last executing test programs: 4m57.51781245s ago: executing program 2 (id=4153): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) 4m57.450945157s ago: executing program 2 (id=4156): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) 4m57.392532968s ago: executing program 2 (id=4158): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8, 0x2) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000000380)='#', 0x1}], 0x2) 4m57.332875614s ago: executing program 2 (id=4161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) 4m57.332556625s ago: executing program 2 (id=4163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 4m57.278256034s ago: executing program 2 (id=4166): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ppoll(&(0x7f0000000140)=[{r0, 0x1100}], 0x1, 0x0, 0x0, 0x0) 4m42.290327301s ago: executing program 32 (id=4166): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ppoll(&(0x7f0000000140)=[{r0, 0x1100}], 0x1, 0x0, 0x0, 0x0) 2m17.850522907s ago: executing program 3 (id=11120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) 2m17.850277915s ago: executing program 3 (id=11121): r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 2m17.771460919s ago: executing program 3 (id=11122): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2m17.697223976s ago: executing program 3 (id=11124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 2m17.646331656s ago: executing program 3 (id=11126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf251f0000000a0001007770616e30"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) 2m17.271814245s ago: executing program 3 (id=11134): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) 2m17.132935326s ago: executing program 33 (id=11134): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) 2m13.669419922s ago: executing program 1 (id=11207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$unix(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)='M', 0x1}], 0x1, &(0x7f0000001500)=ANY=[], 0x98, 0x20000000}, 0x40000) 2m13.604957586s ago: executing program 1 (id=11208): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 2m13.594831s ago: executing program 1 (id=11209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 2m13.509065222s ago: executing program 1 (id=11212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) 2m13.450178342s ago: executing program 1 (id=11215): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m13.384429946s ago: executing program 1 (id=11217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m58.366432376s ago: executing program 34 (id=11217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 37.780780948s ago: executing program 4 (id=13224): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 37.701081912s ago: executing program 4 (id=13225): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) 37.641036523s ago: executing program 4 (id=13226): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x81, 0x2, 0x6}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0xffffffffffffff5e, 0x1fd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 37.561093943s ago: executing program 4 (id=13227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="f3400f23e764450fc7290f01c866baf80cb88a67a88eef66bafc0cec440f01df263e66400faef40f011d050000000f3066400f6fbb0b0000000f01c2", 0x3c}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.305509513s ago: executing program 4 (id=13228): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 37.223230511s ago: executing program 4 (id=13229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48a, 0x0, 0x8000000000000001}]}) 22.219401807s ago: executing program 35 (id=13229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48a, 0x0, 0x8000000000000001}]}) 1.090047291s ago: executing program 7 (id=14009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) close(0x3) close(0x4) 1.020301604s ago: executing program 7 (id=14010): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2023) 1.019900061s ago: executing program 7 (id=14013): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 952.05451ms ago: executing program 7 (id=14017): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 866.759439ms ago: executing program 7 (id=14021): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x24000814) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 866.488497ms ago: executing program 0 (id=14022): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket(0x11, 0xa, 0x405) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000600)="004000000000000000ebffffff00", 0xe, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 810.449805ms ago: executing program 7 (id=14024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) 749.561707ms ago: executing program 0 (id=14027): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000428000/0x4000)=nil, 0x4000}}) 540.816649ms ago: executing program 0 (id=14032): r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 540.361736ms ago: executing program 0 (id=14035): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1f75, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe8bbb597}, 0x1c, &(0x7f0000000200)}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="9a", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6d96526e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 471.054938ms ago: executing program 0 (id=14038): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 461.566338ms ago: executing program 0 (id=14042): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x0}) 381.335407ms ago: executing program 5 (id=14043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 381.124079ms ago: executing program 5 (id=14044): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0x9, r2}, 0x20) 310.834859ms ago: executing program 5 (id=14045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x4, r0}, 0x10) 298.710209ms ago: executing program 6 (id=14046): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 259.026045ms ago: executing program 6 (id=14047): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x12800180, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 201.276558ms ago: executing program 5 (id=14048): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 200.926859ms ago: executing program 6 (id=14049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x1, 0x4) 140.963348ms ago: executing program 6 (id=14050): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x4483c, 0x122125}) 140.767347ms ago: executing program 6 (id=14051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8431", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x351, 0x0, 0x3}}}}}}}, 0x0) 70.799044ms ago: executing program 6 (id=14052): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) 206.086µs ago: executing program 5 (id=14053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) 0s ago: executing program 5 (id=14054): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) kernel console output (not intermixed with test programs): =1 [ 350.202026][ T41] audit: type=1400 audit(350.079:41710): avc: denied { node_bind } for pid=31896 comm="syz.0.12198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 350.211139][ T41] audit: type=1400 audit(350.089:41711): avc: denied { write } for pid=31896 comm="syz.0.12198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.220422][ T41] audit: type=1400 audit(350.089:41712): avc: denied { read } for pid=31896 comm="syz.0.12198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.229796][ T41] audit: type=1400 audit(350.109:41713): avc: denied { create } for pid=31898 comm="syz.5.12199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.237577][ T41] audit: type=1400 audit(350.129:41714): avc: denied { bind } for pid=31898 comm="syz.5.12199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.250478][ T41] audit: type=1400 audit(350.129:41715): avc: denied { accept } for pid=31898 comm="syz.5.12199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.258242][ T41] audit: type=1400 audit(350.129:41716): avc: denied { read } for pid=31898 comm="syz.5.12199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.265538][ T41] audit: type=1400 audit(350.129:41717): avc: denied { mounton } for pid=31900 comm="syz.6.12200" path="/53/file0" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.012657][ T6197] Bluetooth: hci1: command 0x0c1a tx timeout [ 351.182428][ T6197] Bluetooth: hci2: command 0x0419 tx timeout [ 351.422911][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 351.492757][ T6193] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 351.553691][T31942] openvswitch: netlink: IP tunnel dst address not specified [ 351.577833][ T9] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.581813][ T9] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.586019][ T9] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.589157][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.594460][T31921] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 351.598988][ T9] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.606237][T31948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12222'. [ 351.803421][ T9] usb 11-1: USB disconnect, device number 5 [ 351.852133][T31960] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 351.993319][T31971] batadv_slave_1: entered promiscuous mode [ 351.998296][T31970] batadv_slave_1: left promiscuous mode [ 352.170533][ T6193] Bluetooth: hci1: adv larger than maximum supported [ 352.170585][ T6193] Bluetooth: hci1: Malformed LE Event: 0x0d [ 352.251823][T31989] bond5: invalid ARP target 0.0.0.0 specified for addition [ 352.254978][T31989] bond5: option arp_ip_target: invalid value (0) [ 352.258684][T31989] bond5 (unregistering): Released all slaves [ 352.666321][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12259'. [ 352.697876][T32028] ip_vti0: Master is either lo or non-ether device [ 353.057173][T32075] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12280'. [ 353.105587][T32081] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12282'. [ 353.106037][T32080] misc userio: Can't change port type on an already running userio instance [ 353.196815][T32090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12287'. [ 353.252629][ T6193] Bluetooth: hci2: command 0x0419 tx timeout [ 353.611447][T32125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12303'. [ 353.618738][T32125] bond0: entered promiscuous mode [ 353.620684][T32125] bond_slave_0: entered promiscuous mode [ 353.623603][T32125] bond_slave_1: entered promiscuous mode [ 353.626675][T32125] bond0: left promiscuous mode [ 353.628373][T32125] bond_slave_0: left promiscuous mode [ 353.630631][T32125] bond_slave_1: left promiscuous mode [ 353.773003][ T5764] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 353.798822][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12308'. [ 353.922516][ T5764] usb 5-1: Using ep0 maxpacket: 8 [ 353.925755][ T5764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.929431][ T5764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.933365][ T5764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.936580][ T5764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.940627][ T5764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.943828][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.154753][ T5764] usb 5-1: GET_CAPABILITIES returned 0 [ 354.156576][ T5764] usbtmc 5-1:16.0: can't read capabilities [ 354.293805][T32150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 354.295974][T32150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.298620][T32150] vhci_hcd vhci_hcd.0: Device attached [ 354.360619][T32118] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 354.365186][ T5764] usb 5-1: USB disconnect, device number 22 [ 354.542507][ T6278] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 354.542862][ T9] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 354.694224][ T9] usb 9-1: config 0 has no interfaces? [ 354.696090][ T9] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 354.699543][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.712518][ T9] usb 9-1: config 0 descriptor?? [ 354.918782][T32151] usbip_core: unknown command [ 354.921367][T32151] vhci_hcd: unknown pdu 0 [ 354.921742][ T9] usb 9-1: USB disconnect, device number 13 [ 354.926643][T32151] usbip_core: unknown command [ 354.931667][ T106] vhci_hcd vhci_hcd.4: stop threads [ 354.937091][ T106] vhci_hcd vhci_hcd.4: release socket [ 354.942983][ T106] vhci_hcd vhci_hcd.4: disconnect device [ 354.993910][ T6278] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 355.009720][T32179] netlink: 'syz.0.12328': attribute type 1 has an invalid length. [ 355.012720][T32179] netlink: 'syz.0.12328': attribute type 2 has an invalid length. [ 355.016678][T32179] netlink: 'syz.0.12328': attribute type 2 has an invalid length. [ 355.036698][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12329'. [ 355.291965][ T41] kauditd_printk_skb: 126 callbacks suppressed [ 355.291976][ T41] audit: type=1400 audit(355.189:41844): avc: denied { read write } for pid=32196 comm="syz.6.12337" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.301508][ T41] audit: type=1400 audit(355.189:41845): avc: denied { open } for pid=32196 comm="syz.6.12337" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.309696][ T41] audit: type=1400 audit(355.199:41846): avc: denied { ioctl } for pid=32196 comm="syz.6.12337" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.339103][T32201] netlink: 'syz.6.12339': attribute type 1 has an invalid length. [ 355.341959][T32201] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12339'. [ 355.345948][T32201] netlink: 'syz.6.12339': attribute type 1 has an invalid length. [ 355.348634][T32201] netlink: 'syz.6.12339': attribute type 8 has an invalid length. [ 355.351829][T32201] netlink: 582 bytes leftover after parsing attributes in process `syz.6.12339'. [ 355.355752][T32201] netlink: 1 bytes leftover after parsing attributes in process `syz.6.12339'. [ 355.475263][T32210] can0: slcan on ttynull. [ 355.480282][ T41] audit: type=1400 audit(355.379:41847): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 355.551974][ T41] audit: type=1400 audit(355.449:41848): avc: denied { ioctl } for pid=32217 comm="syz.6.12347" path="socket:[106302]" dev="sockfs" ino=106302 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.553740][T32218] netlink: 'syz.6.12347': attribute