vhci_hcd vhci_hcd.4: release socket [ 224.876058][ T1183] vhci_hcd vhci_hcd.4: disconnect device [ 224.879191][ T1183] vhci_hcd vhci_hcd.4: stop threads [ 224.881471][ T1183] vhci_hcd vhci_hcd.4: release socket [ 224.883784][ T1183] vhci_hcd vhci_hcd.4: disconnect device [ 225.071432][T28388] iowarrior 5-1:0.1: Error -90 while submitting URB [ 225.077047][ T839] usb 5-1: USB disconnect, device number 9 [ 225.489753][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9748'. [ 225.492934][T28481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9748'. [ 225.495908][T28481] netlink: 'syz.4.9748': attribute type 11 has an invalid length. [ 225.498473][T28481] netlink: 'syz.4.9748': attribute type 7 has an invalid length. [ 225.521686][T28483] sg_read: process 329 (syz.5.9749) changed security contexts after opening file descriptor, this is not allowed. [ 226.424719][T28619] can0: slcan on ttynull. [ 226.560571][T28618] can0 (unregistered): slcan off ttynull. [ 226.959317][T28683] overlayfs: regular lower layers cannot follow data lower layers [ 227.503953][ T41] kauditd_printk_skb: 302 callbacks suppressed [ 227.503969][ T41] audit: type=1400 audit(524504.695:45981): avc: denied { mount } for pid=28727 comm="syz.4.9843" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 227.518882][ T41] audit: type=1400 audit(524504.704:45982): avc: denied { create } for pid=28731 comm="syz.2.9845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.522594][T28733] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 227.527948][ T41] audit: type=1400 audit(524504.704:45983): avc: denied { ioctl } for pid=28731 comm="syz.2.9845" path="socket:[83024]" dev="sockfs" ino=83024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.542105][ T41] audit: type=1400 audit(524504.704:45984): avc: denied { write } for pid=28731 comm="syz.2.9845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.561276][ T41] audit: type=1400 audit(524504.704:45985): avc: denied { nlmsg_write } for pid=28731 comm="syz.2.9845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.568320][ T41] audit: type=1400 audit(524504.723:45986): avc: denied { unmount } for pid=22929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 227.575140][ T41] audit: type=1400 audit(524504.760:45987): avc: denied { create } for pid=28738 comm="syz.2.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.582479][ T41] audit: type=1400 audit(524504.760:45988): avc: denied { write } for pid=28738 comm="syz.2.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.595753][ T41] audit: type=1400 audit(524504.760:45989): avc: denied { read } for pid=28738 comm="syz.2.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.603676][T28743] F2FS-fs: Conflicting test_dummy_encryption options [ 227.677728][ T41] audit: type=1400 audit(524504.854:45990): avc: denied { create } for pid=28751 comm="syz.2.9853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.902355][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9861'. [ 228.212211][T28812] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 228.335369][T28834] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9889'. [ 228.360416][T28832] syz.4.9888 (28832) used greatest stack depth: 19104 bytes left [ 228.436424][T28846] 9pnet_fd: Insufficient options for proto=fd [ 228.538127][T28857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9899'. [ 228.728249][T28878] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9910'. [ 228.743689][T28880] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9912'. [ 228.786286][ T50] IPVS: starting estimator thread 0... [ 228.886982][T28892] IPVS: using max 24 ests per chain, 57600 per kthread [ 229.002846][T28921] program syz.2.9926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.175461][T28952] tipc: Started in network mode [ 229.177798][T28952] tipc: Node identity , cluster identity 4711 [ 229.179859][T28952] tipc: Failed to set node id, please configure manually [ 229.182228][T28952] tipc: Enabling of bearer rejected, failed to enable media [ 229.215102][T28954] can0: slcan on ttyS3. [ 229.273161][T28954] can0 (unregistered): slcan off ttyS3. [ 229.679087][ T50] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 229.686123][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9963'. [ 229.689059][T29029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9963'. [ 229.828614][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.842100][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.845846][ T50] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.848823][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 229.852443][ T50] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 229.855560][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.862605][T28986] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.868929][ T50] hub 10-1:1.0: bad descriptor, ignoring hub [ 229.871658][ T50] hub 10-1:1.0: probe with driver hub failed with error -5 [ 229.882928][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 229.885232][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 229.891393][ T50] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 229.895010][ T50] cdc_wdm 10-1:1.0: Unknown control protocol [ 230.010844][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 230.014243][ T24] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 230.016997][ T24] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 230.019823][ T24] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 230.023447][ T24] usb 5-1: config 250 has no interface number 0 [ 230.025626][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 230.029467][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 230.033313][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.037096][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.041710][ T24] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 230.050038][ T24] usb 5-1: config 250 interface 228 has no altsetting 0 [ 230.054916][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 230.058724][ T24] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 230.062608][ T24] usb 5-1: Product: syz [ 230.064636][ T24] usb 5-1: SerialNumber: syz [ 230.072769][ T24] hub 5-1:250.228: bad descriptor, ignoring hub [ 230.075170][ T24] hub 5-1:250.228: probe with driver hub failed with error -5 [ 230.165841][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.168392][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.173739][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.176900][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.180393][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.183079][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.185570][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 230.299346][ T24] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 230.302248][ T5971] usb 10-1: USB disconnect, device number 3 [ 230.342529][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9977'. [ 230.556327][T29105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9983'. [ 230.559993][T29105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9983'. [ 230.569325][T29105] erspan0: entered promiscuous mode [ 230.621642][ T839] usb 5-1: USB disconnect, device number 10 [ 230.629979][ T839] usblp1: removed [ 230.814447][T29132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.911906][T29149] macsec1: entered promiscuous mode [ 230.913648][T29149] macsec1: entered allmulticast mode [ 231.116426][T29177] sp0: Synchronizing with TNC [ 231.134407][T29183] program syz.2.10006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.146836][T29175] [U] [ 231.377482][T29223] max out of range [ 232.112247][T29336] Invalid logical block size (3) [ 232.165664][T29335] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 232.217113][T29350] usb usb8: usbfs: process 29350 (syz.4.10080) did not claim interface 0 before use [ 232.381217][T29375] bond7 (unregistering): Released all slaves [ 232.585712][T29456] netlink: 'syz.5.10097': attribute type 13 has an invalid length. [ 232.675995][T29468] mkiss: ax0: crc mode is auto. [ 232.844737][T29495] sp0: Synchronizing with TNC [ 232.925270][ T41] kauditd_printk_skb: 260 callbacks suppressed [ 232.925286][ T41] audit: type=1400 audit(524509.744:46251): avc: denied { read write } for pid=29506 comm="syz.4.10112" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 232.941517][ T41] audit: type=1400 audit(524509.744:46252): avc: denied { open } for pid=29506 comm="syz.4.10112" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 232.951650][ T41] audit: type=1400 audit(524509.753:46253): avc: denied { mounton } for pid=29506 comm="syz.4.10112" path="/499" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 233.019829][ T41] audit: type=1400 audit(524509.837:46254): avc: denied { create } for pid=29520 comm="syz.0.10116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.029365][ T41] audit: type=1400 audit(524509.837:46255): avc: denied { write } for pid=29520 comm="syz.0.10116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.101946][ T41] audit: type=1400 audit(524509.921:46256): avc: denied { create } for pid=29530 comm="syz.4.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.113470][ T41] audit: type=1400 audit(524509.921:46257): avc: denied { write } for pid=29530 comm="syz.4.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.122707][ T41] audit: type=1400 audit(524509.921:46258): avc: denied { nlmsg_read } for pid=29530 comm="syz.4.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.157970][ T41] audit: type=1400 audit(524509.968:46259): avc: denied { read write } for pid=29537 comm="syz.4.10123" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 233.172517][ T41] audit: type=1400 audit(524509.968:46260): avc: denied { open } for pid=29537 comm="syz.4.10123" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 233.188587][T29544] xt_l2tp: unknown flags: 51 [ 233.344455][T29572] tmpfs: Cannot change global quota limit on remount [ 233.396020][T29584] Cannot find add_set index 46338 as target [ 233.408454][T29588] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 233.408454][T29588] program syz.5.10147 not setting count and/or reply_len properly [ 233.796658][T29657] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 233.886658][T29667] __nla_validate_parse: 2 callbacks suppressed [ 233.886718][T29667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10172'. [ 233.893413][T29667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10172'. [ 233.896887][T29667] netlink: 'syz.4.10172': attribute type 12 has an invalid length. [ 233.903926][T29672] netlink: 596 bytes leftover after parsing attributes in process `syz.2.10173'. [ 233.940981][T29677] pim6reg: entered allmulticast mode [ 233.947050][T29677] pim6reg: left allmulticast mode [ 234.085960][T29699] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10183'. [ 234.089079][T29699] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10183'. [ 234.168865][ T24] hid_parser_main: 4086 callbacks suppressed [ 234.168880][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 234.179610][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.217654][T29718] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 234.223844][T29712] fido_id[29712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.234361][T29721] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.345628][T29732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 234.345628][T29732] program syz.5.10194 not setting count and/or reply_len properly [ 235.442750][T29828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10236'. [ 235.600855][T29845] tmpfs: Cannot enable quota on remount [ 235.688683][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10248'. [ 235.692784][T29852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10248'. [ 235.696491][T29852] netlink: 'syz.5.10248': attribute type 18 has an invalid length. [ 235.699811][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10248'. [ 235.852395][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10256'. [ 235.855302][T29871] netlink: 'syz.0.10256': attribute type 7 has an invalid length. [ 235.858161][T29871] netlink: 'syz.0.10256': attribute type 13 has an invalid length. [ 236.165820][T29903] netlink: 'syz.5.10267': attribute type 322 has an invalid length. [ 236.176687][T29906] tmpfs: Bad value for 'mpol' [ 236.274153][T29916] delete_channel: no stack [ 236.482749][T29727] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 236.675982][T29958] macsec2: entered promiscuous mode [ 236.930306][T29985] xfrm0 speed is unknown, defaulting to 1000 [ 