last executing test programs: 6m36.529300478s ago: executing program 0 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 6m36.52635934s ago: executing program 0 (id=2360): r0 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 6m36.448546439s ago: executing program 0 (id=2363): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') 6m36.430814866s ago: executing program 0 (id=2366): r0 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) 6m36.379011485s ago: executing program 0 (id=2368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 6m36.378031036s ago: executing program 0 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x813, 0x0, "e27353083536"}}) 6m20.307454204s ago: executing program 32 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x813, 0x0, "e27353083536"}}) 3m58.351852108s ago: executing program 1 (id=10600): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) setreuid(0xee00, 0xee00) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1) 3m58.314547448s ago: executing program 1 (id=10602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r1, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) 3m58.312675349s ago: executing program 1 (id=10603): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5457, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) 3m58.235710881s ago: executing program 1 (id=10604): semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x0, 0xc00}, {0x4}], 0x2) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) 3m58.185176741s ago: executing program 1 (id=10606): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 3m58.178028757s ago: executing program 1 (id=10608): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 3m40.283776298s ago: executing program 33 (id=10608): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 1m29.755208058s ago: executing program 5 (id=12021): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) llistxattr(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) 1m28.856678662s ago: executing program 5 (id=12057): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1m28.760676192s ago: executing program 5 (id=12060): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000001b40)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 1m28.760429683s ago: executing program 5 (id=12062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETDEBUG(r0, 0x400454ce, 0x0) 1m28.705485672s ago: executing program 5 (id=12066): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m28.642037823s ago: executing program 5 (id=12068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) 1m12.534850525s ago: executing program 34 (id=12068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) 52.665693281s ago: executing program 6 (id=13074): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000f90000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x50}}], 0x1, 0xc080) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 52.665371762s ago: executing program 6 (id=13075): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x400000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0x58}}, 0x0) 52.665087611s ago: executing program 6 (id=13077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x37, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x29, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xeb}, {"9b"}}}}}}, 0x0) 52.643808409s ago: executing program 6 (id=13078): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 52.580329899s ago: executing program 6 (id=13079): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0xa9, 0x8000c5f) 51.982459906s ago: executing program 6 (id=13081): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00002fb000/0x4000)=nil, 0x400000, 0x2, 0x2}) 51.91898727s ago: executing program 35 (id=13081): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00002fb000/0x4000)=nil, 0x400000, 0x2, 0x2}) 23.063259494s ago: executing program 2 (id=13890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 22.183220095s ago: executing program 2 (id=13913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f5, 0x0, 0x3}]}) 22.093260732s ago: executing program 2 (id=13916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 22.028311705s ago: executing program 2 (id=13917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 22.027707714s ago: executing program 2 (id=13920): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f00000003c0)=[{0x4, 0x6000, 0x0, 0x0}, {0x100, 0x210, 0x0, 0x0}], 0x2}) 21.657511095s ago: executing program 2 (id=13921): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005e80)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x7a40}, {0xff, 0x0, 0x6, 0x96a}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x4, 0x6, 0x3}}}]}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x84}}, 0x24040084) 21.572147488s ago: executing program 36 (id=13921): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005e80)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x7a40}, {0xff, 0x0, 0x6, 0x96a}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x4, 0x6, 0x3}}}]}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x84}}, 0x24040084) 1.087623539s ago: executing program 8 (id=14394): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0xfffd}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x18, 0x1409, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x46004}, 0xc080) 1.00650397s ago: executing program 8 (id=14395): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x2, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 1.006294896s ago: executing program 8 (id=14396): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000001d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait(r0, &(0x7f0000000780)=[{}], 0x1, 0x12, 0x0, 0x0) 932.661203ms ago: executing program 8 (id=14398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) 932.506298ms ago: executing program 8 (id=14399): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x53065000, 0x0, 0x0, 0x0, 0x0, 0x0) 869.010332ms ago: executing program 8 (id=14404): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 783.554789ms ago: executing program 7 (id=14406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 758.592463ms ago: executing program 7 (id=14407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r1, 0x0, 0x0) 686.908835ms ago: executing program 7 (id=14408): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0x803}, 0x0, 0x1, 0x5c4e}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x7fff}) 686.654818ms ago: executing program 7 (id=14409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) 599.603565ms ago: executing program 7 (id=14410): mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x204001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x1, 0x10004}, 0xc) 599.29385ms ago: executing program 7 (id=14411): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 391.6871ms ago: executing program 4 (id=14414): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0xf) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 273.051815ms ago: executing program 4 (id=14418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x809}, {0x1ff, 0xffffffffa, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0xbc2536767ff1cec3, 0x1}, {{@in=@private=0xa010100, 0x1, 0x32}, 0xa, @in=@local, 0x3506, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 272.819723ms ago: executing program 3 (id=14419): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c30074e800000800c4"], 0x2c}}, 0x0) 272.04772ms ago: executing program 4 (id=14420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x5c}}, 0x0) 268.628773ms ago: executing program 3 (id=14421): r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 184.261067ms ago: executing program 3 (id=14422): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r1) 184.061192ms ago: executing program 3 (id=14423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) 137.023572ms ago: executing program 4 (id=14424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 75.445984ms ago: executing program 4 (id=14425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) close(0x3) 74.781807ms ago: executing program 4 (id=14426): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 366.964µs ago: executing program 3 (id=14427): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) 0s ago: executing program 3 (id=14428): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): _slave_1) entered blocking state [ 415.420806][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.423039][ T3698] bridge_slave_1: entered allmulticast mode [ 415.425733][ T3698] bridge_slave_1: entered promiscuous mode [ 415.439785][ T1328] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 415.440377][ T3698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.442219][ T1328] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 415.446379][ T3698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.447886][ T1328] usb 9-1: config 0 interface 0 has no altsetting 0 [ 415.458286][ T1328] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 415.462835][ T1328] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 415.464905][ T3698] team0: Port device team_slave_0 added [ 415.465297][ T1328] usb 9-1: Product: syz [ 415.468395][ T1328] usb 9-1: Manufacturer: syz [ 415.468703][ T3698] team0: Port device team_slave_1 added [ 415.470297][ T1328] usb 9-1: SerialNumber: syz [ 415.472178][ T1328] usb 9-1: config 0 descriptor?? [ 415.479263][ T1328] hub 9-1:0.0: bad descriptor, ignoring hub [ 415.481557][ T1328] hub 9-1:0.0: probe with driver hub failed with error -5 [ 415.485186][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.485764][ T1328] usb 9-1: selecting invalid altsetting 0 [ 415.487370][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.497863][ T3698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.502674][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.504894][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.513721][ T3698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.561508][ T3698] hsr_slave_0: entered promiscuous mode [ 415.564542][ T3698] hsr_slave_1: entered promiscuous mode [ 415.568032][ T3698] debugfs: 'hsr0' already exists in 'hsr' [ 415.569804][ T3698] Cannot create hsr debugfs directory [ 415.676076][ T3698] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.680072][ T3698] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 415.684069][ T3698] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.687962][ T3698] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.702984][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.705282][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.707655][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.710047][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.976485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.982261][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.997271][ T221] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.012460][ T3698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.021399][ T3698] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.028398][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.031198][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.038488][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.041267][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.046802][ T221] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.112756][ T221] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.168347][ T3698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.178153][ T221] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.294775][ T3698] veth0_vlan: entered promiscuous mode [ 416.301205][ T3698] veth1_vlan: entered promiscuous mode [ 416.364646][ T3698] veth0_macvtap: entered promiscuous mode [ 416.367759][ T221] bridge_slave_1: left allmulticast mode [ 416.370716][ T221] bridge_slave_1: left promiscuous mode [ 416.373023][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.377860][ T221] bridge_slave_0: left allmulticast mode [ 416.380554][ T221] bridge_slave_0: left promiscuous mode [ 416.382826][ T221] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.445154][ T6008] usb 9-1: USB disconnect, device number 17 [ 416.526211][ T221] gretap0 (unregistering): left promiscuous mode [ 416.603652][ T6008] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 416.612572][ T221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.660148][ T221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.704686][ T221] bond0 (unregistering): Released all slaves [ 416.708798][ T4070] netlink: 'syz.3.12504': attribute type 11 has an invalid length. [ 416.710373][ T221] bond1 (unregistering): Released all slaves [ 416.730689][ T3698] veth1_macvtap: entered promiscuous mode [ 416.786856][ T6008] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 416.790381][ T6008] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 416.794833][ T6008] usb 9-1: config 0 interface 0 has no altsetting 0 [ 416.817240][ T6008] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.826024][ T6008] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 416.832440][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.833386][ T6008] usb 9-1: Product: syz [ 416.836055][ T6008] usb 9-1: Manufacturer: syz [ 416.837498][ T6008] usb 9-1: SerialNumber: syz [ 416.839488][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.843805][ T6008] usb 9-1: config 0 descriptor?? [ 416.848742][ T6008] hub 9-1:0.0: bad descriptor, ignoring hub [ 416.850874][ T6008] hub 9-1:0.0: probe with driver hub failed with error -5 [ 416.853798][ T73] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.854631][ T6008] usb 9-1: selecting invalid altsetting 0 [ 416.856518][ T73] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.866988][ T73] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.871224][ T73] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.932949][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.944426][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.960948][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.963350][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.184273][ T10] usb 9-1: USB disconnect, device number 18 [ 417.367995][ T221] veth0_to_team: left promiscuous mode [ 417.376903][ T221] hsr_slave_0: left promiscuous mode [ 417.379139][ T221] hsr_slave_1: left promiscuous mode [ 417.381289][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.383500][ T221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.388818][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.391172][ T221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.397993][ T221] veth1_macvtap: left promiscuous mode [ 417.399719][ T221] veth0_macvtap: left promiscuous mode [ 417.401384][ T221] veth1_vlan: left promiscuous mode [ 417.403047][ T221] veth0_vlan: left promiscuous mode [ 417.428341][ T6143] Bluetooth: hci3: command tx timeout [ 417.517725][ T221] team0 (unregistering): Port device team_slave_1 removed [ 417.525260][ T221] team0 (unregistering): Port device team_slave_0 removed [ 417.707419][ T4193] IPv6: NLM_F_REPLACE set, but no existing node found! [ 417.888111][ T4221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12530'. [ 417.921407][ T4227] loop6: detected capacity change from 0 to 524288000 [ 417.983931][ T4227] support for cryptoloop has been removed. Use dm-crypt instead. [ 418.190822][ T4276] netlink: 'syz.4.12551': attribute type 4 has an invalid length. [ 418.286934][ T4296] netlink: 'syz.3.12558': attribute type 1 has an invalid length. [ 418.384138][ T4318] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12565'. [ 418.426373][ T4323] xfrm0 speed is unknown, defaulting to 1000 [ 418.885479][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12591'. [ 418.891648][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12591'. [ 418.906305][ T6143] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 418.928025][ T4423] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 419.027613][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12600'. [ 419.030363][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12600'. [ 419.171840][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12610'. [ 419.175195][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12610'. [ 419.250483][ T4480] loop5: detected capacity change from 0 to 7 [ 419.255463][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.258434][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.261071][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.263979][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.268380][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.271282][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.273783][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.277068][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.279643][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.282557][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.285163][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.288148][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.290772][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.294184][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.297149][ T1363] ldm_validate_partition_table(): Disk read failed. [ 419.299397][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.302560][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.305310][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.308168][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 419.311631][ T1363] Dev loop5: unable to read RDB block 0 [ 419.354628][ T4483] loop5: detected capacity change from 7 to 0 [ 419.357016][ T1363] loop5: unable to read partition table [ 419.359015][ T1363] loop5: partition table beyond EOD, truncated [ 419.502671][ T39] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 419.652469][ T6143] Bluetooth: hci3: command tx timeout [ 419.685764][ T39] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.688673][ T39] usb 9-1: config 0 has no interface number 0 [ 419.690663][ T39] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.693909][ T39] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 419.697430][ T39] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 419.700961][ T39] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 419.704324][ T39] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 419.708462][ T6008] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 419.710897][ T39] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.715179][ T39] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 419.718390][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.722790][ T39] usb 9-1: config 0 descriptor?? [ 419.724888][ T4477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 419.727688][ T4477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 419.731771][ T39] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.834383][ T4534] loop6: detected capacity change from 0 to 524287999 [ 419.837726][ T1363] ldm_validate_partition_table(): Disk read failed. [ 419.839921][ T1363] Dev loop6: unable to read RDB block 0 [ 419.841969][ T1363] loop6: unable to read partition table [ 419.851441][ T4534] ldm_validate_partition_table(): Disk read failed. [ 419.853944][ T4534] Dev loop6: unable to read RDB block 0 [ 419.855876][ T4534] loop6: unable to read partition table [ 419.857677][ T4534] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 419.887726][ T6008] usb 11-1: Using ep0 maxpacket: 8 [ 419.890607][ T6008] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 419.893327][ T6008] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.900768][ T6008] pvrusb2: Hardware description: Terratec Grabster AV400 [ 419.902930][ T6008] pvrusb2: ********** [ 419.904175][ T6008] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 419.907376][ T6008] pvrusb2: Important functionality might not be entirely working. [ 419.910864][ T4534] ldm_validate_partition_table(): Disk read failed. [ 419.911427][ T6008] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 419.913050][ T4534] Dev loop6: unable to read RDB block 0 [ 419.916408][ T6008] pvrusb2: ********** [ 419.919989][ T4534] loop6: unable to read partition table [ 419.921963][ T4534] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 419.947432][ T4477] ldusb 9-1:0.55: Write buffer overflow, 1 bytes dropped [ 419.953169][ T39] usb 9-1: USB disconnect, device number 19 [ 419.963402][ T39] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 420.116769][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 420.116782][ T40] audit: type=1400 audit(653.157:56199): avc: denied { ioctl } for pid=4502 