type 13 has an invalid length. [ 355.554292][T32210] can0 (unregistered): slcan off ttynull. [ 355.568016][T32218] syz_tun: refused to change device tx_queue_len [ 355.650772][ T41] audit: type=1400 audit(355.549:41849): avc: denied { sys_module } for pid=32221 comm="syz.0.12349" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 355.673055][ T41] audit: type=1400 audit(355.569:41850): avc: denied { read write } for pid=31317 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.680522][ T41] audit: type=1400 audit(355.569:41851): avc: denied { open } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.689578][ T41] audit: type=1400 audit(355.569:41852): avc: denied { ioctl } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.698606][ T41] audit: type=1400 audit(355.579:41853): avc: denied { create } for pid=32231 comm="syz.6.12354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.951756][T32244] erspan0: entered promiscuous mode [ 356.363050][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 356.407520][T32286] overlayfs: failed to clone upperpath [ 356.529111][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 356.532993][ T9] usb 5-1: config 0 has no interfaces? [ 356.536052][ T9] usb 5-1: config 0 has no interfaces? [ 356.539838][ T9] usb 5-1: config 0 has no interfaces? [ 356.542954][ T9] usb 5-1: config 0 has no interfaces? [ 356.545957][ T9] usb 5-1: config 0 has no interfaces? [ 356.553705][ T9] usb 5-1: config 0 has no interfaces? [ 356.564236][ T9] usb 5-1: config 0 has no interfaces? [ 356.567797][ T9] usb 5-1: config 0 has no interfaces? [ 356.579960][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 356.583961][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 356.587482][ T9] usb 5-1: Product: syz [ 356.589246][ T9] usb 5-1: Manufacturer: syz [ 356.591318][ T9] usb 5-1: SerialNumber: syz [ 356.599307][ T9] usb 5-1: config 0 descriptor?? [ 356.663086][T32306] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.754215][T32314] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.758009][T32314] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.811824][ T9] usb 5-1: USB disconnect, device number 23 [ 357.284810][T32349] input: syz1 as /devices/virtual/input/input38 [ 357.287607][T32349] input: failed to attach handler leds to device input38, error: -6 [ 357.763217][T32391] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 358.036741][T32425] loop1: detected capacity change from 0 to 7 [ 358.044271][ C0] blk_print_req_error: 45 callbacks suppressed [ 358.044287][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.049550][ C0] buffer_io_error: 26 callbacks suppressed [ 358.049560][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.055326][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.058454][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.066999][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.071269][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.074917][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.078012][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.081047][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.085169][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.088114][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.091228][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.103024][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.106114][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.108601][T32270] ldm_validate_partition_table(): Disk read failed. [ 358.110965][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.114235][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.116900][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.119922][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.122661][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 358.125843][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 358.130627][T32270] Dev loop1: unable to read RDB block 0 [ 358.133294][T32270] loop1: unable to read partition table [ 358.136157][T32270] loop1: partition table beyond EOD, truncated [ 358.149729][T32425] ldm_validate_partition_table(): Disk read failed. [ 358.153277][T32425] Dev loop1: unable to read RDB block 0 [ 358.166973][T32425] loop1: unable to read partition table [ 358.168917][T32425] loop1: partition table beyond EOD, truncated [ 358.170916][T32425] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 358.533467][ T6255] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 358.705135][ T6255] usb 9-1: Using ep0 maxpacket: 8 [ 358.716080][ T6255] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.719856][ T6255] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.726742][ T6255] usb 9-1: config 0 interface 0 has no altsetting 0 [ 358.729132][ T6255] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 358.732020][ T6255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.736672][ T6255] usb 9-1: config 0 descriptor?? [ 358.984861][ T6255] usbhid 9-1:0.0: can't add hid device: -71 [ 358.990122][ T6255] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 358.997895][T32492] overlayfs: missing 'workdir' [ 359.000865][ T6255] usb 9-1: USB disconnect, device number 14 [ 359.440338][T32537] __nla_validate_parse: 3 callbacks suppressed [ 359.440350][T32537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12483'. [ 359.997135][T32575] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12501'. [ 360.351197][ T41] kauditd_printk_skb: 212 callbacks suppressed [ 360.351213][ T41] audit: type=1400 audit(360.249:42066): avc: denied { create } for pid=32605 comm="syz.4.12513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.364066][ T41] audit: type=1400 audit(360.259:42067): avc: denied { append } for pid=32607 comm="syz.0.12514" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.367060][T32608] loop5: detected capacity change from 0 to 7 [ 360.374945][ T41] audit: type=1400 audit(360.269:42068): avc: denied { connect } for pid=32605 comm="syz.4.12513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.381405][T32270] Dev loop5: unable to read RDB block 7 [ 360.383125][ T41] audit: type=1400 audit(360.279:42069): avc: denied { shutdown } for pid=32605 comm="syz.4.12513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.385001][T32270] loop5: AHDI p1 [ 360.385045][T32270] loop5: partition table partially beyond EOD, truncated [ 360.405614][T32608] Dev loop5: unable to read RDB block 7 [ 360.408574][T32608] loop5: AHDI p1 [ 360.410181][T32608] loop5: partition table partially beyond EOD, truncated [ 360.471228][ T41] audit: type=1400 audit(360.369:42070): avc: denied { create } for pid=32614 comm="syz.4.12517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.478942][ T41] audit: type=1400 audit(360.379:42071): avc: denied { setopt } for pid=32614 comm="syz.4.12517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.485747][ T41] audit: type=1400 audit(360.379:42072): avc: denied { read } for pid=32614 comm="syz.4.12517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.494126][ T41] audit: type=1400 audit(360.379:42073): avc: denied { read } for pid=32616 comm="syz.0.12518" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 360.501766][ T41] audit: type=1400 audit(360.379:42074): avc: denied { open } for pid=32616 comm="syz.0.12518" path="net:[4026532896]" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 360.512165][ T41] audit: type=1400 audit(360.379:42075): avc: denied { create } for pid=32616 comm="syz.0.12518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.062657][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 361.186650][T32655] 5gQ[: renamed from lo (while UP) [ 361.200186][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12536'. [ 361.239642][ T9] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 361.243803][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.247446][ T9] usb 11-1: Product: syz [ 361.249496][ T9] usb 11-1: Manufacturer: syz [ 361.251930][ T9] usb 11-1: SerialNumber: syz [ 361.305285][T32665] sp0: Synchronizing with TNC [ 361.429131][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12544'. [ 361.447614][T32673] vlan2: entered allmulticast mode [ 361.450003][T32673] vlan0: entered allmulticast mode [ 361.452283][T32673] veth0_vlan: entered allmulticast mode [ 361.456366][T32676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12545'. [ 361.495720][ T9] rtl8150 11-1:1.0: couldn't reset the device [ 361.498075][ T9] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 361.504307][ T9] usb 11-1: USB disconnect, device number 6 [ 361.559618][T32684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12549'. [ 361.565421][T32684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12549'. [ 362.041136][T32737] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12574'. [ 362.241964][T32764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12588'. [ 362.314236][ T6193] block nbd1: Receive control failed (result -32) [ 362.421808][ T320] batadv_slave_1: entered promiscuous mode [ 362.427900][ T319] batadv_slave_1: left promiscuous mode [ 362.762525][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 362.786202][ T362] bond5: ARP target 9.0.0.0 is already present [ 362.788522][ T362] bond5: option arp_ip_target: invalid value (9) [ 362.791775][ T362] bond5 (unregistering): Released all slaves [ 362.922447][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 362.926456][ T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 362.930715][ T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 362.938210][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 362.941596][ T369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12619'. [ 362.944396][ T10] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 362.949630][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.956054][ T10] usb 9-1: Product: syz [ 362.958092][ T10] usb 9-1: Manufacturer: syz [ 362.960206][ T10] usb 9-1: SerialNumber: syz [ 362.974464][ T10] usb 9-1: config 0 descriptor?? [ 362.994707][ T374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 363.188447][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input39 [ 363.190295][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.195469][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.437366][ T429] ptrace attach of "/syz-executor exec"[31317] was attempted by ""[429] [ 363.475015][ T6255] usb 9-1: USB disconnect, device number 15 [ 363.475114][ C0] synaptics_usb 9-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 364.435373][ T39] IPVS: starting estimator thread 0... [ 364.535016][ T473] IPVS: using max 27 ests per chain, 64800 per kthread [ 364.562443][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 364.714325][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.718572][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.723824][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.727643][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.735998][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.739992][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.743661][ T24] usb 9-1: Product: syz [ 364.746550][ T24] usb 9-1: Manufacturer: syz [ 364.757239][ T24] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 364.923668][ T516] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 364.929280][ T516] bond1 (unregistering): Released all slaves [ 364.958357][ T518] __nla_validate_parse: 1 callbacks suppressed [ 364.958375][ T518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12682'. [ 364.960256][ T6194] usb 9-1: USB disconnect, device number 16 [ 364.961100][ T518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12682'. [ 365.286320][ T532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12689'. [ 365.289350][ T532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12689'. [ 365.458080][ T41] kauditd_printk_skb: 254 callbacks suppressed [ 365.458092][ T41] audit: type=1400 audit(365.359:42330): avc: denied { prog_load } for pid=539 comm="syz.6.12693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.467162][ T41] audit: type=1400 audit(365.359:42331): avc: denied { bpf } for pid=539 comm="syz.6.12693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.474123][ T41] audit: type=1400 audit(365.359:42332): avc: denied { perfmon } for pid=539 comm="syz.6.12693" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.481284][ T41] audit: type=1400 audit(365.379:42333): avc: denied { prog_run } for pid=539 comm="syz.6.12693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.500665][ T41] audit: type=1400 audit(365.399:42334): avc: denied { recv } for pid=5911 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50312 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 365.515472][ T41] audit: type=1400 audit(365.419:42335): avc: denied { execute } for pid=541 comm="syz.4.12694" name="file2" dev="tmpfs" ino=10794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 365.551064][ T41] audit: type=1400 audit(365.449:42336): avc: denied { create } for pid=543 comm="syz.4.12695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.560775][ T41] audit: type=1400 audit(365.469:42337): avc: denied { ioctl } for pid=543 comm="syz.4.12695" path="socket:[110357]" dev="sockfs" ino=110357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.560941][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12695'. [ 365.613428][ T41] audit: type=1400 audit(365.519:42338): avc: denied { mount } for pid=545 comm="syz.0.12696" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 365.627543][ T41] audit: type=1400 audit(365.539:42339): avc: denied { write } for pid=547 comm="syz.4.12697" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 366.269782][ T599] MPI: mpi too large (16392 bits) [ 366.329039][ T607] autofs4:pid:607:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 366.335253][ T607] autofs4:pid:607:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 366.372612][ T6255] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 366.532577][ T6255] usb 9-1: Using ep0 maxpacket: 32 [ 366.548467][ T6255] usb 9-1: unable to get BOS descriptor or descriptor too short [ 366.553085][ T6255] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 366.557004][ T6255] usb 9-1: can't read configurations, error -71 [ 366.589404][ T629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12737'. [ 366.662939][ T106] wlan1: Creating new IBSS network, BSSID 3e:fa:3f:aa:35:cc [ 366.771768][ T649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.774999][ T649] IPv6: NLM_F_CREATE should be set when creating new route [ 366.778157][ T649] IPv6: NLM_F_CREATE should be set when creating new route [ 366.782573][ T649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.314931][ T679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12759'. [ 367.318643][ T679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12759'. [ 367.344467][ T681] netlink: 304 bytes leftover after parsing attributes in process `syz.4.12760'. [ 367.443725][ T693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12766'. [ 367.732515][ T6255] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 367.897154][ T6255] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.899907][ T6255] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.904070][ T6255] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.906916][ T6255] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.910683][ T6255] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.915992][ T6255] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.918950][ T6255] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.921766][ T6255] usb 9-1: Product: syz [ 367.923626][ T6255] usb 9-1: Manufacturer: syz [ 367.929064][ T6255] cdc_wdm 9-1:1.0: skipping garbage [ 367.930902][ T6255] cdc_wdm 9-1:1.0: skipping garbage [ 367.934161][ T6255] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 367.936312][ T6255] cdc_wdm 9-1:1.0: Unknown control protocol [ 368.141000][ T6194] usb 9-1: USB disconnect, device number 19 [ 368.809556][ T765] overlayfs: missing 'workdir' [ 368.823004][ T755] nbd2: detected capacity change from 0 to 127 [ 368.827357][ T6193] block nbd2: Receive control failed (result -32) [ 368.828420][T32270] block nbd2: Send control failed (result -32) [ 368.828574][T32270] block nbd2: Request send failed, requeueing [ 368.847553][ T1285] block nbd2: Dead connection, failed to find a fallback [ 368.850711][ T1285] block nbd2: shutting down sockets [ 368.853276][ T1285] blk_print_req_error: 25 callbacks suppressed [ 368.853286][ T1285] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.858670][ T1285] buffer_io_error: 25 callbacks suppressed [ 368.858679][ T1285] Buffer I/O error on dev nbd2, logical block 0, async page read [ 368.864508][T32270] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.867797][T32270] Buffer I/O error on dev nbd2, logical block 1, async page read [ 368.871667][T32270] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.875399][T32270] Buffer I/O error on dev nbd2, logical block 2, async page read [ 368.877965][T32270] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.880994][T32270] Buffer I/O error on dev nbd2, logical block 3, async page read [ 368.884007][T32270] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.888150][T32270] Buffer I/O error on dev nbd2, logical block 0, async page read [ 368.890923][T32270] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.894259][T32270] Buffer I/O error on dev nbd2, logical block 1, async page read [ 368.896792][T32270] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.899801][T32270] Buffer I/O error on dev nbd2, logical block 2, async page read [ 368.903229][T32270] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.906835][T32270] Buffer I/O error on dev nbd2, logical block 3, async page read [ 368.909632][T32270] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.912814][T32270] Buffer I/O error on dev nbd2, logical block 0, async page read [ 368.915295][T32270] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 368.918284][T32270] Buffer I/O error on dev nbd2, logical block 1, async page read [ 368.921112][T32270] ldm_validate_partition_table(): Disk read failed. [ 368.923718][T32270] Dev nbd2: unable to read RDB block 0 [ 368.926085][T32270] nbd2: unable to read partition table [ 368.930559][T32270] ldm_validate_partition_table(): Disk read failed. [ 368.936776][T32270] Dev nbd2: unable to read RDB block 0 [ 368.939475][T32270] nbd2: unable to read partition table [ 369.352932][ T6278] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.516316][ T6278] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.520831][ T6278] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.525207][ T6278] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.528880][ T6278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.538066][ T789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 369.549996][ T6278] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.744630][ T39] usb 5-1: USB disconnect, device number 25 [ 369.807099][ T801] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.224307][ T828] __nla_validate_parse: 1 callbacks suppressed [ 370.224325][ T828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12825'. [ 370.323780][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12833'. [ 370.327872][ T844] netlink: 'syz.5.12833': attribute type 30 has an invalid length. [ 370.338182][ T1144] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.338993][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12833'. [ 370.341608][ T1144] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.345117][ T844] netlink: 'syz.5.12833': attribute type 30 has an invalid length. [ 370.348196][ T1144] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.358446][ T1144] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.525101][ T41] kauditd_printk_skb: 114 callbacks suppressed [ 370.525118][ T41] audit: type=1400 audit(626.437:42454): avc: denied { mount } for pid=866 comm="syz.5.12843" name="/" dev="ramfs" ino=112087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 370.607712][ T41] audit: type=1400 audit(626.517:42455): avc: denied { module_request } for pid=874 comm="syz.6.12847" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 370.630544][ T41] audit: type=1400 audit(626.537:42456): avc: denied { create } for pid=878 comm="syz.4.12849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.642505][ T41] audit: type=1400 audit(626.537:42457): avc: denied { write } for pid=878 comm="syz.4.12849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.643302][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12849'. [ 370.660412][ T879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12849'. [ 370.662786][ T41] audit: type=1400 audit(626.577:42458): avc: denied { read } for pid=882 comm="syz.0.12851" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 370.668836][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12849'. [ 370.682590][ T41] audit: type=1400 audit(626.577:42459): avc: denied { open } for pid=882 comm="syz.0.12851" path="net:[4026532896]" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 370.693582][ T41] audit: type=1400 audit(626.577:42460): avc: denied { create } for pid=882 comm="syz.0.12851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.695450][ T885] 9p: Invalid uid '0x00000000ffffffff' [ 370.702239][ T41] audit: type=1400 audit(626.577:42461): avc: denied { recv } for pid=878 comm="syz.4.12849" saddr=127.0.0.1 src=50312 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 370.702283][ T41] audit: type=1400 audit(626.577:42462): avc: denied { write } for pid=882 comm="syz.0.12851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.723253][ T41] audit: type=1400 audit(626.577:42463): avc: denied { read } for pid=882 comm="syz.0.12851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.797989][ T896] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 370.972466][ T6194] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 371.143760][ T6194] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.146641][ T6194] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 371.149988][ T6194] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.154516][ T6194] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 371.158009][ T6194] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 371.163761][ T6194] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 371.167316][ T6194] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 371.170415][ T6194] usb 5-1: Product: syz [ 371.172091][ T6194] usb 5-1: Manufacturer: syz [ 371.179346][ T6194] cdc_wdm 5-1:1.0: skipping garbage [ 371.181551][ T6194] cdc_wdm 5-1:1.0: skipping garbage [ 371.185234][ T6194] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 371.187171][ T6194] cdc_wdm 5-1:1.0: Unknown control protocol [ 371.252538][ T24] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 371.425467][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.430191][ T24] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.434966][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 371.435117][ T5764] usb 5-1: USB disconnect, device number 26 [ 371.437827][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 371.443076][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 371.449486][ T24] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.458337][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 371.462138][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 371.465632][ T24] usb 11-1: Product: syz [ 371.467475][ T24] usb 11-1: Manufacturer: syz [ 371.469536][ T24] usb 11-1: SerialNumber: syz [ 371.544147][ T933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12874'. [ 371.548101][ T932] netlink: 'syz.4.12873': attribute type 1 has an invalid length. [ 371.686404][ T24] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 371.888844][ T24] usb 11-1: USB disconnect, device number 7 [ 371.897670][ T24] usblp0: removed [ 372.180958][ T967] vcan0: tx address claim with dlc 0 [ 372.307374][ T983] SELinux: ebitmap: truncated map [ 372.346926][ T983] SELinux: failed to load policy [ 372.411454][ T998] netlink: 'syz.4.12897': attribute type 21 has an invalid length. [ 372.414680][ T998] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12897'. [ 372.418720][ T998] netlink: 'syz.4.12897': attribute type 21 has an invalid length. [ 372.421648][ T998] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12897'. [ 372.802122][ T1047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12918'. [ 373.028744][ T1078] overlayfs: failed to clone upperpath [ 373.090981][ T1083] "syz.4.12936" (1083) uses obsolete ecb(arc4) skcipher [ 373.165637][ T1104] option changes via remount are deprecated (pid=1103 comm=syz.6.12942) [ 373.170915][ T1104] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 "" [ 373.201488][ T1116] input: syz1 as /devices/virtual/input/input41 [ 373.372029][ T1160] loop5: detected capacity change from 0 to 7 [ 373.388825][ T1162] bridge_slave_1: left allmulticast mode [ 373.391310][ T1162] bridge_slave_1: left promiscuous mode [ 373.395215][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.404819][ T1162] bridge_slave_0: left allmulticast mode [ 373.406944][ T1162] bridge_slave_0: left promiscuous mode [ 373.414121][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.526967][ T1160] Dev loop5: unable to read RDB block 7 [ 373.533357][ T1160] loop5: unable to read partition table [ 373.535830][ T1160] loop5: partition table beyond EOD, truncated [ 373.537942][ T1160] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 373.628838][ T1180] netlink: 'syz.0.12967': attribute type 4 has an invalid length. [ 373.855627][ T1207] netlink: 'syz.4.12979': attribute type 2 has an invalid length. [ 373.864190][ T1207] !: entered promiscuous mode [ 373.867846][ T1207] netlink: 'syz.4.12979': attribute type 2 has an invalid length. [ 373.870790][ T1207] !: left promiscuous mode [ 374.182602][ T6194] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 374.335251][ T6194] usb 5-1: unable to get BOS descriptor or descriptor too short [ 374.340610][ T6194] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 374.343552][ T6194] usb 5-1: can't read configurations, error -71 [ 374.352743][ T6278] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 374.372752][ T6193] Bluetooth: hci1: command 0x0c1a tx timeout [ 374.512629][ T6278] usb 11-1: Using ep0 maxpacket: 8 [ 374.523817][ T6278] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 374.527767][ T6278] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 374.531174][ T6278] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.535022][ T6278] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.539443][ T6278] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.543281][ T6278] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.755271][ T6278] usb 11-1: GET_CAPABILITIES returned 0 [ 374.758099][ T6278] usbtmc 11-1:16.0: can't read capabilities [ 374.956050][ T1257] vcan0: tx address claim with dest, not broadcast [ 374.958706][ T1222] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -71 [ 374.963636][ T6278] usb 11-1: USB disconnect, device number 8 [ 375.098582][ T1273] macvtap0: entered promiscuous mode [ 375.101339][ T1273] macvtap0: entered allmulticast mode [ 375.104815][ T1273] veth1_vlan: entered allmulticast mode [ 375.122036][ T1275] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 375.564283][ T41] kauditd_printk_skb: 217 callbacks suppressed [ 375.564303][ T41] audit: type=1400 audit(887.477:42681): avc: denied { create } for pid=1304 comm="syz.5.13022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.578710][ T41] audit: type=1400 audit(887.477:42682): avc: denied { bind } for pid=1304 comm="syz.5.13022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.591933][ T41] audit: type=1400 audit(887.477:42683): avc: denied { setopt } for pid=1304 comm="syz.5.13022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.601509][ T41] audit: type=1400 audit(887.477:42684): avc: denied { write } for pid=1304 comm="syz.5.13022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.610443][ T41] audit: type=1400 audit(887.517:42685): avc: denied { execmem } for pid=1306 comm="syz.5.13024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 375.640382][ T41] audit: type=1400 audit(887.547:42686): avc: denied { perfmon } for pid=1308 comm="syz.5.13025" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.642905][ T1310] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 375.649945][ T41] audit: type=1400 audit(887.547:42687): avc: denied { prog_run } for pid=1308 comm="syz.5.13025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 375.852804][ T41] audit: type=1400 audit(887.757:42688): avc: denied { ioctl } for pid=1320 