237.233306][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.237051][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.240719][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.264605][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.267787][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.270822][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.274033][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.278697][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.281748][ T10] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 237.298095][ T10] hid-generic 00A0:0086:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 237.300742][T30043] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 237.349601][T30048] fido_id[30048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.560222][T30079] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 237.665366][T30105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=30105 comm=syz.5.10333 [ 237.750965][T30119] xt_policy: too many policy elements [ 237.856264][T30134] devtmpfs: Cannot change global quota limit on remount [ 237.924892][T30145] netlink: 'syz.0.10351': attribute type 1 has an invalid length. [ 237.928275][T30145] netlink: 'syz.0.10351': attribute type 3 has an invalid length. [ 238.185264][T30177] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 238.299288][T30196] sp0: Synchronizing with TNC [ 238.305373][ T41] kauditd_printk_skb: 210 callbacks suppressed [ 238.305388][ T41] audit: type=1400 audit(524514.775:46471): avc: denied { read } for pid=5641 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 238.307443][T30195] [U] [ 238.323725][ T41] audit: type=1400 audit(524514.784:46472): avc: denied { search } for pid=5641 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.332922][ T41] audit: type=1400 audit(524514.784:46473): avc: denied { search } for pid=5641 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.344582][ T41] audit: type=1400 audit(524514.784:46474): avc: denied { search } for pid=5641 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.355382][ T41] audit: type=1400 audit(524514.784:46475): avc: denied { read } for pid=5641 comm="dhcpcd" name="n143" dev="tmpfs" ino=9193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.364463][ T41] audit: type=1400 audit(524514.784:46476): avc: denied { open } for pid=5641 comm="dhcpcd" path="/run/udev/data/n143" dev="tmpfs" ino=9193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.376949][ T41] audit: type=1400 audit(524514.784:46477): avc: denied { getattr } for pid=5641 comm="dhcpcd" path="/run/udev/data/n143" dev="tmpfs" ino=9193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.390986][ T41] audit: type=1400 audit(524514.859:46478): avc: denied { recv } for pid=5917 comm="syz-executor" saddr=127.0.0.1 src=49418 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 238.440129][ T41] audit: type=1400 audit(524514.896:46479): avc: denied { create } for pid=30210 comm="syz.0.10374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.477282][ T41] audit: type=1400 audit(524514.933:46480): avc: denied { write } for pid=30213 comm="syz.0.10375" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.650181][T30241] overlayfs: workdir and upperdir must be separate subtrees [ 238.721698][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.767031][T30256] mkiss: ax0: crc mode is auto. [ 239.382401][ T9] hid-generic 0362:07FF:7FFFFFFF.0006: item fetching failed at offset 0/2 [ 239.390864][ T9] hid-generic 0362:07FF:7FFFFFFF.0006: probe with driver hid-generic failed with error -22 [ 239.789481][T30402] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 239.882748][T30413] netlink: 'syz.4.10451': attribute type 10 has an invalid length. [ 239.888191][T30413] team0: Device vxcan1 is of different type [ 239.906643][T30420] No control pipe specified [ 240.377209][T30474] fuse: Invalid rootmode [ 240.844115][T30527] __nla_validate_parse: 3 callbacks suppressed [ 240.844128][T30527] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10497'. [ 240.949682][T30542] program syz.0.10503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.602453][T30609] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 241.700048][T30625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10538'. [ 241.703932][T30625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10538'. [ 241.746238][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10540'. [ 241.970909][T30659] vlan2: entered promiscuous mode [ 241.973190][T30659] bridge0: entered promiscuous mode [ 241.975700][T30659] vlan2: entered allmulticast mode [ 241.977988][T30659] bridge0: entered allmulticast mode [ 242.227996][T30696] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10570'. [ 242.407298][ T5947] Bluetooth: hci1: command 0x0405 tx timeout [ 242.692410][T30740] xt_l2tp: v2 tid > 0xffff: 2031748 [ 243.189941][T30773] netlink: 'syz.0.10601': attribute type 3 has an invalid length. [ 243.312156][T30784] ptrace attach of "/syz-executor exec"[30785] was attempted by "/syz-executor exec"[30784] [ 243.375251][T30798] CIFS: Unable to determine destination address [ 243.682665][ T41] kauditd_printk_skb: 234 callbacks suppressed [ 243.682683][ T41] audit: type=1326 audit(524519.797:46715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38ad9c629 code=0x7ffc0000 [ 243.693399][T30843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10627'. [ 243.703383][ T41] audit: type=1326 audit(524519.797:46716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38ad9c629 code=0x7ffc0000 [ 243.712750][ T41] audit: type=1326 audit(524519.797:46717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff38ad5cece code=0x7ffc0000 [ 243.728307][ T41] audit: type=1400 audit(524519.797:46718): avc: denied { write } for pid=30839 comm="syz.5.10626" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.737398][ T41] audit: type=1400 audit(524519.797:46719): avc: denied { open } for pid=30839 comm="syz.5.10626" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.753755][ T41] audit: type=1326 audit(524519.797:46720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38ad9c629 code=0x7ffc0000 [ 243.774015][ T41] audit: type=1326 audit(524519.806:46721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff38ad9c629 code=0x7ffc0000 [ 243.786808][ T41] audit: type=1400 audit(524519.806:46722): avc: denied { ioctl } for pid=30839 comm="syz.5.10626" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.797898][ T41] audit: type=1326 audit(524519.806:46723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.5.10626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38ad9c629 code=0x7ffc0000 [ 243.811804][T30853] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 243.813500][ T41] audit: type=1400 audit(524519.834:46724): avc: denied { create } for pid=30844 comm="syz.2.10628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.104007][T30904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10651'. [ 244.105211][T30905] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10653'. [ 244.345217][T30939] ptrace attach of "/syz-executor exec"[26253] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 244.438102][T30946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10673'. [ 244.551112][T30960] [U] v3f"S/4:XTzWtlW= [ 244.553497][T30960] [U] J"e:" [ 244.686959][T30977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10686'. [ 244.971274][T31026] Bluetooth: MGMT ver 1.23 [ 245.486790][T31104] hugetlbfs: Bad value for 'uid' [ 245.488951][T31104] hugetlbfs: Bad value for 'uid' [ 245.613171][T31125] bridge_slave_0: invalid flags given to default FDB implementation [ 245.762007][T31146] xt_limit: Overflow, try lower: 271964/0 [ 245.897993][T31170] netlink: 'syz.5.10769': attribute type 11 has an invalid length. [ 246.145655][ T839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.316800][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 246.329347][ T839] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 246.332872][ T839] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 246.336146][ T839] usb 5-1: Product: syz [ 246.337837][ T839] usb 5-1: Manufacturer: syz [ 246.340882][ T839] usb 5-1: SerialNumber: syz [ 246.344394][ T839] usb 5-1: config 0 descriptor?? [ 246.565443][ T839] usb 5-1: USB disconnect, device number 11 [ 247.341064][T31316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10821'. [ 247.581081][T31362] openvswitch: netlink: Duplicate key (type 6). [ 247.823178][T31392] sp0: Synchronizing with TNC [ 247.829546][T31390] [U] [ 247.912107][T31410] CIFS mount error: No usable UNC path provided in device string! [ 247.912107][T31410] [ 247.917423][T31410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 247.946138][T31413] program syz.5.10860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.961928][T31416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10862'. [ 248.050703][T31429] netlink: 'syz.4.10868': attribute type 1 has an invalid length. [ 248.062715][T31429] netlink: 'syz.4.10868': attribute type 2 has an invalid length. [ 248.134553][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10874'. [ 248.241719][T31455] can0: slcan on ttynull. [ 248.250576][T31456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10881'. [ 248.253730][T31456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10881'. [ 248.335746][T31453] can0 (unregistered): slcan off ttynull. [ 248.466474][T31483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.471833][T31483] overlayfs: missing 'lowerdir' [ 248.547471][T31503] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10898'. [ 248.551853][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10898'. [ 248.956823][ T5934] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 248.960140][ T5934] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 249.069330][ T41] kauditd_printk_skb: 200 callbacks suppressed [ 249.069347][ T41] audit: type=1400 audit(524524.819:46925): avc: denied { append } for pid=31574 comm="syz.4.10925" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.088503][ T41] audit: type=1400 audit(524524.838:46926): avc: denied { create } for pid=31576 comm="syz.2.10924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.101221][ T41] audit: type=1400 audit(524524.847:46927): avc: denied { write } for pid=31576 comm="syz.2.10924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.110740][ T41] audit: type=1400 audit(524524.847:46928): avc: denied { read } for pid=31576 comm="syz.2.10924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.141859][T31585] overlay: ./file0 is not a directory [ 249.141989][ T41] audit: type=1400 audit(524524.885:46929): avc: denied { mounton } for pid=31582 comm="syz.2.10927" path="/2850/file0" dev="tmpfs" ino=14372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.155268][ T41] audit: type=1400 audit(524524.885:46930): avc: denied { mount } for pid=31584 comm="syz.4.10928" name="/" dev="hugetlbfs" ino=90781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 249.286396][T31601] autofs: Bad value for 'fd' [ 249.322908][ T41] audit: type=1400 audit(524525.053:46931): avc: denied { execute } for pid=31603 comm="syz.4.10935" name="file0" dev="tmpfs" ino=3382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.333627][ T41] audit: type=1400 audit(524525.053:46932): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=49418 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 249.366915][ T41] audit: type=1400 audit(524525.099:46933): avc: denied { read write } for pid=31605 comm="syz.4.10936" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.375567][ T41] audit: type=1400 audit(524525.099:46934): avc: denied { open } for pid=31605 comm="syz.4.10936" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.564172][T31619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10940'. [ 249.726181][T31631] option changes via remount are deprecated (pid=31630 comm=syz.4.10945) [ 250.133638][T31678] use of bytesused == 0 is deprecated and will be removed in the future, [ 250.138699][T31678] use the actual size instead. [ 250.262868][T31694] program syz.4.10970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.295874][T31701] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10972'. [ 250.372778][T31713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.400620][T31717] program syz.0.10980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.593447][T31749] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 250.595942][T31750] netlink: 'syz.4.10991': attribute type 1 has an invalid length. [ 250.599991][T31750] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10991'. [ 250.606646][T31750] netlink: 'syz.4.10991': attribute type 1 has an invalid length. [ 250.634516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.664856][T31758] input: syz1 as /devices/virtual/input/input32 [ 251.153395][T31812] program syz.4.11012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.373880][T31830] program