comm="syz.6.12621" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.117048][ T2485] pvrusb2: Invalid write control endpoint [ 420.154193][ T40] audit: type=1400 audit(653.185:56200): avc: denied { module_request } for pid=4582 comm="syz.2.12650" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 420.159997][ T2485] pvrusb2: Invalid write control endpoint [ 420.162622][ T2485] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 420.165769][ T2485] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 420.168267][ T2485] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 420.171378][ T2485] pvrusb2: Device being rendered inoperable [ 420.173327][ T2485] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 420.176859][ T2485] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 420.181834][ T2485] pvrusb2: Attached sub-driver cx25840 [ 420.183608][ T2485] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 420.186840][ T2485] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 420.187351][ T40] audit: type=1400 audit(653.213:56201): avc: denied { sys_module } for pid=4582 comm="syz.2.12650" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 420.196045][ T40] audit: type=1400 audit(653.222:56202): avc: denied { create } for pid=4589 comm="syz.3.12645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.203168][ T40] audit: type=1400 audit(653.222:56203): avc: denied { write } for pid=4589 comm="syz.3.12645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.210554][ T40] audit: type=1400 audit(653.222:56204): avc: denied { nlmsg_write } for pid=4589 comm="syz.3.12645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.228460][ T40] audit: type=1400 audit(653.260:56205): avc: denied { create } for pid=4594 comm="syz.2.12647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.234642][ T40] audit: type=1400 audit(653.269:56206): avc: denied { ioctl } for pid=4594 comm="syz.2.12647" path="socket:[109336]" dev="sockfs" ino=109336 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.235293][ T4595] netem: unknown loss type 0 [ 420.245650][ T4595] netem: change failed [ 420.250040][ T40] audit: type=1400 audit(653.279:56207): avc: denied { name_bind } for pid=4596 comm="syz.3.12648" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 420.257895][ T40] audit: type=1400 audit(653.279:56208): avc: denied { node_bind } for pid=4596 comm="syz.3.12648" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 420.333445][ T4602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.333801][ T10] usb 11-1: USB disconnect, device number 2 [ 420.577519][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12658'. [ 420.581427][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12658'. [ 420.955811][ T4657] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 421.874109][ T4715] xt_hashlimit: size too large, truncated to 1048576 [ 421.877757][ T6156] Bluetooth: hci3: command tx timeout [ 422.181670][ T4756] loop9: detected capacity change from 0 to 7 [ 422.187155][ C3] blk_print_req_error: 3 callbacks suppressed [ 422.187167][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.192328][ C3] buffer_io_error: 53 callbacks suppressed [ 422.192339][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.197700][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.200893][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.203441][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.206399][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.210491][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.213686][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.216325][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.219292][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.226289][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12703'. [ 422.229270][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.232237][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.234821][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.237727][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.240300][ T1363] ldm_validate_partition_table(): Disk read failed. [ 422.247851][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.250886][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.254046][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.257005][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.259864][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.262816][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.265683][ T1363] Dev loop9: unable to read RDB block 0 [ 422.269009][ T1363] loop9: unable to read partition table [ 422.270806][ T1363] loop9: partition table beyond EOD, truncated [ 422.276151][ T4756] ldm_validate_partition_table(): Disk read failed. [ 422.280620][ T4756] Dev loop9: unable to read RDB block 0 [ 422.283591][ T4756] loop9: unable to read partition table [ 422.286163][ T4756] loop9: partition table beyond EOD, truncated [ 422.288778][ T4756] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 422.330274][ T4773] overlayfs: invalid origin (0000) [ 422.626947][ T4816] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 422.632863][ T4816] bond2 (unregistering): Released all slaves [ 422.913902][ T4915] vivid-002: disconnect [ 422.917207][ T4915] vivid-002: reconnect [ 423.171941][ T6156] Bluetooth: hci0: command 0x1003 tx timeout [ 423.172403][ T6143] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.220393][ T4926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.248438][ T6143] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 423.251782][ T6143] Bluetooth: hci4: Injecting HCI hardware error event [ 423.255029][ T6143] Bluetooth: hci4: hardware error 0x00 [ 423.791283][ T4946] __nla_validate_parse: 3 callbacks suppressed [ 423.791295][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12756'. [ 423.798068][ T4946] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12756'. [ 423.859426][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12762'. [ 424.102619][ T6156] Bluetooth: hci3: command tx timeout [ 424.380709][ T39] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 424.552782][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 424.555902][ T39] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 424.558566][ T39] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 424.563282][ T39] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 424.568430][ T39] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 424.572698][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 424.577548][ T39] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 424.580557][ T39] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 424.583279][ T39] usb 9-1: Product: syz [ 424.585037][ T39] usb 9-1: Manufacturer: syz [ 424.585317][ T4999] netlink: 'syz.3.12775': attribute type 1 has an invalid length. [ 424.586627][ T39] usb 9-1: SerialNumber: syz [ 424.589125][ T4999] netlink: 'syz.3.12775': attribute type 2 has