comm="syz.5.13030" path="socket:[113094]" dev="sockfs" ino=113094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 375.897184][ T41] audit: type=1400 audit(887.807:42689): avc: denied { map_read map_write } for pid=1324 comm="syz.5.13032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 375.906193][ T41] audit: type=1400 audit(887.817:42690): avc: denied { create } for pid=1326 comm="syz.0.13033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.945770][ T1330] __nla_validate_parse: 10 callbacks suppressed [ 375.945790][ T1330] netlink: 168 bytes leftover after parsing attributes in process `syz.6.13034'. [ 376.452559][ T6193] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.058499][ T1395] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 377.172508][ T1266] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 377.172851][ T6193] Bluetooth: hci3: command 0x1003 tx timeout [ 377.267355][ T1409] 9p: Unknown uid 00000000004294967295 [ 377.313602][ T1415] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 377.388550][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13076'. [ 377.862750][ T1454] bond0: entered promiscuous mode [ 377.864784][ T1454] bond_slave_0: entered promiscuous mode [ 377.867409][ T1454] bond_slave_1: entered promiscuous mode [ 377.871190][ T1454] batadv0: entered promiscuous mode [ 377.874022][ T1454] debugfs: 'hsr1' already exists in 'hsr' [ 377.876606][ T1454] Cannot create hsr debugfs directory [ 377.879616][ T1454] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 377.885017][ T1454] bond0: left promiscuous mode [ 377.887456][ T1454] bond_slave_0: left promiscuous mode [ 377.889957][ T1454] bond_slave_1: left promiscuous mode [ 377.893446][ T1454] batadv0: left promiscuous mode [ 377.921098][ T1458] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13093'. [ 378.070184][ T1470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13098'. [ 378.077472][ T1470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13098'. [ 378.081412][ T1470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13098'. [ 378.172639][ T6278] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 378.188863][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13101'. [ 378.191888][ T1476] hsr_slave_0: left promiscuous mode [ 378.194316][ T1476] hsr_slave_1: left promiscuous mode [ 378.322680][ T6278] usb 11-1: Using ep0 maxpacket: 32 [ 378.327026][ T6278] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.329614][ T6278] usb 11-1: config 0 has no interface number 0 [ 378.334736][ T6278] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 378.338657][ T6278] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.341957][ T6278] usb 11-1: Product: syz [ 378.345176][ T6278] usb 11-1: Manufacturer: syz [ 378.347179][ T6278] usb 11-1: SerialNumber: syz [ 378.352021][ T6278] usb 11-1: config 0 descriptor?? [ 378.358915][ T6278] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 378.361881][ T6278] usb 11-1: selecting invalid altsetting 1 [ 378.364549][ T6278] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 378.368591][ T6278] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.374140][ T6278] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 378.377941][ T6278] usb 11-1: media controller created [ 378.391071][ T6278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.653471][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 378.773251][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 378.882721][ T830] e1000 0000:00:06.0 eth0: Reset adapter [ 379.045028][ T1519] mkiss: ax0: crc mode is auto. [ 379.092519][ T6197] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 379.092832][ T1266] Bluetooth: hci5: command 0x1003 tx timeout [ 379.493179][ T6278] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 379.495197][ T6278] zl10353_read_register: readreg error (reg=127, ret==-110) [ 379.495372][ T1452] usb 11-1: dvb_usb_ce6230: I2C read not implemented [ 379.514204][ T6278] usb 11-1: USB disconnect, device number 9 [ 381.013555][ T6278] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 381.049352][ T41] kauditd_printk_skb: 96 callbacks suppressed [ 381.049371][ T41] audit: type=1400 audit(892.957:42787): avc: denied { search } for pid=1532 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.379366][ T41] audit: type=1400 audit(894.287:42788): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 385.362025][ T41] audit: type=1400 audit(897.267:42789): avc: denied { read open } for pid=1536 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.370360][ T41] audit: type=1400 audit(897.277:42790): avc: denied { getattr } for pid=1536 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.383154][ T41] audit: type=1400 audit(897.297:42791): avc: denied { add_name } for pid=1535 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.390896][ T41] audit: type=1400 audit(897.297:42792): avc: denied { create } for pid=1535 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.401078][ T41] audit: type=1400 audit(897.297:42793): avc: denied { write open } for pid=1535 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=17000 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.412661][ T41] audit: type=1400 audit(897.297:42794): avc: denied { append } for pid=1535 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=17000 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.420886][ T41] audit: type=1400 audit(897.297:42795): avc: denied { getattr } for pid=1535 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.429681][ T41] audit: type=1400 audit(897.307:42796): avc: denied { read } for pid=1537 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 389.036431][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 389.036444][ T41] audit: type=1400 audit(900.947:42799): avc: denied { recv } for pid=5911 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50312 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 389.104658][ T41] audit: type=1400 audit(901.017:42800): avc: denied { create } for pid=1546 comm="syz.4.13123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.105804][ T1548] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13123'. [ 389.115838][ T41] audit: type=1400 audit(901.017:42801): avc: denied { write } for pid=1546 comm="syz.4.13123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.142531][ T41] audit: type=1400 audit(901.027:42802): avc: denied { create } for pid=1550 comm="syz.0.13121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.151674][ T41] audit: type=1400 audit(901.027:42803): avc: denied { setopt } for pid=1550 comm="syz.0.13121" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.161804][ T41] audit: type=1400 audit(901.027:42804): avc: denied { read } for pid=1552 comm="syz.6.13122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.169699][ T41] audit: type=1400 audit(901.037:42805): avc: denied { ioctl } for pid=1552 comm="syz.6.13122" path="socket:[113295]" dev="sockfs" ino=113295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.189488][ T41] audit: type=1400 audit(901.037:42806): avc: denied { write } for pid=1550 comm="syz.0.13121" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.198331][ T41] audit: type=1400 audit(901.047:42807): avc: denied { read write } for pid=15926 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.212552][ T41] audit: type=1400 audit(901.047:42808): avc: denied { open } for pid=15926 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.249757][ T1565] raw_sendmsg: syz.6.13127 forgot to set AF_INET. Fix it! [ 389.592477][ T9] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 389.764513][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.768099][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.772586][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.777962][ T9] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.783216][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.791174][ T9] usb 11-1: config 0 descriptor?? [ 390.206464][ T9] hid_parser_main: 5 callbacks suppressed [ 390.206481][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.215523][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.218070][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.220431][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.225650][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.227874][ T1605] xt_hashlimit: size too large, truncated to 1048576 [ 390.228947][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.234828][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.237896][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.241073][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.244499][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 390.277904][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 390.488089][ T830] usb 11-1: USB disconnect, device number 10 [ 390.895767][ T1633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13156'. [ 391.242543][ T54] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 391.412425][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 391.415659][ T54] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 391.419333][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.423028][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.426233][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 391.430451][ T54] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 391.433610][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.438188][ T54] usb 5-1: config 0 descriptor?? [ 391.863273][ T54] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.000A/input/input42 [ 391.867005][ T1657] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.13166'. [ 391.895247][ T1659] xt_hashlimit: size too large, truncated to 1048576 [ 391.965171][ T54] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5013.000A/input/input43 [ 391.996210][ T54] kye 0003:0458:5013.000A: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 392.868649][ T1705] netlink: set zone limit has 4 unknown bytes [ 392.898768][ C2] kye 0003:0458:5013.000A: usb_submit_urb(ctrl) failed: -1 [ 392.908667][ T39] usb 5-1: USB disconnect, device number 29 [ 392.951752][ T1712] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 393.126564][ T1725] macvlan2: entered promiscuous mode [ 393.281724][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13200'. [ 393.532770][ T1757] loop5: detected capacity change from 0 to 2640 [ 393.535909][ T1757] buffer_io_error: 139 callbacks suppressed [ 393.535918][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.540264][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.552412][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.556075][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.557014][ T1760] Bluetooth: MGMT ver 1.23 [ 393.559513][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.572412][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.575281][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.592584][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.596391][ T1757] ldm_validate_partition_table(): Disk read failed. [ 393.599204][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.605273][ T1764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13213'. [ 393.614325][ T1757] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.618369][ T1757] Dev loop5: unable to read RDB block 0 [ 393.621206][ T1757] loop5: unable to read partition table [ 393.653731][ T1768] Invalid argument reading file caps for ./file0 [ 393.655711][ T1757] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 393.782784][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 393.963470][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 393.966620][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.970565][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.976638][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.979312][ T9] usb 5-1: Manufacturer: syz [ 393.983293][ T9] usb 5-1: config 0 descriptor?? [ 393.992468][ T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 394.042436][ T9] rc_core: IR keymap rc-hauppauge not found [ 394.044658][ T9] Registered IR keymap rc-empty [ 394.053001][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 394.061166][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input44 [ 394.066491][ T41] kauditd_printk_skb: 199 callbacks suppressed [ 394.066507][ T41] audit: type=1400 audit(906.979:43008): avc: denied { read } for pid=5327 comm="acpid" name="event3" dev="devtmpfs" ino=3703 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.082529][ T41] audit: type=1400 audit(906.979:43009): avc: denied { open } for pid=5327 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3703 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.097562][ T41] audit: type=1400 audit(906.979:43010): avc: denied { ioctl } for pid=5327 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3703 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.128811][ T41] audit: type=1400 audit(907.039:43011): avc: denied { name_bind } for pid=1791 comm="syz.4.13225" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 394.139604][ T41] audit: type=1400 audit(907.039:43012): avc: denied { node_bind } for pid=1791 comm="syz.4.13225" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 394.157346][ T10] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.169081][ T10] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 394.174125][ T10] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.177969][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.185160][ T1776] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 394.193862][ T10] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.206807][ T41] audit: type=1400 audit(907.119:43013): avc: denied { read } for pid=1793 comm="syz.4.13226" dev="nsfs" ino=4026533841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.226936][ T1794] Bluetooth: hci1: service_discovery: expected 36 bytes, got 7 bytes [ 394.234175][ T41] audit: type=1400 audit(907.119:43014): avc: denied { open } for pid=1793 comm="syz.4.13226" path="net:[4026533841]" dev="nsfs" ino=4026533841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.244614][T30263] usb 5-1: USB disconnect, device number 30 [ 394.262509][ T41] audit: type=1400 audit(907.119:43015): avc: denied { create } for pid=1793 comm="syz.4.13226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.269150][ T41] audit: type=1400 