syz.5.11013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.398795][T31832] delete_channel: no stack [ 251.735936][T31875] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 251.920946][T31893] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 252.262028][T31920] loop4: detected capacity change from 0 to 7 [ 252.267405][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.269948][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.273141][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.275650][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.278184][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.280675][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.284651][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.287106][T17178] ldm_validate_partition_table(): Disk read failed. [ 252.289254][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.291824][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.294491][T17178] Buffer I/O error on dev loop4, logical block 0, async page read [ 252.297002][T17178] Dev loop4: unable to read RDB block 0 [ 252.298977][T17178] loop4: unable to read partition table [ 252.300894][T17178] loop4: partition table beyond EOD, truncated [ 252.303630][T31920] ldm_validate_partition_table(): Disk read failed. [ 252.306910][T31920] Dev loop4: unable to read RDB block 0 [ 252.308833][T31920] loop4: unable to read partition table [ 252.310760][T31920] loop4: partition table beyond EOD, truncated [ 252.313945][T31920] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 252.755861][T31994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31994 comm=syz.2.11073 [ 252.774350][T31998] binder: 31996:31998 ioctl c0306201 2000000005c0 returned -22 [ 252.817682][T32005] ALSA: mixer_oss: invalid OSS volume '' [ 253.061107][T32044] program syz.4.11092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.127538][T32055] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 253.130150][T32055] ALSA: mixer_oss: invalid OSS volume 'IM' [ 253.281527][ T5934] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 253.281914][T32079] __nla_validate_parse: 10 callbacks suppressed [ 253.281924][T32079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11107'. [ 253.285459][ T5934] Bluetooth: hci1: Injecting HCI hardware error event [ 253.297673][ T5947] Bluetooth: hci1: hardware error 0x00 [ 253.371839][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11114'. [ 253.470891][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11121'. [ 253.891910][T32189] netlink: 'syz.4.11148': attribute type 10 has an invalid length. [ 253.899791][T32189] dummy0: entered promiscuous mode [ 253.904947][T32189] team0: Port device dummy0 added [ 253.909726][T32189] netlink: 'syz.4.11148': attribute type 10 has an invalid length. [ 253.919262][T32189] team0: Port device dummy0 removed [ 253.925169][T32189] dummy0: left promiscuous mode [ 253.930427][T32189] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 255.085602][T32243] netlink: get zone limit has 4 unknown bytes [ 255.105473][ T41] kauditd_printk_skb: 256 callbacks suppressed [ 255.105490][ T41] audit: type=1400 audit(524530.458:47191): avc: denied { create } for pid=32244 comm="syz.5.11166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 255.116219][ T41] audit: type=1400 audit(524530.458:47192): avc: denied { bind } for pid=32244 comm="syz.5.11166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 255.147762][ T41] audit: type=1400 audit(524530.496:47193): avc: denied { mounton } for pid=32249 comm="syz.5.11168" path="/531" dev="tmpfs" ino=2703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.185052][ T41] audit: type=1400 audit(524530.524:47194): avc: denied { mount } for pid=32249 comm="syz.5.11168" name="/" dev="9p" ino=72614217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 255.206342][ T41] audit: type=1400 audit(524530.542:47195): avc: denied { unmount } for pid=26253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 255.214864][ T41] audit: type=1400 audit(524530.561:47196): avc: denied { read } for pid=32257 comm="syz.2.11170" name="media3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.225512][ T41] audit: type=1400 audit(524530.561:47197): avc: denied { open } for pid=32257 comm="syz.2.11170" path="/dev/media3" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.238012][ T41] audit: type=1400 audit(524530.580:47198): avc: denied { ioctl } for pid=32257 comm="syz.2.11170" path="/dev/media3" dev="devtmpfs" ino=964 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.260117][T32264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11173'. [ 255.261853][ T41] audit: type=1400 audit(524530.599:47199): avc: denied { read } for pid=32265 comm="syz.2.11174" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.263449][T32264] tipc: Started in network mode [ 255.272696][ T41] audit: type=1400 audit(524530.599:47200): avc: denied { open } for pid=32265 comm="syz.2.11174" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.274806][T32264] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 255.293856][T32264] tipc: Enabling of bearer rejected, failed to enable media [ 255.459090][T32299] kernel profiling enabled (shift: 5) [ 255.515099][ T5947] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 255.626279][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11196'. [ 255.629176][T32323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11196'. [ 255.737914][T32339] program syz.4.11203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.973563][T32364] can0: slcan on ttynull. [ 256.055707][T32363] can0 (unregistered): slcan off ttynull. [ 256.200648][T32402] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 256.357424][T32430] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.11236'. [ 256.628451][T32471] netlink: 'syz.4.11256': attribute type 1 has an invalid length. [ 256.636831][T32471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.861771][T32502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11269'. [ 257.094457][T32532] sock: sock_set_timeout: `syz.5.11281' (pid 32532) tries to set negative timeout [ 257.154037][T32537] IPVS: persistence engine module ip_vs_pe_s not found [ 257.196959][T32544] : entered promiscuous mode [ 257.431901][T32584] netlink: 'syz.0.11300': attribute type 11 has an invalid length. [ 257.488514][T32591] bond1: (slave bond_slave_1): Device is not our slave [ 257.490922][T32591] bond1: option active_slave: invalid value (bond_slave_1) [ 257.500444][T32591] bond1 (unregistering): Released all slaves [ 257.609282][T32667] bond1: option xmit_hash_policy: invalid value (6) [ 257.626253][T32667] bond1 (unregistering): Released all slaves [ 257.630722][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11306'. [ 257.634233][T32706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11306'. [ 257.914478][T32762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 258.919619][ T366] netlink: 'syz.0.11340': attribute type 1 has an invalid length. [ 259.138564][ T383] netlink: 'syz.0.11349': attribute type 178 has an invalid length. [ 259.468709][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11364'. [ 259.613464][ T437] tipc: Started in network mode [ 259.615653][ T437] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 259.632213][ T437] tipc: Enabling of bearer rejected, failed to enable media [ 259.732562][ T450] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 260.108357][ T484] netlink: 'syz.0.11391': attribute type 11 has an invalid length. [ 260.111534][ T484] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.11391'. [ 260.218903][ T497] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.222796][ T497] overlayfs: missing 'lowerdir' [ 260.280272][ T505] nbd: couldn't find a device at index 0 [ 260.356499][ T518] hpfs: Bad magic ... probably not HPFS [ 260.360029][ T518] hpfs: Bad magic ... probably not HPFS [ 260.467501][ T41] kauditd_printk_skb: 262 callbacks suppressed [ 260.467518][ T41] audit: type=1400 audit(524535.463:47463): avc: denied { setopt } for pid=526 comm="syz.5.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.501161][ T41] audit: type=1400 audit(524535.501:47464): avc: denied { mount } for pid=534 comm="syz.4.11412" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 260.512670][ T41] audit: type=1400 audit(524535.510:47465): avc: denied { mounton } for pid=534 comm="syz.4.11412" path="/822/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 260.525539][ T41] audit: type=1400 audit(524535.510:47466): avc: denied { mount } for pid=534 comm="syz.4.11412" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.547250][ T41] audit: type=1400 audit(524535.538:47467): avc: denied { unmount } for pid=22929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.558165][ T41] audit: type=1400 audit(524535.547:47468): avc: denied { unmount } for pid=22929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 260.589987][ T545] EXT4-fs: Conflicting test_dummy_encryption options [ 260.604704][ T547] netlink: 'syz.5.11417': attribute type 28 has an invalid length. [ 260.644519][ T41] audit: type=1400 audit(524535.622:47469): avc: denied { allowed } for pid=552 comm="syz.5.11420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.667494][ T41] audit: type=1400 audit(524535.650:47470): avc: denied { read } for pid=555 comm="syz.0.11421" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.678443][ T41] audit: type=1400 audit(524535.650:47471): avc: denied { open } for pid=555 comm="syz.0.11421" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.745753][ T41] audit: type=1400 audit(524535.725:47472): avc: denied { read append } for pid=568 comm="syz.5.11426" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 261.182582][ T5971] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 261.247062][ T50] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 261.366659][ T5971] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 261.370538][ T5971] usb 10-1: config 0 has no interface number 0 [ 261.375441][ T5971] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 261.379188][ T5971] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.382211][ T5971] usb 10-1: Product: syz [ 261.383705][ T5971] usb 10-1: Manufacturer: syz [ 261.385280][ T5971] usb 10-1: SerialNumber: syz [ 261.389429][ T5971] usb 10-1: config 0 descriptor?? [ 261.409175][ T50] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 261.412318][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.416745][ T50] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.421541][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.425982][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.431676][ T50] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 261.434825][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.439371][ T50] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.444261][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.448959][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.455183][ T50] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 261.458509][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.463224][ T50] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.468157][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.472833][ T50] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.479964][ T50] usb 5-1: string descriptor 0 read error: -22 [ 261.482864][ T50] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.487166][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.501447][ T50] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 261.717060][ T50] usb 5-1: USB disconnect, device number 12 [ 262.761757][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11460'. [ 263.095259][ T736] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11470'. [ 263.098433][ T736] xt_socket: unknown flags 0xd0 [ 263.210242][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11475'. [ 263.213227][ T746] veth1_macvtap: default FDB implementation only supports local addresses [ 263.266439][ T751] gfs2: path_lookup on b::: returned error -2 [ 263.575136][ T783] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11489'. [ 263.879350][ T819] program syz.0.11505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.155987][ T849] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 264.156539][ T5971] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 264.175074][ T5971] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 264.178463][ T5971] asix 10-1:0.251: probe with driver asix failed with error -5 [ 264.185985][ T5971] usb 10-1: USB disconnect, device number 4 [ 264.217213][ T864] tipc: Invalid UDP bearer configuration [ 264.217258][ T864] tipc: Enabling of bearer rejected, failed to enable media [ 