an invalid length. [ 424.589137][ T4999] netlink: 'syz.3.12775': attribute type 1 has an invalid length. [ 424.592678][ T39] usb 9-1: config 0 descriptor?? [ 424.593384][ T4999] netlink: 'syz.3.12775': attribute type 3 has an invalid length. [ 424.599043][ T39] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 424.601190][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12775'. [ 424.604087][ T39] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 424.872668][ T4982] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 424.873404][ T6228] usb 9-1: USB disconnect, device number 20 [ 424.874997][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 424.880145][ T6228] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 424.895973][ T5030] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 425.142268][ T6156] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 425.333948][ T5052] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12791'. [ 425.338302][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.340796][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.540085][ T40] kauditd_printk_skb: 130 callbacks suppressed [ 425.540096][ T40] audit: type=1400 audit(658.224:56339): avc: denied { read write } for pid=5063 comm="syz.6.12796" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.549994][ T40] audit: type=1400 audit(658.224:56340): avc: denied { open } for pid=5063 comm="syz.6.12796" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.558100][ T40] audit: type=1400 audit(658.224:56341): avc: denied { map } for pid=5063 comm="syz.6.12796" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.566094][ T40] audit: type=1400 audit(658.224:56342): avc: denied { execute } for pid=5063 comm="syz.6.12796" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.574537][ T40] audit: type=1400 audit(658.224:56343): avc: denied { read } for pid=5067 comm="syz.2.12805" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.581561][ T40] audit: type=1400 audit(658.224:56344): avc: denied { open } for pid=5067 comm="syz.2.12805" path="net:[4026532891]" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.590049][ T40] audit: type=1400 audit(658.261:56345): avc: denied { mounton } for pid=5069 comm="syz.3.12798" path="/" dev="tmpfs" ino=2009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.597501][ T40] audit: type=1400 audit(658.261:56346): avc: denied { mount } for pid=5069 comm="syz.3.12798" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 425.621933][ T40] audit: type=1400 audit(658.308:56347): avc: denied { write } for pid=5076 comm="syz.2.12801" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 425.652167][ T40] audit: type=1400 audit(658.326:56348): avc: denied { create } for pid=5080 comm="syz.2.12803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.661266][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12804'. [ 425.800376][ T5099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12811'. [ 425.803217][ T5099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12811'. [ 425.900223][ T6143] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 426.015778][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12819'. [ 426.018983][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12819'. [ 426.021763][ T5120] netlink: 'syz.4.12819': attribute type 19 has an invalid length. [ 426.159040][ T5129] veth1_to_batadv: entered promiscuous mode [ 426.229056][ T5136] ~Q: renamed from vlan0 (while UP) [ 426.270653][ T5142] vcan0: tx address claim with dlc 0 [ 426.577162][ T5180] tmpfs: Invalid gid '0x00000000ffffffff' [ 426.727027][ T5194] bond2: ARP target 4.0.0.0 is already present [ 426.729414][ T5194] bond2: option arp_ip_target: invalid value (4) [ 426.733793][ T5194] bond2 (unregistering): Released all slaves [ 427.141123][ T6228] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 427.311808][ T6228] usb 9-1: Using ep0 maxpacket: 16 [ 427.314693][ T6228] usb 9-1: config index 0 descriptor too short (expected 50325, got 36) [ 427.317394][ T6228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.320677][ T6228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.323931][ T6228] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 427.326737][ T6228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.330517][ T6228] usb 9-1: config 0 descriptor?? [ 427.774638][ T6228] hid_parser_main: 9 callbacks suppressed [ 427.774652][ T6228] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 427.778960][ T6228] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 427.781790][ T6228] hid-steam 0003:28DE:1102.0008: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 427.846831][ T6228] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 427.854061][ T6228] input: Steam Controller as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:28DE:1102.0008/input/input44 [ 427.883875][ T6228] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 427.886982][ T6228] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 427.911303][ T6228] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 427.984246][ T6228] usb 9-1: USB disconnect, device number 21 [ 428.104607][ T6228] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 428.821884][ T5395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.826052][ T5395] bond0: (slave bond1): Enslaving as an active interface with an up link [ 428.922149][ T5439] 9pnet_fd: p9_fd_create_unix (5439): problem connecting socket: ./file0: -30 [ 430.473486][ T5555] __nla_validate_parse: 2 callbacks suppressed [ 430.473499][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12928'. [ 430.482395][ T5555] netlink: 'syz.4.12928': attribute type 30 has an invalid length. [ 430.508005][ T5557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.522433][ T221] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.525388][ T221] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.526925][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12928'. [ 430.528334][ T221] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.531391][ T5555] netlink: 'syz.4.12928': attribute type 30 has an invalid length. [ 430.534077][ T221] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.600809][ T5557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.673299][ T5557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.829663][ T5557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.982407][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 430.982427][ T40] audit: type=1400 audit(919.309:56532): avc: denied { bpf } for pid=5587 comm="syz.4.12939" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.983756][ T73] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.989664][ T40] audit: type=1400 audit(919.318:56533): avc: denied { map_create } for pid=5587 comm="syz.4.12939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.999523][ T73] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.000156][ T40] audit: type=1400 audit(919.318:56534): avc: denied { map_read map_write } for pid=5587 comm="syz.4.12939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 431.008990][ T40] audit: type=1400 audit(919.318:56535): avc: denied { perfmon } for pid=5587 comm="syz.4.12939" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.014832][ T1232] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.017812][ T1232] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.025930][ T40] audit: type=1400 audit(919.356:56536): avc: denied { create } for pid=5595 comm="syz.4.12940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.031776][ T40] audit: type=1400 audit(919.356:56537): avc: denied { ioctl } for pid=5595 comm="syz.4.12940" path="socket:[114980]" dev="sockfs" ino=114980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.156827][ T5604] Failed to get privilege flags for destination (handle=0x2:0x0) [ 431.409641][ T40] audit: type=1400 audit(919.720:56538): avc: denied { ioctl } for pid=5605 comm="syz.6.12944" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 431.473166][ T6209] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 431.634087][ T6209] usb 11-1: Using ep0 maxpacket: 16 [ 431.637156][ T6209] usb 11-1: config index 0 descriptor too short (expected 50325, got 36) [ 431.639851][ T6209] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.643214][ T6209] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.646374][ T6209] usb 11-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 431.649248][ T6209] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.653932][ T6209] usb 11-1: config 0 descriptor?? [ 431.708476][ T40] audit: type=1400 audit(919.982:56539): avc: denied { execmem } for pid=5618 comm="syz.3.12947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 431.793745][ T40] audit: type=1400 audit(920.066:56540): avc: denied { sys_module } for pid=5623 comm="syz.3.12949" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.930672][ T40] audit: type=1400 audit(920.197:56541): avc: denied { read open } for pid=5631 comm="syz.3.12953" path="time:[4026533428]" dev="nsfs" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 432.094268][ T6209] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 432.096678][ T6209] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 432.099351][ T6209] hid-steam 0003:28DE:1102.000A: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 432.144810][ T6143] block nbd4: Receive control failed (result -32) [ 432.147040][ T5612] block nbd4: shutting down sockets [ 432.154112][ T5656] xt_hashlimit: size too large, truncated to 1048576 [ 432.157974][ T6209] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected [ 432.169640][ T6209] input: Steam Controller as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:28DE:1102.000A/input/input45 [ 432.192995][ T6209] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 432.195320][ T6209] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 432.214144][ T5660] bond5: invalid ARP target 0.0.0.0 specified for addition [ 432.216507][ T5660] bond5: option arp_ip_target: invalid value (0) [ 432.225171][ T6209] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 432.235326][ T5660] bond5 (unregistering): Released all slaves [ 432.310342][ T6209] usb 11-1: USB disconnect, device number 3 [ 432.348774][ T5755] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12965'. [ 432.448059][ T6209] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 432.645149][ T5779] syz.2.12973 (5779): drop_caches: 2 [ 432.748121][ T5788] netlink: 'syz.3.12976': attribute type 2 has an invalid length. [ 432.755504][ T5788] !: entered promiscuous mode [ 432.762111][ T5788] netlink: 'syz.3.12976': attribute type 2 has an invalid length. [ 432.768345][ T5788] !: left promiscuous mode [ 433.096205][ T5822] batman_adv: batadv0: Adding interface: macsec2 [ 433.098286][ T5822] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.105932][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.109183][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.112746][ T5822] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 433.654854][ T5874] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13008'. [ 433.707033][ T5881] batadv_slave_1: entered promiscuous mode [ 433.710508][ T5880] batadv_slave_1: left promiscuous mode [ 433.979934][ T5905] macvtap1: entered promiscuous mode [ 433.981754][ T5905] macvtap1: entered allmulticast mode [ 433.983810][ T5905] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 433.986078][ T5905] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 433.991423][ T5905] team0: Device macvtap1 failed to register rx_handler [ 433.994028][ T5905] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 433.996277][ T5905] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 434.118772][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13027'. [ 434.180079][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13031'. [ 434.457433][ T5957] macvtap1: entered promiscuous mode [ 434.460162][ T5957] macvtap1: entered allmulticast mode [ 434.462100][ T5957] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 434.464558][ T5957] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 434.467369][ T5957] team0: Device macvtap1 failed to register rx_handler [ 434.471004][ T5957] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 434.474863][ T5957] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 435.821176][ T6156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.825296][ T6156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.829035][ T6156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.832993][ T6156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.835873][ T6156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.911056][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.923942][ T6038] xfrm0 speed is unknown, defaulting to 1000 [ 436.022362][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.032225][ T6038] chnl_net:caif_netlink_parms(): no params data found [ 436.079934][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.082280][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.085576][ T6038] bridge_slave_0: entered allmulticast mode [ 436.088195][ T6038] bridge_slave_0: entered promiscuous mode [ 436.104494][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.110403][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.112612][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.114746][ T6038] bridge_slave_1: entered allmulticast mode [ 436.118380][ T6038] bridge_slave_1: entered promiscuous mode [ 436.133449][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.137979][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.153332][ T6038] team0: Port device team_slave_0 added [ 436.156921][ T6038] team0: Port device team_slave_1 added [ 