audit(907.139:43016): avc: denied { bind } for pid=1793 comm="syz.4.13226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.291421][ T41] audit: type=1400 audit(907.139:43017): avc: denied { write } for pid=1793 comm="syz.4.13226" path="socket:[116935]" dev="sockfs" ino=116935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.394625][ T10] usb 11-1: USB disconnect, device number 11 [ 395.050804][ T1830] netlink: 'syz.0.13243': attribute type 1 has an invalid length. [ 395.053844][ T1830] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13243'. [ 395.056799][ T1830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13243'. [ 395.060082][ T1830] netlink: 'syz.0.13243': attribute type 1 has an invalid length. [ 395.063500][ T1830] netlink: 634 bytes leftover after parsing attributes in process `syz.0.13243'. [ 395.160299][ T1842] netlink: 'syz.5.13249': attribute type 29 has an invalid length. [ 395.173371][ T1842] netlink: 'syz.5.13249': attribute type 29 has an invalid length. [ 395.187815][ T1842] netlink: 604 bytes leftover after parsing attributes in process `syz.5.13249'. [ 395.188884][ T1844] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 395.205235][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13250'. [ 395.219591][ T1846] ip6gretap0: entered promiscuous mode [ 395.222871][ T1846] macsec1: entered promiscuous mode [ 395.226236][ T1846] macsec1: entered allmulticast mode [ 395.229036][ T1846] ip6gretap0: entered allmulticast mode [ 395.254724][ T1846] ip6gretap0: left allmulticast mode [ 395.257904][ T1846] ip6gretap0: left promiscuous mode [ 395.386508][ T1861] netlink: 11 bytes leftover after parsing attributes in process `syz.0.13256'. [ 395.389506][ T1861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13256'. [ 395.392897][ T1861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13256'. [ 395.614885][ T1877] netlink: 'syz.6.13263': attribute type 11 has an invalid length. [ 395.618010][ T1877] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13263'. [ 395.781889][ T1889] : renamed from vlan0 (while UP) [ 395.822533][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 396.002620][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 396.016630][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 396.032419][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.036675][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.040740][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.052431][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.057894][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.061547][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.282821][ T24] usb 5-1: usb_control_msg returned -32 [ 396.287976][ T24] usbtmc 5-1:16.0: can't read capabilities [ 396.678324][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.828557][ T1918] netlink: 7 bytes leftover after parsing attributes in process `syz.6.13281'. [ 397.413387][ T1251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.417764][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.424897][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.732712][T17634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.808374][ T1938] netlink: 'syz.5.13290': attribute type 2 has an invalid length. [ 397.810993][ T1938] netlink: 'syz.5.13290': attribute type 2 has an invalid length. [ 398.053232][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.058838][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.063707][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.342729][ T830] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 398.492422][ T830] usb 11-1: Using ep0 maxpacket: 8 [ 398.504334][ T830] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.508237][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.512102][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.518164][ T830] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.523286][ T830] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.526880][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.602417][ T24] usb 5-1: USB disconnect, device number 31 [ 398.745573][ T830] usb 11-1: GET_CAPABILITIES returned 0 [ 398.747418][ T830] usbtmc 11-1:16.0: can't read capabilities [ 398.772968][T17634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.951840][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.956358][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.960845][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.964823][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.969136][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.976473][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.980778][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.984657][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.988639][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.996168][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.000568][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.006935][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.010877][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.015070][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.018492][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.021385][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.026878][T17634] usb 11-1: USB disconnect, device number 12 [ 399.556047][ T41] kauditd_printk_skb: 108 callbacks suppressed [ 399.556064][ T41] audit: type=1400 audit(912.469:43126): avc: denied { read write } for pid=31317 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.569551][ T41] audit: type=1400 audit(912.469:43127): avc: denied { open } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.581710][ T41] audit: type=1400 audit(912.469:43128): avc: denied { ioctl } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 399.595085][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.598519][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.601629][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.608323][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.611509][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.616358][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.717869][ T41] audit: type=1400 audit(912.629:43129): avc: denied { append } for pid=1968 comm="syz.0.13303" name="system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.766101][ T41] audit: type=1326 audit(912.679:43130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1968 comm="syz.0.13303" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36e9d9c799 code=0x0 [ 400.634773][ T41] audit: type=1400 audit(913.549:43131): avc: denied { create } for pid=1976 comm="syz.6.13306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.646903][ T41] audit: type=1400 audit(913.559:43132): avc: denied { ioctl } for pid=1976 comm="syz.6.13306" path="socket:[115323]" dev="sockfs" ino=115323 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.658847][ T41] audit: type=1400 audit(913.569:43133): avc: denied { read write } for pid=1980 comm="syz.0.13308" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 400.670440][ T41] audit: type=1400 audit(913.569:43134): avc: denied { mounton } for pid=1978 comm="syz.5.13307" path="/628/file0" dev="tmpfs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 400.681435][ T41] audit: type=1400 audit(913.569:43135): avc: denied { open } for pid=1980 comm="syz.0.13308" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 400.811451][ T1985] __nla_validate_parse: 1 callbacks suppressed [ 400.811464][ T1985] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.13309'. [ 401.518822][ T2018] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 402.160522][ T2048] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 403.074373][ T2075] net_ratelimit: 7 callbacks suppressed [ 403.074394][ T2075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.079512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.097019][ T2077] overlayfs: failed to clone lowerpath [ 403.440758][ T2096] overlayfs: failed to clone upperpath [ 403.445109][ T2096] overlayfs: failed to clone upperpath [ 403.502825][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.978268][T17634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.090154][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.098489][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.104620][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.109029][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.117623][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.121656][ T2114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.210584][ T2117] loop5: detected capacity change from 0 to 7 [ 404.216392][ T2117] Dev loop5: unable to read RDB block 7 [ 404.219016][ T2117] loop5: AHDI p1 p4 [ 404.221345][ T2117] loop5: partition table partially beyond EOD, truncated [ 404.225690][ T2117] loop5: p1 size 100663296 extends beyond EOD, truncated [ 404.279898][T32270] udevd[32270]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 404.646450][ T41] kauditd_printk_skb: 113 callbacks suppressed [ 404.646463][ T41] audit: type=1400 audit(917.559:43249): avc: denied { setopt } for pid=2135 comm="syz.6.13380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.672546][ T41] audit: type=1400 audit(917.559:43250): avc: denied { map_create } for pid=2137 comm="syz.0.13379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.681196][ T41] audit: type=1400 audit(917.559:43251): avc: denied { map_read map_write } for pid=2137 comm="syz.0.13379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.722577][ T41] audit: type=1400 audit(917.579:43252): avc: denied { prog_load } for pid=2137 comm="syz.0.13379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.818924][ T41] audit: type=1400 audit(917.729:43253): avc: denied { watch } for pid=2145 comm="syz.0.13384" path="/3306" dev="tmpfs" ino=16682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 404.884365][ T41] audit: type=1400 audit(917.799:43254): avc: denied { watch watch_reads } for pid=2147 comm="syz.0.13385" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 404.899913][ T41] audit: type=1400 audit(917.809:43255): avc: denied { prog_run } for pid=2150 comm="syz.5.13386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.922704][ T41] audit: type=1400 audit(917.809:43256): avc: denied { execute } for pid=2147 comm="syz.0.13385" dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 404.930189][ T41] audit: type=1400 audit(917.819:43257): avc: denied { execute_no_trans } for pid=2147 comm="syz.0.13385" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.003194][ T2153] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13387'. [ 405.187595][ T41] audit: type=1400 audit(918.099:43258): avc: denied { bpf } for pid=2160 comm="syz.0.13391" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.512981][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 405.662485][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 405.667990][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 405.671729][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.681188][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 405.684685][ T24] pvrusb2: ********** [ 405.686583][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 405.690734][ T24] pvrusb2: Important functionality might not be entirely working. [ 405.693947][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 405.697767][ T24] pvrusb2: ********** [ 405.891517][ T2494] pvrusb2: Invalid write control endpoint [ 405.977999][ T2494] pvrusb2: Invalid write control endpoint [ 405.980341][ T2494] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 405.985032][ T2494] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 405.987744][ T2494] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 405.996109][ T2494] pvrusb2: Device being rendered inoperable [ 406.000612][ T2494] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 406.005621][ T2494] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 406.012945][ T2494] pvrusb2: Attached sub-driver cx25840 [ 406.015235][ T2494] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 406.019265][ T2494] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 406.092917][ T6278] usb 5-1: USB disconnect, device number 32 [ 406.115843][ T2181] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.13400'. [ 406.259346][ T2187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13403'. [ 406.385270][ T2193] SELinux: ebitmap: empty map [ 406.387144][ T2193] SELinux: failed to load policy [ 406.478512][ T2201] syz_tun: entered allmulticast mode [ 406.483493][ T2201] syz_tun: left allmulticast mode [ 408.114851][ T2313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 408.134070][ T9] net_ratelimit: 5287 callbacks suppressed [ 408.134092][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.140313][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.172759][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.315191][ T2365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13484'. [ 409.668024][ T41] kauditd_printk_skb: 118 callbacks suppressed [ 409.668036][ T41] audit: type=1400 audit(922.579:43377): avc: denied { create } for pid=2377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.680415][ T41] audit: type=1400 audit(922.589:43378): avc: denied { ioctl } for pid=2377 comm="syz-executor" path="socket:[115663]" dev="sockfs" ino=115663 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.690639][ T1266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.706385][ T1266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.710572][ T1266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.715482][ T1266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.719290][ T1266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.738085][ T41] audit: type=1400 audit(922.639:43379): avc: denied { mounton } for pid=2377 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 409.772460][ T41] audit: type=1400 audit(922.679:43380): avc: denied { ioctl } for pid=2381 comm="syz.6.13491" path="socket:[116584]" dev="sockfs" ino=116584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.832402][ T41] audit: type=1400 audit(922.739:43381): avc: denied { recv } for pid=26282 comm="syz.4.9712" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50312 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 409.866688][ T41] audit: type=1400 