264.535643][ T912] netlink: 'syz.4.11540': attribute type 16 has an invalid length. [ 264.538259][ T912] netlink: 'syz.4.11540': attribute type 2 has an invalid length. [ 264.540823][ T912] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.11540'. [ 264.664021][ T934] program syz.0.11550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.707346][ T942] block nbd5: NBD_DISCONNECT [ 264.872117][ T964] ip6gretap0: entered promiscuous mode [ 264.953549][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 265.060326][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11569'. [ 265.093805][ T998] IPVS: Unknown mcast interface: bridge_slave_0 [ 265.158488][ T24] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 265.161407][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.163967][ T24] usb 9-1: Product: syz [ 265.165252][ T24] usb 9-1: Manufacturer: syz [ 265.171091][ T24] usb 9-1: SerialNumber: syz [ 265.185056][ T24] usb 9-1: config 0 descriptor?? [ 265.191589][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 265.201869][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.212593][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 265.215358][ T24] usb 9-1: media controller created [ 265.225822][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.271439][ T24] DVB: Unable to find symbol mt352_attach() [ 265.293006][ T24] DVB: Unable to find symbol nxt6000_attach() [ 265.296402][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 265.303711][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input33 [ 265.311435][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 265.313798][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 265.320135][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 265.321805][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 265.409387][ T937] dvb-usb: bulk message failed: -22 (7/0) [ 265.411939][ T24] usb 9-1: USB disconnect, device number 6 [ 265.465162][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 265.787719][ T1026] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 265.835850][ T41] kauditd_printk_skb: 182 callbacks suppressed [ 265.835866][ T41] audit: type=1400 audit(524540.469:47655): avc: denied { add_name } for pid=1083 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.847782][ T41] audit: type=1400 audit(524540.469:47656): avc: denied { create } for pid=1083 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.858093][ T41] audit: type=1400 audit(524540.469:47657): avc: denied { write open } for pid=1083 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.link" dev="tmpfs" ino=9962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.872587][ T41] audit: type=1400 audit(524540.469:47658): avc: denied { append } for pid=1083 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" dev="tmpfs" ino=9962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.889354][ T41] audit: type=1400 audit(524540.478:47659): avc: denied { getattr } for pid=1083 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.900196][ T41] audit: type=1400 audit(524540.515:47660): avc: denied { read } for pid=1088 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.915870][ T41] audit: type=1400 audit(524540.525:47661): avc: denied { read } for pid=1092 comm="syz.5.11595" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.924369][ T41] audit: type=1400 audit(524540.525:47662): avc: denied { open } for pid=1092 comm="syz.5.11595" path="net:[4026533172]" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.935145][ T41] audit: type=1400 audit(524540.525:47663): avc: denied { create } for pid=1092 comm="syz.5.11595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 265.937903][ T1098] [U] V3Fپ"S/4:XTZWTLW= [ 265.943290][ T41] audit: type=1400 audit(524540.571:47664): avc: denied { remove_name } for pid=1095 comm="rm" name="resolv.conf.eth0.link" dev="tmpfs" ino=9962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.951796][ T1097] [U] J"E:" [ 266.072815][ T1107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11599'. [ 272.900598][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 272.900614][ T41] audit: type=1400 audit(524547.081:47674): avc: denied { recv } for pid=5932 comm="syz-executor" saddr=10.0.2.2 src=45622 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.932127][ T41] audit: type=1400 audit(524547.109:47675): avc: denied { execute } for pid=1193 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 272.939819][ T41] audit: type=1400 audit(524547.109:47676): avc: denied { execute_no_trans } for pid=1193 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 272.950692][ T41] audit: type=1400 audit(524547.118:47677): avc: denied { execmem } for pid=1193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 272.958586][ T41] audit: type=1400 audit(524547.127:47678): avc: denied { getattr } for pid=1192 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth0.dhcp" dev="tmpfs" ino=10056 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.969269][ T41] audit: type=1400 audit(524547.127:47679): avc: denied { unlink } for pid=1192 comm="rm" name="resolv.conf.eth0.dhcp" dev="tmpfs" ino=10056 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.393948][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.506668][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.608476][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.709686][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.790705][ T41] audit: type=1400 audit(524547.903:47680): avc: denied { read } for pid=5641 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 273.820203][ T101] bridge_slave_1: left allmulticast mode [ 273.822550][ T101] bridge_slave_1: left promiscuous mode [ 273.825001][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.830423][ T101] bridge_slave_0: left promiscuous mode [ 273.832729][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.623342][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.798166][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.805636][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.809945][ T101] bond0 (unregistering): Released all slaves [ 274.814885][ T101] bond1 (unregistering): Released all slaves [ 274.821362][ T101] bond2 (unregistering): Released all slaves [ 274.827966][ T101] bond3 (unregistering): Released all slaves [ 274.834424][ T101] bond4 (unregistering): Released all slaves [ 274.842612][ T101] bond5 (unregistering): Released all slaves [ 274.850712][ T101] bond6 (unregistering): Released all slaves [ 274.858540][ T5985] xfrm0 speed is unknown, defaulting to 1000 [ 274.860966][ T5985] infiniband syz1: ib_query_port failed (-19) [ 274.864985][ T41] audit: type=1400 audit(524548.902:47681): avc: denied { read } for pid=5641 comm="dhcpcd" name="n153" dev="tmpfs" ino=10069 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.877889][ T41] audit: type=1400 audit(524548.921:47682): avc: denied { open } for pid=5641 comm="dhcpcd" path="/run/udev/data/n153" dev="tmpfs" ino=10069 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.899873][ T41] audit: type=1400 audit(524548.949:47683): avc: denied { search } for pid=1227 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.983450][ T101] : left promiscuous mode [ 275.306885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.485289][ T101] hsr_slave_0: left promiscuous mode [ 275.488725][ T101] hsr_slave_1: left promiscuous mode [ 275.491642][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.494796][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.499482][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.502603][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.520734][ T101] veth1_macvtap: left allmulticast mode [ 275.523309][ T101] veth1_vlan: left promiscuous mode [ 275.612788][ T101] vlan0 (unregistering): left allmulticast mode [ 275.614853][ T101] veth0_vlan (unregistering): left allmulticast mode [ 275.683514][ T101] team0 (unregistering): Port device team_slave_1 removed [ 275.692477][ T101] team0 (unregistering): Port device team_slave_0 removed [ 276.045273][ T1287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11605'. [ 276.070913][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.078478][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.083008][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.086279][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.092399][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.131534][ T1291] Failed to initialize the IGMP autojoin socket (err -2) [ 276.341077][ T1291] chnl_net:caif_netlink_parms(): no params data found [ 276.354913][ T101] IPVS: stop unused estimator thread 0... [ 276.482042][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.485862][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.489142][ T1291] bridge_slave_0: entered allmulticast mode [ 276.494180][ T1291] bridge_slave_0: entered promiscuous mode [ 276.499838][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.503170][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.507418][ T1291] bridge_slave_1: entered allmulticast mode [ 276.511500][ T1291] bridge_slave_1: entered promiscuous mode [ 276.537471][ T9301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.588687][ T1291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.606135][ T1291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.629337][ T1291] smc: adding net device veth1_to_team with user defined pnetid S [ 276.650987][ T1291] team0: Port device team_slave_0 added [ 276.666315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.679981][ T1291] team0: Port device team_slave_1 added [ 276.708767][ T9301] usb 5-1: Using ep0 maxpacket: 8 [ 276.724130][ T9301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.728191][ T9301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.728496][ T1291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.734587][ T9301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.739443][ T9301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.740675][ T1291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.746397][ T9301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.759971][ T1291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.762240][ T9301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.766012][ T1291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.770721][ T1291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.784208][ T1291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.797812][ T1537] Failed to initialize the IGMP autojoin socket (err -2) [ 276.861717][ T1291] hsr_slave_0: entered promiscuous mode [ 276.865542][ T1291] hsr_slave_1: entered promiscuous mode [ 276.868111][ T1291] debugfs: 'hsr0' already exists in 'hsr' [ 276.870115][ T1291] Cannot create hsr debugfs directory [ 277.026029][ T9301] usb 5-1: GET_CAPABILITIES returned 0 [ 277.028006][ T9301] usbtmc 5-1:16.0: can't read capabilities [ 277.158141][ T1291] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 277.177373][ T1291] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 277.196345][ T1291] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 277.212120][ T1291] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 277.248461][ T839] usb 5-1: USB disconnect, device number 13 [ 277.375873][ T1291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.429208][ T1291] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.452686][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.455785][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.479459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.481874][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.492514][ T1812] netlink: 'syz.4.11627': attribute type 12 has an invalid length. [ 277.495065][ T1812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11627'. [ 277.634432][ T1291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.816065][ T1291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.176753][ T1291] veth0_vlan: entered promiscuous mode [ 278.199395][ T1291] veth1_vlan: entered promiscuous mode [ 278.226381][ T1955] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 278.231218][ T1955] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 278.281641][ T1291] veth0_macvtap: entered promiscuous mode [ 278.284747][ T41] kauditd_printk_skb: 105 callbacks suppressed [ 278.284762][ T41] audit: type=1400 audit(524552.106:47789): avc: denied { read write } for pid=1974 comm="syz.4.11646" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.294682][ T5934] Bluetooth: hci2: command tx timeout [ 278.312645][ T1291] veth1_macvtap: entered promiscuous mode [ 278.313402][ T41] audit: type=1400 audit(524552.115:47790): avc: denied { open } for pid=1974 comm="syz.4.11646" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.342344][ T41] audit: type=1400 audit(524552.115:47791): avc: denied { ioctl } for pid=1974 comm="syz.4.11646" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.383416][ T1291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.413024][ T1291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.413971][ T41] audit: type=1400 audit(524552.227:47792): avc: denied { read write } for pid=2013 comm="syz.5.11649" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.432580][ T41] audit: type=1400 audit(524552.236:47793): avc: denied { open } for pid=2013 comm="syz.5.11649" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.440702][ T1291] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 278.447700][ T41] audit: type=1400 audit(524552.246:47794): avc: denied { ioctl } for pid=2013 comm="syz.5.11649" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.458924][ T1291] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 278.460125][ T41] audit: type=1400 audit(524552.255:47795): avc: denied { recv } for pid=18 comm="rcu_exp_gp_kthr" saddr=127.0.0.1 src=49418 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.466948][ T1291] wireguard: wg0: Could not create IPv4 socket [ 278.479031][ T1291] wireguard: wg1: Could not create IPv4 socket [ 278.483859][ T1291] wireguard: wg2: Could not create IPv4 socket [ 278.522692][ T2042] Falling back ldisc for ttyS3. [ 278.544559][ T41] audit: type=1400 audit(524552.349:47796): avc: denied { read } for pid=5641 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 278.554880][ T41] audit: type=1400 audit(524552.349:47797): avc: denied { read } for pid=5641 comm="dhcpcd" name="n213" dev="tmpfs" ino=10207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.564813][ T41] audit: type=1400 audit(524552.349:47798): avc: denied { open } for pid=5641 comm="dhcpcd" path="/run/udev/data/n213" dev="tmpfs" ino=10207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.596289][ T2051] ip6gre2: entered allmulticast mode [ 278.842113][ T2092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11661'. [ 278.845932][ T2092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11661'. [ 278.912566][ T2099] bridge: RTM_NEWNEIGH with invalid ether address [ 279.038061][ T2116] fuse: Bad value for 'group_id' [ 279.039756][ T2116] fuse: Bad value for 'group_id' [ 279.257057][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 279.367564][ T2162] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 279.428744][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 279.431951][ T5971] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 279.436916][ T5971] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.441021][ T5971] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 279.444523][ T5971] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.448597][ T5971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.461153][ T5971] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.464997][ T5971] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.468463][ T5971] usb 5-1: Product: syz [ 279.470252][ T5971] usb 5-1: Manufacturer: syz [ 279.475535][ T5971] usb 5-1: SerialNumber: syz [ 279.482617][ T5971] usb 5-1: config 0 descriptor?? [ 279.486215][ T5971] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.491997][ T5971] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.723625][ T5985] usb 5-1: USB disconnect, device number 14 [ 279.726338][ C3] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 279.732037][ T5985] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 279.845590][ T2228] netlink: 'syz.4.11700': attribute type 2 has an invalid length. [ 279.858765][ T2228] !: entered promiscuous mode [ 279.869280][ T2228] netlink: 'syz.4.11700': attribute type 2 has an invalid length. [ 279.872005][ T2228] !: left promiscuous mode [ 279.933067][ T2106] ldusb: No device or device unplugged -19 [ 280.370514][ T2277] nbd1: detected capacity change from 0 to 63 [ 280.375957][ T5934] block nbd1: Receive control failed (result -32) [ 280.377147][T17178] block nbd1: Send control failed (result -32) [ 280.380659][T17178] block nbd1: Request send failed, requeueing [ 280.395336][ T1284] block nbd1: Dead connection, failed to find a fallback [ 280.397859][ T1284] block nbd1: shutting down sockets [ 280.400084][ T1284] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.404325][ T1284] buffer_io_error: 28 callbacks suppressed [ 280.404334][ T1284] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.409987][T17178] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.414616][T17178] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.417382][T17178] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.420526][T17178] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.423182][T17178] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.427389][T17178] Buffer I/O error on dev nbd1, logical block 3, async page read [ 280.430027][T17178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.433177][T17178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.437518][T17178] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.440830][T17178] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.443470][T17178] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.447046][T17178] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.449804][T17178] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.452933][T17178] Buffer I/O error on dev nbd1, logical block 3, async page read [ 280.455490][T17178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.462925][T17178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.466163][T17178] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.469782][T17178] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.472726][T17178] ldm_validate_partition_table(): Disk read failed. [ 280.475098][T17178] Dev nbd1: unable to read RDB block 0 [ 280.477681][T17178] nbd1: unable to read partition table [ 280.485297][T17178] ldm_validate_partition_table(): Disk read failed. [ 280.487781][T17178] Dev nbd1: unable to read RDB block 0 [ 280.499231][T17178] nbd1: unable to read partition table [ 280.556597][ T2299] mkiss: ax0: crc mode is auto. [ 280.609381][ T2319] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11724'. [ 281.298830][ T2404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11748'. [ 281.361898][ T2410] block nbd4: NBD_DISCONNECT [ 281.496642][ T2427] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 281.809286][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.817137][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.821086][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.824822][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.828556][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.873427][ T2446] Failed to initialize the IGMP autojoin socket (err -2) [ 281.951962][ T2465] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11759'. [ 282.236853][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.238969][ T2520] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 282.239514][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.245416][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.247966][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.250699][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.253752][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.256381][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.259490][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.262190][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 282.264939][ T2519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.294688][ T2660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11801'. [ 283.323856][ T2666] bridge_slave_1: left allmulticast mode [ 283.327834][ T2666] bridge_slave_1: left promiscuous mode [ 283.329759][ T2666] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.348407][ T2666] bridge_slave_0: left allmulticast mode [ 283.356223][ T2666] bridge_slave_0: left promiscuous mode [ 283.362124][ T2666] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.509496][ T2700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11808'. [ 283.600119][ T2446] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 283.639461][ T2730] can0: slcan on ttyS3. [ 283.648642][ T2446] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 283.687799][ T2446] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 283.693295][ T2446] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 283.703763][ T41] kauditd_printk_skb: 295 callbacks suppressed [ 283.703780][ T41] audit: type=1400 audit(524557.168:48094): avc: denied { read write } for pid=22929 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.716964][ T41] audit: type=1400 audit(524557.168:48095): avc: denied { open } for pid=22929 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.726929][ T41] audit: type=1400 audit(524557.168:48096): avc: denied { ioctl } for pid=22929 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.734228][ T2758] Failed to get privilege flags for destination (handle=0x2:0x0) [ 283.737883][ T41] audit: type=1400 audit(524557.187:48097): avc: denied { read open } for pid=2756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.753248][ T2730] can0 (unregistered): slcan off ttyS3. [ 283.756674][ T41] audit: type=1400 audit(524557.187:48098): avc: denied { getattr } for pid=2756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.784726][ T41] audit: type=1400 audit(524557.206:48099): avc: denied { module_request } for pid=2446 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.795387][ T41] audit: type=1400 audit(524557.215:48100): avc: denied { add_name } for pid=2749 comm="dhcpcd-run-hook" name="resolv.conf.veth0_to_team.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.805389][ T41] audit: type=1400 audit(524557.252:48101): avc: denied { sys_module } for pid=2446 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.818952][ T41] audit: type=1400 audit(524557.252:48102): avc: denied { module_request } for pid=2446 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.915512][ T41] audit: type=1400 audit(524557.364:48103): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=49418 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 284.033284][ T5947] Bluetooth: hci2: command tx timeout [ 284.146208][ T2446] wireguard: wg0: Could not create IPv4 socket [ 284.149989][ T2446] wireguard: wg1: Could not create IPv4 socket [ 284.153628][ T2446] wireguard: wg2: Could not create IPv4 socket [ 284.211990][ T2842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11830'. [ 284.556621][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 284.738931][ T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.742946][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 284.747814][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.753331][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.756006][ T24] usb 9-1: Product: syz [ 284.757511][ T24] usb 9-1: Manufacturer: syz [ 284.759547][ T24] usb 9-1: SerialNumber: syz [ 284.768627][ T5947] block nbd2: Receive control failed (result -32) [ 284.779919][ T24] usb 9-1: config 0 descriptor?? [ 284.794640][ T24] usb 9-1: selecting invalid altsetting 0 [ 285.012261][ T5971] usb 9-1: USB disconnect, device number 7 [ 285.369923][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 285.530522][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 285.534171][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 285.537490][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 285.542409][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 285.546980][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 285.552602][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.557053][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 285.560818][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 285.563951][ T9] usb 5-1: Product: syz [ 285.565379][ T9] usb 5-1: Manufacturer: syz [ 285.566969][ T9] usb 5-1: SerialNumber: syz [ 285.575321][ T9] usb 5-1: config 0 descriptor?? [ 285.578820][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 285.595073][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 285.814815][ T5971] usb 5-1: USB disconnect, device number 15 [ 285.821406][ T5971] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 286.339637][ T3096] Bluetooth: hci0: load_link_keys: expected 6403 bytes, got 7 bytes [ 286.858962][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 286.961586][ T5988] Process accounting resumed [ 287.021701][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 287.024848][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.027850][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.032370][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.035689][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.039729][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.043960][ T5935] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 287.047286][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.236557][ T5935] usb 9-1: config 0 has no interfaces? [ 287.242591][ T5935] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.248805][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.252306][ T5935] usb 9-1: Product: syz [ 287.255534][ T5935] usb 9-1: Manufacturer: syz [ 287.257586][ T5935] usb 9-1: SerialNumber: syz [ 287.266934][ T5935] usb 9-1: config 0 descriptor?? [ 287.279952][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 287.286179][ T9] usbtmc 5-1:16.0: can't read capabilities [ 287.498551][ T1026] usb 5-1: USB disconnect, device number 16 [ 287.503986][ T1336] usb 9-1: USB disconnect, device number 8 [ 288.195990][ T3295] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.11892'. [ 288.337798][ T3319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.340346][ T3319] IPv6: NLM_F_CREATE should be set when creating new route [ 288.343250][ T3319] IPv6: NLM_F_CREATE should be set when creating new route [ 288.345762][ T3319] IPv6: NLM_F_CREATE should be set when creating new route [ 288.348971][ T3319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.400395][ T3326] overlay: filesystem on ./file0 not supported as upperdir [ 288.722466][ T5971] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 288.913677][ T5971] usb 9-1: Using ep0 maxpacket: 8 [ 288.921895][ T5971] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.926674][ T5971] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.929826][ T5971] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.933429][ T5971] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.938472][ T5971] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.942014][ T5971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.065234][ T41] kauditd_printk_skb: 232 callbacks suppressed [ 289.065252][ T41] audit: type=1400 audit(524562.175:48336): avc: denied { read write } for pid=3395 comm="syz.0.11912" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.077044][ T41] audit: type=1400 audit(524562.175:48337): avc: denied { open } for pid=3395 comm="syz.0.11912" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.092863][ T41] audit: type=1400 audit(524562.175:48338): avc: denied { ioctl } for pid=3395 comm="syz.0.11912" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.104380][ T41] audit: type=1400 audit(524562.203:48339): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49418 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 289.172883][ T5971] usb 9-1: GET_CAPABILITIES returned 0 [ 289.175494][ T5971] usbtmc 9-1:16.0: can't read capabilities [ 289.213638][ T41] audit: type=1400 audit(524562.315:48340): avc: denied { allowed } for pid=3409 comm="syz.0.11913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 289.221788][ T41] audit: type=1400 audit(524562.315:48341): avc: denied { create } for pid=3409 comm="syz.0.11913" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.234923][ T41] audit: type=1400 audit(524562.315:48342): avc: denied { map } for pid=3409 comm="syz.0.11913" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.242990][ T41] audit: type=1400 audit(524562.315:48343): avc: denied { read write } for pid=3409 comm="syz.0.11913" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.253626][ T41] audit: type=1400 audit(524562.325:48344): avc: denied { search } for pid=3408 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.264158][ T41] audit: type=1400 audit(524562.325:48345): avc: denied { search } for pid=3408 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.316455][ T3426] veth1_to_team: entered promiscuous mode [ 289.319918][ T3426] veth1_to_team: left promiscuous mode [ 289.347799][ T3431] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11920'. [ 289.397409][ T5971] usb 9-1: USB disconnect, device number 9 [ 289.551596][ T3469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11930'. [ 290.219472][ T1336] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 290.326427][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 290.380466][ T1336] usb 10-1: Using ep0 maxpacket: 16 [ 290.384037][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.387529][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.390670][ T1336] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.394745][ T1336] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 290.397665][ T1336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.402392][ T1336] usb 10-1: config 0 descriptor?? [ 290.519794][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 290.530577][ T24] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 290.534513][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.537999][ T24] usb 9-1: Product: syz [ 290.539903][ T24] usb 9-1: Manufacturer: syz [ 290.542091][ T24] usb 9-1: SerialNumber: syz [ 290.680632][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.685121][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.688190][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.692071][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.694881][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.719626][ T3526] Failed to initialize the IGMP autojoin socket (err -2) [ 290.774888][ T24] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 290.781821][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 290.785470][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 290.788908][ T24] usb 9-1: media controller created [ 290.801877][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.847425][ T1336] hid_parser_main: 10 callbacks suppressed [ 290.847445][ T1336] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 290.853925][ T1336] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 290.857947][ T1336] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 290.860711][ T1336] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 290.870215][ T1336] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 290.892317][ T1336] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 290.994683][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 290.997847][ T1336] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 291.009022][ T1336] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 291.024360][ T24] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 291.029802][ T24] usb 9-1: USB disconnect, device number 10 [ 291.046490][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11945'. [ 291.052817][ T3504] random: crng reseeded on system resumption [ 291.089525][ T839] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 291.104356][ T1336] usb 10-1: USB disconnect, device number 6 [ 291.108894][ T839] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 291.113283][ T839] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 291.117948][ T839] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 291.339730][ T3650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11949'. [ 291.519495][ T3526] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 291.529842][ T3526] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 291.550216][ T3526] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 291.562212][ T3526] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 291.610116][ T3687] erspan0: entered promiscuous mode [ 291.771008][ T3709] (syz.5.11958,3709,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 291.851196][ T3717] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input36 [ 292.069819][ T3526] net_ratelimit: 5270 callbacks suppressed [ 292.069832][ T3526] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 292.080988][ T3526] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 292.092445][ T3526] wireguard: wg0: Could not create IPv4 socket [ 292.105465][ T3526] wireguard: wg1: Could not create IPv4 socket [ 292.109241][ T3526] wireguard: wg2: Could not create IPv4 socket [ 292.505591][ T3815] hpfs: Bad magic ... probably not HPFS [ 292.513250][ T3815] hpfs: Bad magic ... probably not HPFS [ 293.346792][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11992'. [ 293.746983][ T3938] binder: BC_ACQUIRE_RESULT not supported [ 293.748917][ T3938] binder: 3937:3938 ioctl c0306201 2000000003c0 returned -22 [ 294.119592][ T3991] loop5: detected capacity change from 0 to 2640 [ 294.131732][T17178] buffer_io_error: 138 callbacks suppressed [ 294.131748][T17178] Buffer I/O error on dev loop5, logical block 0, async page read [ 294.142298][ T3995] GUP no longer grows the stack in syz.0.12027 (3995): 200000007000-20000000a000 (200000004000) [ 294.142951][ T3991] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 294.147359][ T3995] CPU: 3 UID: 0 PID: 3995 Comm: syz.0.12027 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.147379][ T3995] Tainted: [L]=SOFTLOCKUP [ 294.147382][ T3995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.147389][ T3995] Call Trace: [ 294.147393][ T3995] [ 294.147398][ T3995] dump_stack_lvl+0x100/0x190 [ 294.147420][ T3995] gup_vma_lookup.cold+0x83/0x96 [ 294.147437][ T3995] __get_user_pages+0x241/0x34d0 [ 294.147459][ T3995] ? xdp_umem_create+0x648/0x11e0 [ 294.147476][ T3995] ? xsk_setsockopt+0x7d8/0xab0 [ 294.147490][ T3995] ? do_sock_setsockopt+0xf3/0x1d0 [ 294.147504][ T3995] ? __pfx___get_user_pages+0x10/0x10 [ 294.147521][ T3995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.147537][ T3995] __gup_longterm_locked+0x279/0x16f0 [ 294.147550][ T3995] ? __lock_acquire+0x3c0/0x2630 [ 294.147571][ T3995] ? __pfx___gup_longterm_locked+0x10/0x10 [ 294.147575][T17178] Buffer I/O error on dev loop5, logical block 3, async page read [ 294.147589][ T3995] pin_user_pages+0x13c/0x160 [ 294.147600][ T3995] ? __pfx_pin_user_pages+0x10/0x10 [ 294.147612][ T3995] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 294.147627][ T3995] ? security_capable+0x30/0x260 [ 294.147646][ T3995] xdp_umem_create+0x723/0x11e0 [ 294.147666][ T3995] xsk_setsockopt+0x7d8/0xab0 [ 294.147682][ T3995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.147696][ T3995] ? find_held_lock+0x2b/0x80 [ 294.147709][ T3995] ? __fget_files+0x215/0x3d0 [ 294.147721][ T3995] ? selinux_socket_setsockopt+0x6a/0x80 [ 294.147739][ T3995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.147756][ T3995] do_sock_setsockopt+0xf3/0x1d0 [ 294.147771][ T3995] __sys_setsockopt+0x195/0x220 [ 294.147791][ T3995] __x64_sys_setsockopt+0xbd/0x160 [ 294.147807][ T3995] ? do_syscall_64+0x95/0xf80 [ 294.147818][ T3995] ? lockdep_hardirqs_on+0x78/0x100 [ 294.147830][ T3995] do_syscall_64+0x106/0xf80 [ 294.147840][ T3995] ? clear_bhb_loop+0x40/0x90 [ 294.147853][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.147878][ T3995] RIP: 0033:0x7ff2d159c629 [ 294.147889][ T3995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.147901][ T3995] RSP: 002b:00007ff2d24ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.147912][ T3995] RAX: ffffffffffffffda RBX: 00007ff2d1815fa0 RCX: 00007ff2d159c629 [ 294.147919][ T3995] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 294.147926][ T3995] RBP: 00007ff2d1632b39 R08: 0000000000000020 R09: 0000000000000000 [ 294.147933][ T3995] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 294.147939][ T3995] R13: 00007ff2d1816038 R14: 00007ff2d1815fa0 R15: 00007ffc47c2e128 [ 294.147955][ T3995] [ 294.212289][ T1336] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 294.395013][ T1336] usb 10-1: Using ep0 maxpacket: 16 [ 294.398333][ T1336] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 294.401791][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.415629][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.419493][ T1336] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 294.430163][ T1336] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 294.433745][ T41] kauditd_printk_skb: 329 callbacks suppressed [ 294.433755][ T41] audit: type=1400 audit(524567.182:48675): avc: denied { create } for pid=4027 comm="syz.0.12035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.443886][ T1336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.449335][ T1336] usb 10-1: config 0 descriptor?? [ 294.469126][ T41] audit: type=1400 audit(524567.201:48676): avc: denied { read open } for pid=4029 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.477096][ T41] audit: type=1400 audit(524567.201:48677): avc: denied { getattr } for pid=4029 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.489799][ T41] audit: type=1400 audit(524567.220:48678): avc: denied { read } for pid=4032 comm="syz.0.12036" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.498212][ T41] audit: type=1400 audit(524567.220:48679): avc: denied { open } for pid=4032 comm="syz.0.12036" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.507237][ T41] audit: type=1400 audit(524567.229:48680): avc: denied { ioctl } for pid=4032 comm="syz.0.12036" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.515056][ T41] audit: type=1400 audit(524567.238:48681): avc: denied { add_name } for pid=4026 comm="dhcpcd-run-hook" name="resolv.conf.lapb25.