436.170708][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.172722][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.179917][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.183813][ T6230] netlink: 'syz.3.13089': attribute type 4 has an invalid length. [ 436.186765][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.190708][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.198506][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.214760][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.237769][ T6038] hsr_slave_0: entered promiscuous mode [ 436.240095][ T6038] hsr_slave_1: entered promiscuous mode [ 436.265806][ T6288] bridge_slave_1: left allmulticast mode [ 436.267514][ T6288] bridge_slave_1: left promiscuous mode [ 436.269278][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.273582][ T6288] bridge_slave_0: left allmulticast mode [ 436.275400][ T6288] bridge_slave_0: left promiscuous mode [ 436.277493][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.458623][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 436.458635][ T40] audit: type=1400 audit(924.422:56673): avc: denied { write } for pid=6038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 436.459135][ T6038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.460524][ T40] audit: type=1400 audit(924.432:56674): avc: denied { read } for pid=6038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 436.477969][ T6038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.495094][ T40] audit: type=1400 audit(924.469:56675): avc: denied { create } for pid=6365 comm="syz.4.13103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.502202][ T40] audit: type=1400 audit(924.469:56676): avc: denied { write } for pid=6365 comm="syz.4.13103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.502250][ T6366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13103'. [ 436.508465][ T40] audit: type=1400 audit(924.469:56677): avc: denied { nlmsg_write } for pid=6365 comm="syz.4.13103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.522881][ T6038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.547755][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13104'. [ 436.565644][ T6038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.603410][ T40] audit: type=1400 audit(924.563:56678): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 436.641088][ T13] bridge_slave_1: left allmulticast mode [ 436.643032][ T13] bridge_slave_1: left promiscuous mode [ 436.644958][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.653447][ T13] bridge_slave_0: left allmulticast mode [ 436.655394][ T13] bridge_slave_0: left promiscuous mode [ 436.659207][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.743044][ T40] audit: type=1400 audit(924.693:56679): avc: denied { mount } for pid=6404 comm="syz.4.13110" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 436.744505][ T6405] overlayfs: workdir and upperdir must reside under the same mount [ 436.758428][ T40] audit: type=1400 audit(924.712:56680): avc: denied { ioctl } for pid=6406 comm="syz.3.13112" path="socket:[114640]" dev="sockfs" ino=114640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 436.766945][ T40] audit: type=1400 audit(924.712:56681): avc: denied { unmount } for pid=12308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 436.892366][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.930237][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.963758][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13114'. [ 436.973294][ T13] bond0 (unregistering): (slave bond1): Releasing backup interface [ 437.036654][ T13] bond0 (unregistering): Released all slaves [ 437.041626][ T13] bond1 (unregistering): Released all slaves [ 437.057188][ T40] audit: type=1400 audit(924.983:56682): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 437.078117][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.086674][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.091791][ T6417] netlink: 'syz.3.13115': attribute type 10 has an invalid length. [ 437.095495][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.097767][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.107825][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.117523][ T6417] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 437.134647][ T6417] netlink: 'syz.3.13115': attribute type 10 has an invalid length. [ 437.137394][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13115'. [ 437.143516][ T938] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.145811][ T938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.152071][ T6417] batadv0: entered promiscuous mode [ 437.153827][ T6417] batadv0: entered allmulticast mode [ 437.161361][ T6417] bond0: (slave batadv0): Releasing backup interface [ 437.179786][ T6417] bridge0: port 3(batadv0) entered blocking state [ 437.181908][ T6417] bridge0: port 3(batadv0) entered disabled state [ 437.350577][ T6436] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 437.352848][ T6436] binder: 6435:6436 ioctl 40046207 0 returned -1 [ 437.390033][ T6440] team0: No ports can be present during mode change [ 437.517272][ T1232] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 437.520260][ T1232] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 437.550543][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.647302][ T6473] tmpfs: Invalid uid '0x00000000ffffffff' [ 437.650777][ T13] hsr_slave_0: left promiscuous mode [ 437.652887][ T13] hsr_slave_1: left promiscuous mode [ 437.654928][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.657447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.660200][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.662553][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.665177][ T13] batman_adv: batadv0: Removing interface: macsec2 [ 437.674148][ T13] veth1_to_batadv: left promiscuous mode [ 437.676367][ T13] veth1_macvtap: left promiscuous mode [ 437.679554][ T13] veth0_macvtap: left promiscuous mode [ 437.681761][ T13] veth1_vlan: left promiscuous mode [ 437.683874][ T13] veth0_vlan: left promiscuous mode [ 437.808117][ T13] team0 (unregistering): Port device team_slave_1 removed [ 437.814595][ T13] team0 (unregistering): Port device team_slave_0 removed [ 437.918503][ T6038] veth0_vlan: entered promiscuous mode [ 437.924051][ T6038] veth1_vlan: entered promiscuous mode [ 437.937480][ T6038] veth0_macvtap: entered promiscuous mode [ 437.942019][ T6038] veth1_macvtap: entered promiscuous mode [ 437.973808][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.992885][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.998441][ T1232] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.001552][ T1232] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.004305][ T1232] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.008111][ T1232] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.052063][ T6156] Bluetooth: hci0: command tx timeout [ 