audit(922.779:43382): avc: denied { bind } for pid=2390 comm="syz.6.13495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.873095][ T6197] Bluetooth: hci2: connection err: -111 [ 409.875044][ T41] audit: type=1400 audit(922.789:43383): avc: denied { listen } for pid=2390 comm="syz.6.13495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.948073][ T41] audit: type=1400 audit(922.859:43384): avc: denied { module_request } for pid=2377 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 409.970509][ T41] audit: type=1400 audit(922.879:43385): avc: denied { read write } for pid=31317 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.985706][ T2377] chnl_net:caif_netlink_parms(): no params data found [ 409.992279][ T41] audit: type=1400 audit(922.879:43386): avc: denied { open } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.046450][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.049885][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.053152][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.055961][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.059042][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.062513][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.065279][ T2402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 410.282447][ T54] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 410.436868][ T54] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 410.440673][ T54] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 410.445749][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.449589][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 410.453702][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 410.459519][ T54] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.462874][ T54] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.466191][ T54] usb 5-1: Product: syz [ 410.467650][ T54] usb 5-1: Manufacturer: syz [ 410.475184][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 410.476929][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 410.481585][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 410.484365][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 410.654589][ T2377] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.656999][ T2377] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.659555][ T2377] bridge_slave_0: entered allmulticast mode [ 410.663374][ T2377] bridge_slave_0: entered promiscuous mode [ 410.668027][ T2377] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.670330][ T2377] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.673118][ T2377] bridge_slave_1: entered allmulticast mode [ 410.676006][ T2377] bridge_slave_1: entered promiscuous mode [ 410.717830][ T2377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.725311][ T2377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.764259][ T2377] team0: Port device team_slave_0 added [ 410.769166][ T2377] team0: Port device team_slave_1 added [ 410.793606][ T2377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.796485][ T2377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.807531][ T2377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.815398][ T2377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.818408][ T2377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.828420][ T2377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.856191][ T2377] hsr_slave_0: entered promiscuous mode [ 410.858587][ T2377] hsr_slave_1: entered promiscuous mode [ 410.860673][ T2377] debugfs: 'hsr0' already exists in 'hsr' [ 410.862749][ T2377] Cannot create hsr debugfs directory [ 410.976558][ T2377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.981789][ T2377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.986988][ T2377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.994211][ T2377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 411.010367][ T2377] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.013100][ T2377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.015681][ T2377] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.018130][ T2377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.022918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.026328][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.085222][ T2377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.099247][ T2377] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.113483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.115804][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.119833][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.122957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.299525][ T2377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.348358][ T2462] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13518'. [ 411.446481][ T10] usb 5-1: USB disconnect, device number 33 [ 411.459465][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13520'. [ 411.471851][ T2377] veth0_vlan: entered promiscuous mode [ 411.486330][ T2377] veth1_vlan: entered promiscuous mode [ 411.522027][ T2377] veth0_macvtap: entered promiscuous mode [ 411.529909][ T2377] veth1_macvtap: entered promiscuous mode [ 411.547592][ T2377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.559513][ T2377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.568030][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.571424][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.574374][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.577999][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.642040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.647082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.666726][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.669810][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.822647][ T1266] Bluetooth: hci3: command tx timeout [ 412.276992][ T2512] kvm: MWAIT instruction emulated as NOP! [ 412.856282][ T2540] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13549'. [ 413.208211][ T2556] overlayfs: failed to clone upperpath [ 413.252718][ T6197] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 413.255334][ T1266] Bluetooth: hci4: command 0x1003 tx timeout [ 413.333060][ T39] net_ratelimit: 5275 callbacks suppressed [ 413.333076][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.417913][ T2572] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13561'. [ 413.761463][ T2596] SELinux: ebitmap start bit (4278255616) is beyond the end of the bitmap (320) [ 413.765526][ T2596] SELinux: failed to load policy [ 413.902469][ T6197] Bluetooth: hci3: command tx timeout [ 413.968332][ T2614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.021295][ T24] IPVS: starting estimator thread 0... [ 414.079492][ T2614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.091394][ T2621] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13578'. [ 414.096160][ T2621] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13578'. [ 414.100159][ T2621] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13578'. [ 414.104212][ T2621] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13578'. [ 414.132799][ T2618] IPVS: using max 44 ests per chain, 105600 per kthread [ 414.160196][ T2614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.216163][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.296830][ T2631] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13581'. [ 414.372578][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.434787][ T208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.445647][ T208] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.460460][ T2635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13583'. [ 414.460540][ T106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.474104][ T106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.675358][ T41] kauditd_printk_skb: 146 callbacks suppressed [ 414.675372][ T41] audit: type=1400 audit(927.589:43533): avc: denied { setopt } for pid=2650 comm="syz.5.13589" laddr=fe80::11 lport=53515 faddr=fe80::aa fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 414.695937][ T41] audit: type=1400 audit(927.609:43534): avc: denied { read } for pid=2652 comm="syz.0.13590" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.705631][ T41] audit: type=1400 audit(927.619:43535): avc: denied { open } for pid=2652 comm="syz.0.13590" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.715500][ T2653] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 414.741899][ T41] audit: type=1400 audit(927.629:43536): avc: denied { ioctl } for pid=2652 comm="syz.0.13590" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.753994][ T41] audit: type=1400 audit(927.639:43537): avc: denied { read write } for pid=31317 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.764216][ T41] audit: type=1400 audit(927.639:43538): avc: denied { open } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.776887][ T41] audit: type=1400 audit(927.639:43539): avc: denied { ioctl } for pid=31317 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.786722][ T41] audit: type=1400 audit(927.659:43540): avc: denied { prog_load } for pid=2654 comm="syz.5.13591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 414.806902][ T41] audit: type=1400 audit(927.719:43541): avc: denied { read append } for pid=2664 comm="syz.6.13595" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 414.819199][ T41] audit: type=1400 audit(927.719:43542): avc: denied { open } for pid=2664 comm="syz.6.13595" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 415.332719][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.414285][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.461048][ T1146] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.472592][ T13] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.475393][ T13] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.478021][ T13] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.626555][ T2759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 415.670163][ T2759] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 415.676084][ T2759] overlayfs: failed to look up (tracing) for ino (-66) [ 415.979608][ T6197] Bluetooth: hci3: command tx timeout [ 416.384441][ T2827] __nla_validate_parse: 3 callbacks suppressed [ 416.384454][ T2827] netlink: 260 bytes leftover after parsing attributes in process `syz.7.13656'. [ 416.465415][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.551485][ T2847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.622565][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.762443][ T6255] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 416.913853][ T6255] usb 5-1: Using ep0 maxpacket: 32 [ 416.917625][ T6255] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 416.920612][ T6255] usb 5-1: config 0 has no interface number 0 [ 416.923355][ T6255] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 416.927366][ T6255] usb 5-1: config 0 interface 196 has no altsetting 0 [ 416.933862][ T6255] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 416.936903][ T6255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.942410][ T6255] usb 5-1: Product: syz [ 416.943824][ T6255] usb 5-1: Manufacturer: syz [ 416.945354][ T6255] usb 5-1: SerialNumber: syz [ 416.948861][ T6255] usb 5-1: config 0 descriptor?? [ 416.951258][ T2845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.494127][T17634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.622404][ T2109] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 417.723082][ T6255] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 417.726059][ T6255] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 417.731261][ T6255] usb 5-1: USB disconnect, device number 34 [ 417.774505][ T2109] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 417.777987][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.792436][ T2109] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.798937][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.806314][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.812056][ T2109] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 417.816435][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.820120][ T2109] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.825109][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.829778][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.835841][ T2109] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 417.839123][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.843803][ T2109] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.848878][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.853954][ T2109] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.861716][ T2109] usb 12-1: string descriptor 0 read error: -22 [ 417.864436][ T2109] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.867363][ T2109] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.872841][T31589] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 417.876262][ T2109] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 417.912847][ T2918] netlink: 165 bytes leftover after parsing attributes in process `syz.5.13688'. [ 418.032805][T31589] usb 11-1: Using ep0 maxpacket: 8 [ 418.036620][T31589] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 418.039310][T31589] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.049601][T31589] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.053608][ T6197] Bluetooth: hci3: command tx timeout [ 418.057082][T31589] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.060470][T31589] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.065104][T31589] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.068224][T31589] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.150243][ T2931] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 418.374801][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.388131][ T2949] pimreg: entered allmulticast mode [ 418.514743][ T2954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13703'. [ 418.533312][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.645239][ T2967] syzkaller1: entered promiscuous mode [ 418.647085][ T2967] syzkaller1: entered allmulticast mode [ 419.572651][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.055411][ T41] kauditd_printk_skb: 119 callbacks suppressed [ 420.055423][ T41] audit: type=1400 audit(932.969:43662): avc: denied { read } for pid=3016 comm="syz.0.13722" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 420.066965][ T41] audit: type=1400 audit(932.979:43663): avc: denied { open } for pid=3016 comm="syz.0.13722" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 420.075169][ T41] audit: type=1400 audit(932.979:43664): avc: denied { ioctl } for pid=3016 comm="syz.0.13722" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 420.189129][ T3028] netlink: 'syz.5.13725': attribute type 4 has an invalid length. [ 420.361799][ T3039] could not open pipe file descriptor [ 420.392740][T31589] usb 12-1: USB disconnect, device number 2 [ 420.402886][ T41] audit: type=1400 audit(933.309:43665): avc: denied { read write } for pid=2377 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.452411][ T41] audit: type=1400 audit(933.309:43666): avc: denied { open } for pid=2377 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.477069][ T41] audit: type=1400 audit(933.309:43667): avc: denied { ioctl } for pid=2377 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.547234][ T41] audit: type=1400 audit(933.459:43668): avc: denied { module_request } for pid=3053 comm="syz.5.13736" kmod="netdev-pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 420.574470][ T41] audit: type=1400 audit(933.489:43669): avc: denied { sys_module } for pid=3053 comm="syz.5.13736" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 420.583396][ T41] audit: type=1400 audit(933.489:43670): avc: denied { recv } for pid=5912 comm="syz-executor" saddr=127.0.0.1 src=50312 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.614833][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.618488][ T41] audit: type=1400 audit(933.529:43671): avc: denied { create } for pid=3057 comm="syz.0.13737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.653543][ T6274] usb 11-1: USB disconnect, device number 13 [ 420.941117][ T3080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13746'. [ 421.422564][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.580711][ T3124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.583811][ T3124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.586950][ T3124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.589896][ T3124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.593473][ T3124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.876746][ C2] vcan0: j1939_tp_rxtimer: 0xffff888050a37400: rx timeout, send abort [ 421.881594][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888050a37400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 421.997327][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13782'. [ 422.173087][ T3174] netlink: 'syz.5.13791': attribute type 12 has an invalid length. [ 422.175900][ T3174] netlink: 'syz.5.13791': attribute type 29 has an invalid length. [ 422.179160][ T3174] netlink: 148 bytes leftover after parsing attributes in process `syz.5.13791'. [ 422.199252][ T3174] netlink: 'syz.5.13791': attribute type 2 has an invalid length. [ 422.205325][ T3174] netlink: 23 bytes leftover after parsing attributes in process `syz.5.13791'. [ 422.459630][ T3200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13803'. [ 422.471078][ T3200] netlink: 'syz.0.13803': attribute type 7 has an invalid length. [ 422.477781][ T3200] netlink: 'syz.0.13803': attribute type 8 has an invalid length. [ 422.481437][ T3200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13803'. [ 422.490101][ T3200] erspan0: entered promiscuous mode [ 422.492761][ T3200] gretap0: entered promiscuous mode [ 422.495421][ T3200] erspan0: left promiscuous mode [ 422.507058][ T3200] gretap0: left promiscuous mode [ 422.507377][ T3202] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 422.542587][ T6255] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 422.718311][ T6255] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 422.721801][ T6255] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 422.726029][ T6255] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 422.731324][ T6255] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 422.734694][ T6255] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.737413][ T6255] usb 11-1: Product: syz [ 422.738785][ T6255] usb 11-1: Manufacturer: syz [ 422.740357][ T6255] usb 11-1: SerialNumber: syz [ 422.747793][ T6255] usb 11-1: config 0 descriptor?? [ 422.960391][ T6255] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 423.164880][ T1344] usb 11-1: USB disconnect, device number 14 [ 423.452571][ T6255] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 423.613014][ T6255] usb 5-1: Using ep0 maxpacket: 8 [ 423.617642][ T6255] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.623849][ T6255] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.628214][ T6255] usb 5-1: config 0 interface 0 has no altsetting 0 [ 423.631095][ T6255] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 423.635414][ T6255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.646960][ T6255] usb 5-1: config 0 descriptor?? [ 423.733287][ T2109] net_ratelimit: 5 callbacks suppressed [ 423.733301][ T2109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.060369][ T6255] hid_parser_main: 28 callbacks suppressed [ 424.060385][ T6255] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 424.065792][ T6255] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 424.068156][ T6255] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 424.070500][ T6255] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 424.073594][ T6255] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 424.076296][ T6255] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 424.222676][ T2109] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 424.260335][ T6255] usb 5-1: USB disconnect, device number 35 [ 424.373381][ T2109] usb 12-1: Using ep0 maxpacket: 32 [ 424.376778][ T2109] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.381057][ T2109] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.387972][ T2109] usb 12-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 424.391961][ T2109] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.395901][ T2109] usb 12-1: Product: syz [ 424.398103][ T2109] usb 12-1: Manufacturer: syz [ 424.400762][ T2109] usb 12-1: SerialNumber: syz [ 424.406976][ T2109] usb 12-1: config 0 descriptor?? [ 424.462700][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.624250][ T2109] usb 12-1: USB disconnect, device number 3 [ 424.774715][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.990468][ T3307] syzkaller1: entered promiscuous mode [ 424.992569][ T3307] syzkaller1: entered allmulticast mode [ 425.086417][ T41] kauditd_printk_skb: 164 callbacks suppressed [ 425.086434][ T41] audit: type=1400 audit(937.999:43836): avc: denied { bind } for pid=3312 comm="syz.0.13853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.113169][ T41] audit: type=1400 audit(938.029:43837): avc: denied { setopt } for pid=3312 comm="syz.0.13853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.135584][ T41] audit: type=1400 audit(938.049:43838): avc: denied { read } for pid=3314 comm="syz.6.13854" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.144507][ T41] audit: type=1400 audit(938.049:43839): avc: denied { open } for pid=3314 comm="syz.6.13854" path="net:[4026533023]" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.155082][ T41] audit: type=1400 audit(938.049:43840): avc: denied { create } for pid=3314 comm="syz.6.13854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.165005][ T41] audit: type=1400 audit(938.059:43841): avc: denied { bind } for pid=3314 comm="syz.6.13854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.174161][ T41] audit: type=1400 audit(938.069:43842): avc: denied { write } for pid=3314 comm="syz.6.13854" path="socket:[120664]" dev="sockfs" ino=120664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.184521][ T3319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13856'. [ 425.188772][ T3319] netlink: 'syz.6.13856': attribute type 30 has an invalid length. [ 425.240880][ T3323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13856'. [ 425.244008][ T3323] netlink: 'syz.6.13856': attribute type 30 has an invalid length. [ 425.304850][ T41] audit: type=1400 audit(938.219:43843): avc: denied { module_request } for pid=3324 comm="syz.0.13858" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 425.338117][ T41] audit: type=1400 audit(938.249:43844): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50312 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 425.348996][ T41] audit: type=1400 audit(938.249:43845): avc: denied { sys_module } for pid=3324 comm="syz.0.13858" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 425.814323][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.026447][ T3385] binder_alloc: binder_alloc_mmap_handler: 3384 200000ff9000-200000ffb000 already mapped failed -16 [ 426.214946][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.265601][ T6278] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 426.413698][ T6278] usb 5-1: Using ep0 maxpacket: 8 [ 426.418913][ T6278] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.424748][ T6278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.429157][ T6278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.433792][ T6278] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.439559][ T6278] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.443850][ T6278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.655939][ T6278] usb 5-1: GET_CAPABILITIES returned 0 [ 426.658284][ T6278] usbtmc 5-1:16.0: can't read capabilities [ 426.861900][ T2109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.864076][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 426.869256][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 426.873195][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 426.893785][ T6278] usb 5-1: USB disconnect, device number 36 [ 427.012734][ T6274] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 427.129366][ T3433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13903'. [ 427.132549][ T3433] netlink: 'syz.5.13903': attribute type 5 has an invalid length. [ 427.135386][ T3433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13903'. [ 427.140081][ T3433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13903'. [ 427.143930][ T3433] netlink: 'syz.5.13903': attribute type 5 has an invalid length. [ 427.146756][ T3433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13903'. [ 427.162397][ T6274] usb 12-1: Using ep0 maxpacket: 8 [ 427.173517][ T6274] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.177653][ T6274] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.181752][ T6274] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.188888][ T6274] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.195765][ T6274] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.198648][ T6274] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.411827][ T6274] usb 12-1: GET_CAPABILITIES returned 0 [ 427.416443][ T6274] usbtmc 12-1:16.0: can't read capabilities [ 427.503735][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.622014][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.625181][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.628874][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.632392][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.635596][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.640140][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.643648][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.647727][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.651077][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.657991][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.661361][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.664501][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.667796][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.671604][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.675483][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.685754][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.690848][ T6274] usb 12-1: USB disconnect, device number 4 [ 427.694751][ T3457] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13913'. [ 427.904507][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.008926][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13921'. [ 428.013154][ T3472] netlink: 'syz.0.13921': attribute type 30 has an invalid length. [ 428.016668][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13920'. [ 428.021676][ T106] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.026058][ T106] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.029239][ T106] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.032296][ T106] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.034654][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13921'. [ 428.039512][ T3472] netlink: 'syz.0.13921': attribute type 30 has an invalid length. [ 428.065430][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.069177][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.153709][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13925'. [ 428.156996][ T3482] netlink: 'syz.0.13925': attribute type 21 has an invalid length. [ 428.196113][ T3484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.210331][ T3484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.218789][ T3484] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 428.283204][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.286643][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.289805][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.293682][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.442519][T17634] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 428.612399][T17634] usb 5-1: Using ep0 maxpacket: 16 [ 428.615646][T17634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.623444][T17634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.630057][T17634] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.635107][T17634] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 428.638351][T17634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.644556][T17634] usb 5-1: config 0 descriptor?? [ 428.934375][ T2109] net_ratelimit: 5 callbacks suppressed [ 428.934387][ T2109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.950910][ T3561] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 429.015617][ T3569] team0: Device vlan2 is already an upper device of the team interface [ 429.058020][T17634] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input47 [ 429.063042][ T3572] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13952'. [ 429.095009][ T3576] overlayfs: failed to clone upperpath [ 429.129824][T17634] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 429.129879][ T3578] netlink: 'syz.5.13956': attribute type 21 has an invalid length. [ 429.160094][ T3578] netlink: 'syz.5.13956': attribute type 21 has an invalid length. [ 429.213490][ T3583] Invalid ELF header magic: != ELF [ 429.254123][ T24] usb 5-1: USB disconnect, device number 37 [ 429.565598][ T3617] bond1: option downdelay: invalid value (18446744073709551615) [ 429.569229][ T3617] bond1: option downdelay: allowed values 0 - 2147483647 [ 429.574859][ T3617] bond1 (unregistering): Released all slaves [ 429.782466][ T1344] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 429.952528][ T1344] usb 12-1: Using ep0 maxpacket: 32 [ 429.959087][ T1344] usb 12-1: unable to get BOS descriptor or descriptor too short [ 429.965041][ T1344] usb 12-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice= 0.40 [ 429.968438][ T1344] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.971017][ T1344] usb 12-1: Product: syz [ 429.972691][ T2109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.976846][ T1344] usb 12-1: Manufacturer: syz [ 429.978671][ T1344] usb 12-1: SerialNumber: syz [ 430.021722][ T3642] sctp: [Deprecated]: syz.0.13983 (pid 3642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.021722][ T3642] Use struct sctp_sack_info instead [ 430.191987][ T41] kauditd_printk_skb: 218 callbacks suppressed [ 430.192060][ T41] audit: type=1400 audit(943.099:44064): avc: denied { create } for pid=3614 comm="syz.7.13967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 430.217610][ T1344] usb 12-1: Audio class v2/v3 interfaces need an interface association [ 430.236890][ T1344] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.244657][ T1344] usb 12-1: USB disconnect, device number 5 [ 430.258848][T32270] udevd[32270]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.319730][ T41] audit: type=1400 audit(943.229:44065): avc: denied { write } for pid=3647 comm="syz.6.13994" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 430.333261][ T41] audit: type=1400 audit(943.229:44066): avc: denied { open } for pid=3647 comm="syz.6.13994" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 430.340403][ T41] audit: type=1400 audit(943.229:44067): avc: denied { ioctl } for pid=3647 comm="syz.6.13994" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 430.354798][ T41] audit: type=1400 audit(943.259:44068): avc: denied { create } for pid=3650 comm="syz.5.13986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.361207][ T41] audit: type=1400 audit(943.269:44069): avc: denied { setopt } for pid=3650 comm="syz.5.13986" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.393742][ T41] audit: type=1400 audit(943.309:44070): avc: denied { map } for pid=3649 comm="syz.7.13987" path="socket:[125065]" dev="sockfs" ino=125065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 430.401144][ T41] audit: type=1400 audit(943.309:44071): avc: denied { read } for pid=3649 comm="syz.7.13987" path="socket:[125065]" dev="sockfs" ino=125065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 430.536663][ T41] audit: type=1400 audit(943.449:44072): avc: denied { create } for pid=3663 comm="syz.6.13996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.543126][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.547115][ T41] audit: type=1400 audit(943.459:44073): avc: denied { ioctl } for pid=3663 comm="syz.6.13996" path="socket:[124251]" dev="sockfs" ino=124251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 431.022617][ T2109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.151542][ T3737] netlink: 'syz.5.14028': attribute type 4 has an invalid length. [ 431.518344][ T3772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.522850][ T3772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.526830][ T3772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.530897][ T3772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.536652][ T3772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.541793][ T3770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.663520][ T54] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 431.814498][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 431.823034][ T54] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.826950][ T54] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.830392][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 431.832753][ T54] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 431.835726][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.840267][ T54] usb 5-1: config 0 descriptor?? [ 431.952274][ T3787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.956101][ T3787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.958195][ T3787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.960162][ T3787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 431.963348][ T3787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.029701][ C3] ------------[ cut here ]------------ [ 432.032072][ C3] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 432.036271][ C3] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#3: swapper/3/0 [ 432.040542][ C3] Modules linked in: [ 432.042536][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.046807][ C3] Tainted: [L]=SOFTLOCKUP [ 432.048557][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.052637][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 432.055369][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 47 76 02 f7 48 8d 3d 00 ec e3 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 04 6f f7 e9 03 [ 432.063518][ C3] RSP: 0018:ffffc900006f8890 EFLAGS: 00010246 [ 432.066198][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 432.069968][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea5700 [ 432.073418][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 432.076698][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803480c8e8 [ 432.080218][ C3] R13: ffff88805f663168 R14: 0000000000000000 R15: dffffc0000000000 [ 432.083642][ C3] FS: 0000000000000000(0000) GS:ffff8880d663f000(0000) knlGS:0000000000000000 [ 432.087062][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.089230][ C3] CR2: 0000555569175a28 CR3: 000000002accd000 CR4: 0000000000352ef0 [ 432.091793][ C3] Call Trace: [ 432.093050][ C3] [ 432.094188][ C3] rate_control_send_low+0x2a8/0x7e0 [ 432.096022][ C3] rate_control_get_rate+0x1be/0x5c0 [ 432.098004][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 432.100198][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 432.102576][ C3] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 432.104706][ C3] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 432.106620][ C3] ? rcu_is_watching+0x12/0xc0 [ 432.108076][ C3] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 432.109861][ C3] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 432.111692][ C3] ? __lock_acquire+0x4a5/0x2630 [ 432.113536][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 432.115444][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 432.117454][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 432.119252][ C3] __iterate_interfaces+0x2e6/0x650 [ 432.121014][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.123074][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.125121][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 432.127472][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 432.129577][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 432.131432][ C3] __hrtimer_run_queues+0x50e/0xa70 [ 432.133167][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.134957][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 432.136898][ C3] hrtimer_run_softirq+0x17d/0x350 [ 432.138477][ C3] handle_softirqs+0x1eb/0x9e0 [ 432.140025][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 432.141759][ C3] __irq_exit_rcu+0xef/0x150 [ 432.143379][ C3] irq_exit_rcu+0x9/0x30 [ 432.144781][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 432.146644][ C3] [ 432.147840][ C3] [ 432.148780][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.150696][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 432.152534][ C3] Code: 38 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 01 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 432.158678][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000206 [ 432.160628][ C3] RAX: 0000000000242121 RBX: ffff88801eafa4c0 RCX: ffffffff8b908c75 [ 432.163432][ C3] RDX: 0000000000000000 RSI: ffffffff8de788a7 RDI: ffffffff8c1b1220 [ 432.165982][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4e679d [ 432.168535][ C3] R10: ffff88806a733ceb R11: 0000000000000000 R12: 0000000000000003 [ 432.171089][ C3] R13: ffffed1003d5f498 R14: 0000000000000003 R15: ffffffff90d9ad10 [ 432.173975][ C3] ? ct_kernel_exit+0x125/0x180 [ 432.175604][ C3] default_idle+0x9/0x10 [ 432.177041][ C3] default_idle_call+0x6c/0xb0 [ 432.178554][ C3] do_idle+0x464/0x590 [ 432.179885][ C3] ? __pfx_do_idle+0x10/0x10 [ 432.181382][ C3] cpu_startup_entry+0x4f/0x60 [ 432.183051][ C3] start_secondary+0x21d/0x2d0 [ 432.184607][ C3] ? __pfx_start_secondary+0x10/0x10 [ 432.186339][ C3] common_startup_64+0x13e/0x148 [ 432.188043][ C3] [ 432.189082][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.191391][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.194708][ C3] Tainted: [L]=SOFTLOCKUP [ 432.196128][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.199320][ C3] Call Trace: [ 432.200456][ C3] [ 432.201376][ C3] dump_stack_lvl+0x100/0x190 [ 432.202955][ C3] vpanic+0x552/0x970 [ 432.204465][ C3] ? __pfx_vpanic+0x10/0x10 [ 432.205889][ C3] panic+0xd1/0xe0 [ 432.207130][ C3] ? __pfx_panic+0x10/0x10 [ 432.208563][ C3] ? check_panic_on_warn+0x1f/0x90 [ 432.210215][ C3] check_panic_on_warn.cold+0x19/0x34 [ 432.211924][ C3] ? __rate_control_send_low+0x610/0x760 [ 432.213724][ C3] __warn.cold+0x191/0x348 [ 432.215198][ C3] __report_bug+0x296/0x3d0 [ 432.216688][ C3] ? __rate_control_send_low+0x610/0x760 [ 432.218419][ C3] ? __pfx___report_bug+0x10/0x10 [ 432.220078][ C3] ? rcu_is_watching+0x12/0xc0 [ 432.221636][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.223789][ C3] report_bug_entry+0xe1/0x290 [ 432.225408][ C3] ? __rate_control_send_low+0x621/0x760 [ 432.227196][ C3] handle_bug+0x1cd/0x2a0 [ 432.228640][ C3] exc_invalid_op+0x17/0x50 [ 432.230256][ C3] asm_exc_invalid_op+0x1a/0x20 [ 432.231981][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 432.234027][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 47 76 02 f7 48 8d 3d 00 ec e3 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 04 6f f7 e9 03 [ 432.241303][ C3] RSP: 0018:ffffc900006f8890 EFLAGS: 00010246 [ 432.243566][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 432.246061][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea5700 [ 432.248583][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 432.251099][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803480c8e8 [ 432.253655][ C3] R13: ffff88805f663168 R14: 0000000000000000 R15: dffffc0000000000 [ 432.256222][ C3] rate_control_send_low+0x2a8/0x7e0 [ 432.257964][ C3] rate_control_get_rate+0x1be/0x5c0 [ 432.259662][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 432.261557][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 432.263561][ C3] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 432.265460][ C3] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 432.267360][ C3] ? rcu_is_watching+0x12/0xc0 [ 432.268938][ C3] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 432.270787][ C3] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 432.272607][ C3] ? __lock_acquire+0x4a5/0x2630 [ 432.274202][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 432.275962][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 432.277959][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 432.279738][ C3] __iterate_interfaces+0x2e6/0x650 [ 432.281421][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.283341][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.285252][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 432.287575][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 432.289429][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 432.291475][ C3] __hrtimer_run_queues+0x50e/0xa70 [ 432.293224][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.295072][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 432.297046][ C3] hrtimer_run_softirq+0x17d/0x350 [ 432.298687][ C3] handle_softirqs+0x1eb/0x9e0 [ 432.300333][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 432.302199][ C3] __irq_exit_rcu+0xef/0x150 [ 432.303789][ C3] irq_exit_rcu+0x9/0x30 [ 432.305220][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 432.307059][ C3] [ 432.308026][ C3] [ 432.308980][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.311109][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 432.312955][ C3] Code: 38 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 01 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 432.319183][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000206 [ 432.321154][ C3] RAX: 0000000000242121 RBX: ffff88801eafa4c0 RCX: ffffffff8b908c75 [ 432.323691][ C3] RDX: 0000000000000000 RSI: ffffffff8de788a7 RDI: ffffffff8c1b1220 [ 432.326225][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4e679d [ 432.328752][ C3] R10: ffff88806a733ceb R11: 0000000000000000 R12: 0000000000000003 [ 432.331257][ C3] R13: ffffed1003d5f498 R14: 0000000000000003 R15: ffffffff90d9ad10 [ 432.334036][ C3] ? ct_kernel_exit+0x125/0x180 [ 432.335637][ C3] default_idle+0x9/0x10 [ 432.337018][ C3] default_idle_call+0x6c/0xb0 [ 432.338534][ C3] do_idle+0x464/0x590 [ 432.339869][ C3] ? __pfx_do_idle+0x10/0x10 [ 432.341379][ C3] cpu_startup_entry+0x4f/0x60 [ 432.342949][ C3] start_secondary+0x21d/0x2d0 [ 432.344497][ C3] ? __pfx_start_secondary+0x10/0x10 [ 432.346217][ C3] common_startup_64+0x13e/0x148 [ 432.347792][ C3] [ 432.349547][ C3] Kernel Offset: disabled [ 432.350874][ C3] Rebooting in 86400 seconds..