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.522898][ T41] audit: type=1400 audit(524567.257:48682): avc: denied { read write } for pid=22929 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.531229][ T41] audit: type=1400 audit(524567.257:48683): avc: denied { open } for pid=22929 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.540013][ T41] audit: type=1400 audit(524567.257:48684): avc: denied { ioctl } for pid=22929 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.691741][ T1336] usbhid 10-1:0.0: can't add hid device: -71 [ 294.695955][ T1336] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 294.707758][ T1336] usb 10-1: USB disconnect, device number 7 [ 294.864061][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12044'. [ 295.015073][ T5971] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 295.114449][ T1336] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 295.186326][ T5971] usb 9-1: Using ep0 maxpacket: 8 [ 295.190732][ T5971] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 295.194651][ T5971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.210072][ T5971] pvrusb2: Hardware description: Terratec Grabster AV400 [ 295.213087][ T5971] pvrusb2: ********** [ 295.214799][ T5971] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 295.219620][ T5971] pvrusb2: Important functionality might not be entirely working. [ 295.223573][ T5971] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 295.228081][ T5971] pvrusb2: ********** [ 295.293805][ T1336] usb 5-1: Using ep0 maxpacket: 8 [ 295.296731][ T1336] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 295.299705][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.315843][ T1336] pvrusb2: Hardware description: Terratec Grabster AV400 [ 295.318988][ T1336] pvrusb2: ********** [ 295.320343][ T1336] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 295.323953][ T1336] pvrusb2: Important functionality might not be entirely working. [ 295.327322][ T1336] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 295.331247][ T1336] pvrusb2: ********** [ 295.426391][ T2491] pvrusb2: Invalid write control endpoint [ 295.509817][ T2491] pvrusb2: Invalid write control endpoint [ 295.515044][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 295.521760][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 295.524225][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 295.527402][ T2491] pvrusb2: Device being rendered inoperable [ 295.544816][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 295.547241][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 295.556020][ T2491] pvrusb2: Attached sub-driver cx25840 [ 295.557999][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 295.561987][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 295.564964][ T2491] pvrusb2: Invalid write control endpoint [ 295.593335][ T2491] pvrusb2: Invalid write control endpoint [ 295.595353][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 295.600721][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 295.604384][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 295.608618][ T2491] pvrusb2: Device being rendered inoperable [ 295.611389][ T2491] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 295.616151][ T2491] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 295.622246][ T2491] pvrusb2: Attached sub-driver cx25840 [ 295.624594][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 295.632688][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 295.640226][ T4064] pvrusb2: Attempted to execute control transfer when device not ok [ 295.644545][ T5971] usb 9-1: USB disconnect, device number 11 [ 295.752303][ T1336] usb 5-1: USB disconnect, device number 17 [ 295.862625][ T4224] batadv_slave_1: entered promiscuous mode [ 295.865912][ T4223] batadv_slave_1: left promiscuous mode [ 296.166617][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12065'. [ 296.170384][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12065'. [ 296.612867][ T4303] netlink: 'syz.0.12078': attribute type 2 has an invalid length. [ 296.616064][ T4303] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12078'. [ 296.910415][ T4330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12084'. [ 297.291862][ T4381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12094'. [ 297.978959][ T4431] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12106'. [ 298.239390][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.251255][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.256722][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.266553][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.271931][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.309156][ T4452] Failed to initialize the IGMP autojoin socket (err -2) [ 298.414050][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12114'. [ 298.800936][ T4555] loop9: detected capacity change from 0 to 7 [ 298.808109][ C1] blk_print_req_error: 138 callbacks suppressed [ 298.808121][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.814808][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.818630][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.822435][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.826295][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.830422][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.834025][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.838036][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.841902][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.846024][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.851131][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.855111][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.858559][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.861916][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.867229][ T4555] ldm_validate_partition_table(): Disk read failed. [ 298.873434][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.876977][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.882023][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.886643][ T4555] Dev loop9: unable to read RDB block 0 [ 298.889617][ T4555] loop9: unable to read partition table [ 298.892233][ T4555] loop9: partition table beyond EOD, truncated [ 298.900026][ T4555] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 298.932992][ T5339] ldm_validate_partition_table(): Disk read failed. [ 298.935965][ T5339] Dev loop9: unable to read RDB block 0 [ 298.938965][ T5339] loop9: unable to read partition table [ 298.940901][ T5339] loop9: partition table beyond EOD, truncated [ 299.087173][ T4588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12134'. [ 299.240277][ T4452] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 299.247255][ T4452] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 299.261639][ T4452] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 299.273257][ T4452] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 299.385138][ T4639] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 299.659529][ T4452] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 299.682796][ T4452] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 299.689828][ T4452] wireguard: wg0: Could not create IPv4 socket [ 299.696107][ T4452] wireguard: wg1: Could not create IPv4 socket [ 299.710715][ T4452] wireguard: wg2: Could not create IPv4 socket [ 299.814930][ T41] kauditd_printk_skb: 286 callbacks suppressed [ 299.814945][ T41] audit: type=1400 audit(524572.218:48971): avc: denied { unlink } for pid=4693 comm="rm" name="resolv.conf.lapb49.link" dev="tmpfs" ino=11379 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.844967][ T41] audit: type=1400 audit(524572.246:48972): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49418 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 299.864235][ T41] audit: type=1400 audit(524572.246:48973): avc: denied { allowed } for pid=4699 comm="syz.5.12149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 299.871876][ T41] audit: type=1400 audit(524572.246:48974): avc: denied { create } for pid=4699 comm="syz.5.12149" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.897273][ T41] audit: type=1400 audit(524572.246:48975): avc: denied { map } for pid=4699 comm="syz.5.12149" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.907841][ T41] audit: type=1400 audit(524572.246:48976): avc: denied { read write } for pid=4699 comm="syz.5.12149" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.920466][ T41] audit: type=1400 audit(524572.255:48977): avc: denied { search } for pid=4698 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.928911][ T41] audit: type=1400 audit(524572.255:48978): avc: denied { search } for pid=4698 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.939581][ T41] audit: type=1400 audit(524572.255:48979): avc: denied { search } for pid=4698 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.951771][ T41] audit: type=1400 audit(524572.264:48980): avc: denied { read } for pid=5641 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 300.027269][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.032787][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.040114][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.043777][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.046803][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.064905][ T4726] Failed to initialize the IGMP autojoin socket (err -2) [ 300.334409][ T4778] hugetlbfs: syz.5.12154 (4778): Using mlock ulimits for SHM_HUGETLB is obsolete [ 300.347141][ T4781] netlink: 'syz.0.12155': attribute type 9 has an invalid length. [ 300.530289][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12162'. [ 300.709363][ T4726] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 300.719016][ T4726] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 300.729490][ T4726] wireguard: wg0: Could not create IPv4 socket [ 300.735676][ T4726] wireguard: wg1: Could not create IPv4 socket [ 300.739170][ T4726] wireguard: wg2: Could not create IPv4 socket [ 300.742854][ T4832] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12160'. [ 302.203403][ T4972] loop5: detected capacity change from 0 to 7 [ 302.213273][T17178] Dev loop5: unable to read RDB block 7 [ 302.215213][T17178] loop5: AHDI p1 [ 302.216453][T17178] loop5: partition table partially beyond EOD, truncated [ 302.223139][ T4972] Dev loop5: unable to read RDB block 7 [ 302.225193][ T4972] loop5: AHDI p1 [ 302.226488][ T4972] loop5: partition table partially beyond EOD, truncated [ 302.540095][ T839] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 302.722307][ T839] usb 10-1: Using ep0 maxpacket: 8 [ 302.726562][ T839] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 302.731120][ T839] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.741207][ T839] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.746076][ T839] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.751523][ T839] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.755972][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.986935][ T839] usb 10-1: GET_CAPABILITIES returned 0 [ 302.988773][ T839] usbtmc 10-1:16.0: can't read capabilities [ 303.207215][ T24] usb 10-1: USB disconnect, device number 8 [ 304.305918][ T5096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.308675][ T5096] IPv6: NLM_F_CREATE should be set when creating new route [ 304.311670][ T5096] IPv6: NLM_F_CREATE should be set when creating new route [ 304.315074][ T5096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.393673][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12195'. [ 304.435983][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12196'. [ 304.563899][ T5114] block nbd3: server does not support multiple connections per device. [ 304.569337][ T5114] block nbd3: shutting down sockets [ 304.679131][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12202'. [ 304.967274][ T5177] kAFS: unable to lookup cell '(' [ 304.972329][ T5177] kAFS: unable to lookup cell '(,cL' [ 305.073883][ T5189] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 305.298720][ T41] kauditd_printk_skb: 191 callbacks suppressed [ 305.298736][ T41] audit: type=1400 audit(524577.337:49172): avc: denied { ioctl } for pid=5218 comm="syz.5.12218" path="socket:[104334]" dev="sockfs" ino=104334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.327393][ T41] audit: type=1400 audit(524577.365:49173): avc: denied { create } for pid=5221 comm="syz.0.12219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.362802][ T41] audit: type=1400 audit(524577.393:49174): avc: denied { read } for pid=5227 comm="syz.5.12220" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.369797][ T41] audit: type=1400 audit(524577.393:49175): avc: denied { open } for pid=5227 comm="syz.5.12220" path="net:[4026533172]" dev="nsfs" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.377988][ T41] audit: type=1400 audit(524577.393:49176): avc: denied { create } for pid=5227 comm="syz.5.12220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.384459][ T41] audit: type=1400 audit(524577.403:49177): avc: denied { bind } for pid=5227 comm="syz.5.12220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.392620][ T41] audit: type=1400 audit(524577.403:49178): avc: denied { listen } for pid=5227 comm="syz.5.12220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.399377][ T41] audit: type=1400 audit(524577.403:49179): avc: denied { setopt } for pid=5227 comm="syz.5.12220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.405615][ T41] audit: type=1400 audit(524577.431:49180): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=49418 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.486308][ T41] audit: type=1400 audit(524577.515:49181): avc: denied { create } for pid=5236 comm="syz.5.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.751167][ T6001] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.924419][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.927859][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.931229][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.935803][ T6001] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.938661][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.942652][ T6001] usb 5-1: config 0 descriptor?? [ 306.201017][ T5935] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 306.366078][ T5935] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 306.370415][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.374891][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.379368][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.383190][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.386947][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.391329][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.396171][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.399081][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.399299][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.402530][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.405553][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.409258][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.410159][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.412138][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.414535][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.418807][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.421149][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.425102][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.428737][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.430577][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.432971][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.435968][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.439144][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.443090][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.446309][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.448618][ T6001] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 306.451505][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.461790][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.465561][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.469717][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.473899][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.474585][ T6001] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 306.477632][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.484913][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.488394][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 306.496497][ T5935] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 306.500616][ T5935] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 306.504369][ T5935] usb 10-1: Product: syz [ 306.506172][ T5935] usb 10-1: Manufacturer: syz [ 306.508175][ T5935] usb 10-1: SerialNumber: syz [ 306.521011][ T5935] usb 10-1: config 0 descriptor?? [ 306.530734][ T5935] yurex 10-1:0.0: USB YUREX device now attached to Yurex #1 [ 306.664862][ T24] usb 5-1: USB disconnect, device number 18 [ 306.749431][ T839] usb 10-1: USB disconnect, device number 9 [ 306.763964][ T839] yurex 10-1:0.0: USB YUREX #1 now disconnected [ 306.782776][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.787137][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.791930][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.799509][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.802909][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.837543][ T5335] Failed to initialize the IGMP autojoin socket (err -2) [ 307.322465][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.327603][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.330994][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.337738][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.340768][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.401294][ T5413] Failed to initialize the IGMP autojoin socket (err -2) [ 307.521738][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12240'. [ 307.524751][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12240'. [ 307.687396][ T5335] netdevsim netdevsim6 netdevsim0: renamed from eth18 [ 307.696793][ T5335] netdevsim netdevsim6 netdevsim1: renamed from eth19 [ 307.706544][ T5335] netdevsim netdevsim6 netdevsim2: renamed from eth20 [ 307.713640][ T5335] netdevsim netdevsim6 netdevsim3: renamed from eth21 [ 307.828754][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.837426][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.843226][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.848501][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.851745][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.874269][ T5488] Failed to initialize the IGMP autojoin socket (err -2) [ 307.939174][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12245'. [ 307.942737][ T5507] netlink: 6 bytes leftover after parsing attributes in process `syz.5.12245'. [ 308.077603][ T5335] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.085557][ T5335] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 308.092688][ T5335] wireguard: wg0: Could not create IPv4 socket [ 308.098135][ T5335] wireguard: wg1: Could not create IPv4 socket [ 308.102091][ T5335] wireguard: wg2: Could not create IPv4 socket [ 308.200729][ T5534] SELinux: security_context_str_to_sid () failed with errno=-22 [ 308.240919][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.245776][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.254543][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.262766][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.269010][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.310926][ T5531] Failed to initialize the IGMP autojoin socket (err -2) [ 308.819754][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12266'. [ 308.830293][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12266'. [ 309.107309][ T5679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12271'. [ 309.244664][ T5706] netem: change failed [ 309.296579][ T5715] Failed to initialize the IGMP autojoin socket (err -2) [ 309.482864][ T5531] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 309.491665][ T5531] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 309.501245][ T5531] wireguard: wg0: Could not create IPv4 socket [ 309.504481][ T5531] wireguard: wg1: Could not create IPv4 socket [ 309.509724][ T5531] wireguard: wg2: Could not create IPv4 socket [ 309.583165][ T5531] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.587042][ T5531] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 309.590395][ T5531] CPU: 2 UID: 0 PID: 5531 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 309.593947][ T5531] Tainted: [L]=SOFTLOCKUP [ 309.595342][ T5531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.598510][ T5531] RIP: 0010:klist_put+0x4d/0x1d0 [ 309.600158][ T5531] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 309.607109][ T5531] RSP: 0018:ffffc90004d2f950 EFLAGS: 00010202 [ 309.609686][ T5531] RAX: dffffc0000000000 RBX: ffff88802a44d460 RCX: 0000000000000000 [ 309.613006][ T5531] RDX: 000000000000000b RSI: ffffffff8b853295 RDI: 0000000000000058 [ 309.615229][T22902] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 309.616240][ T5531] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2178cec [ 309.622744][ T5531] R10: ffffffff90bc6763 R11: 0000000000000001 R12: 0000000000000000 [ 309.626064][ T5531] R13: 0000000000000001 R14: ffffffff90bc6720 R15: dffffc0000000000 [ 309.629384][ T5531] FS: 0000000000000000(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000 [ 309.633100][ T5531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.635859][ T5531] CR2: 00007ff38b017dac CR3: 000000002701c000 CR4: 0000000000352ef0 [ 309.638860][ T5531] Call Trace: [ 309.640133][ T5531] [ 309.641247][ T5531] klist_remove+0x14c/0x2e0 [ 309.642964][ T5531] ? __pfx_klist_remove+0x10/0x10 [ 309.644870][ T5531] ? kobject_put+0xb9/0x640 [ 309.646579][ T5531] device_move+0x12d/0x1140 [ 309.648301][ T5531] hci_conn_del_sysfs+0x86/0x1a0 [ 309.650127][ T5531] hci_conn_del+0x506/0x1180 [ 309.651852][ T5531] hci_conn_hash_flush+0x186/0x280 [ 309.653754][ T5531] hci_dev_close_sync+0x5a7/0x1240 [ 309.655657][ T5531] ? find_held_lock+0x2b/0x80 [ 309.657407][ T5531] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 309.659486][ T5531] hci_dev_do_close+0x2e/0xb0 [ 309.661217][ T5531] hci_unregister_dev+0x227/0x670 [ 309.663016][ T5531] vhci_release+0x17d/0x230 [ 309.664742][ T5531] ? __pfx_vhci_release+0x10/0x10 [ 309.666604][ T5531] __fput+0x3ff/0xb40 [ 309.668134][ T5531] task_work_run+0x150/0x240 [ 309.669854][ T5531] ? __pfx_task_work_run+0x10/0x10 [ 309.671755][ T5531] do_exit+0x829/0x2aa0 [ 309.673303][ T5531] ? do_raw_spin_lock+0x128/0x260 [ 309.675204][ T5531] ? __pfx_do_exit+0x10/0x10 [ 309.676950][ T5531] ? do_group_exit+0x1bd/0x2a0 [ 309.678728][ T5531] ? rcu_is_watching+0x12/0xc0 [ 309.680594][ T5531] do_group_exit+0xd5/0x2a0 [ 309.682314][ T5531] __x64_sys_exit_group+0x3e/0x50 [ 309.684235][ T5531] x64_sys_call+0x102c/0x1530 [ 309.686073][ T5531] do_syscall_64+0x106/0xf80 [ 309.687829][ T5531] ? clear_bhb_loop+0x40/0x90 [ 309.689635][ T5531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.691836][ T5531] RIP: 0033:0x7facfa79c629 [ 309.693496][ T5531] Code: Unable to access opcode bytes at 0x7facfa79c5ff. [ 309.696025][ T5531] RSP: 002b:00007ffd6e302f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 309.699188][ T5531] RAX: ffffffffffffffda RBX: 00007facfa832fca RCX: 00007facfa79c629 [ 309.702133][ T5531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 309.705067][ T5531] RBP: 00007facfa808da8 R08: 0000000000000000 R09: 000000000000002e [ 309.708045][ T5531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.710973][ T5531] R13: 000000000000002e R14: 0000000000000025 R15: 00007ffd6e303082 [ 309.713959][ T5531] [ 309.715150][ T5531] Modules linked in: [ 309.717290][ T5531] ---[ end trace 0000000000000000 ]--- [ 309.751376][ T5531] RIP: 0010:klist_put+0x4d/0x1d0 [ 309.753589][ T5531] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 309.772886][ T5531] RSP: 0018:ffffc90004d2f950 EFLAGS: 00010202 [ 309.783577][ T5531] RAX: dffffc0000000000 RBX: ffff88802a44d460 RCX: 0000000000000000 [ 309.788604][ T5531] RDX: 000000000000000b RSI: ffffffff8b853295 RDI: 0000000000000058 [ 309.796937][ T5531] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2178cec [ 309.797620][T22902] usb 5-1: device descriptor read/all, error -71 [ 309.800110][ T5531] R10: ffffffff90bc6763 R11: 0000000000000001 R12: 0000000000000000 [ 309.805718][ T5531] R13: 0000000000000001 R14: ffffffff90bc6720 R15: dffffc0000000000 [ 309.811276][ T5531] FS: 0000000000000000(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000 [ 309.814361][ T5531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.816525][ T5531] CR2: 00007ff38b017dac CR3: 000000002cc73000 CR4: 0000000000352ef0 [ 309.822766][ T5531] Kernel panic - not syncing: Fatal exception [ 309.825575][ T5531] Kernel Offset: disabled [ 309.826959][ T5531] Rebooting in 86400 seconds..