438.092240][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.099702][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.123625][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.128427][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.216539][ T6523] bridge: RTM_NEWNEIGH with invalid ether address [ 438.369711][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13138'. [ 438.383817][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13138'. [ 438.390489][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13138'. [ 439.042884][ T6574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 439.098152][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13153'. [ 439.539855][ T60] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 439.703171][ T60] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 439.706284][ T60] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.708957][ T60] usb 12-1: Product: syz [ 439.710555][ T60] usb 12-1: Manufacturer: syz [ 439.712072][ T60] usb 12-1: SerialNumber: syz [ 439.935093][ T60] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 439.938872][ T60] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 439.942157][ T60] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 439.989536][ T60] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 439.994718][ T60] usb 12-1: USB disconnect, device number 2 [ 440.261476][ T6631] netlink: 'syz.4.13166': attribute type 10 has an invalid length. [ 440.267778][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.270864][ T6631] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 440.277181][ T6156] Bluetooth: hci0: command tx timeout [ 440.284567][ T6631] netlink: 'syz.4.13166': attribute type 10 has an invalid length. [ 440.287116][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13166'. [ 440.291598][ T6631] batadv0: entered promiscuous mode [ 440.293282][ T6631] batadv0: entered allmulticast mode [ 440.295979][ T6631] bond0: (slave batadv0): Releasing backup interface [ 440.335130][ T6631] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 440.803537][ T6676] netlink: 'syz.7.13182': attribute type 10 has an invalid length. [ 440.808482][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.811764][ T6676] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 440.820856][ T6676] netlink: 'syz.7.13182': attribute type 10 has an invalid length. [ 440.823645][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13182'. [ 440.826560][ T6676] batadv0: entered promiscuous mode [ 440.828340][ T6676] batadv0: entered allmulticast mode [ 440.830903][ T6676] bond0: (slave batadv0): Releasing backup interface [ 440.867163][ T6676] bridge0: port 3(batadv0) entered blocking state [ 440.869508][ T6676] bridge0: port 3(batadv0) entered disabled state [ 440.983453][ T1232] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 440.987368][ T1232] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 441.483494][ T6698] team0: No ports can be present during mode change [ 441.819859][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 441.819874][ T40] audit: type=1400 audit(929.442:56860): avc: denied { ioctl } for pid=6741 comm="syz.2.13203" path="socket:[119171]" dev="sockfs" ino=119171 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 441.837242][ T40] audit: type=1400 audit(929.452:56861): avc: denied { watch } for pid=6743 comm="syz.7.13207" path="/31/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.873543][ T40] audit: type=1400 audit(929.498:56862): avc: denied { open } for pid=6746 comm="syz.7.13208" path="/dev/ptyr3" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 441.895064][ T40] audit: type=1400 audit(929.517:56863): avc: denied { execmem } for pid=6751 comm="syz.4.13210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 441.915668][ T40] audit: type=1400 audit(929.536:56864): avc: denied { create } for pid=6753 comm="syz.2.13211" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.922426][ T40] audit: type=1400 audit(929.536:56865): avc: denied { map } for pid=6753 comm="syz.2.13211" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.929949][ T40] audit: type=1400 audit(929.536:56866): avc: denied { read write } for pid=6753 comm="syz.2.13211" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.939201][ T40] audit: type=1400 audit(929.554:56867): avc: denied { ioctl } for pid=6746 comm="syz.7.13208" path="/dev/ttyr3" dev="devtmpfs" ino=402 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 441.979113][ T40] audit: type=1400 audit(929.592:56868): avc: denied { watch_reads } for pid=6759 comm="syz.7.13213" path="/33" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 442.020866][ T40] audit: type=1400 audit(929.629:56869): avc: denied { read write } for pid=6763 comm="syz.7.13214" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.266937][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 442.365503][ T6789] loop5: detected capacity change from 0 to 7 [ 442.427435][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 442.430958][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.437354][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.440408][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 442.443748][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 442.446839][ T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.451344][ T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.454076][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.470895][ T1363] Dev loop5: unable to read RDB block 7 [ 442.472900][ T1363] loop5: unable to read partition table [ 442.475397][ T1363] loop5: partition table beyond EOD, truncated [ 442.502239][ T6156] Bluetooth: hci0: command tx timeout [ 442.600455][ T6789] Dev loop5: unable to read RDB block 7 [ 442.602277][ T6789] loop5: unable to read partition table [ 442.604207][ T6789] loop5: partition table beyond EOD, truncated [ 442.606155][ T6789] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 442.680941][ T10] usb 12-1: GET_CAPABILITIES returned 0 [ 442.682742][ T10] usbtmc 12-1:16.0: can't read capabilities [ 442.901936][ T6764] usb 12-1: usbtmc_ioctl_clear_out_halt returned -32 [ 442.904786][ T1207] usb 12-1: USB disconnect, device number 3 [ 443.788080][ T6887] netlink: 'syz.2.13253': attribute type 9 has an invalid length. [ 443.789554][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13252'. [ 444.024125][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13267'. [ 444.371988][ T6143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.376469][ T6143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.380836][ T6143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.384456][ T6143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.388231][ T6143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.414898][ T6951] xfrm0 speed is unknown, defaulting to 1000 [ 444.458017][ T6972] netlink: 'syz.2.13275': attribute type 8 has an invalid length. [ 444.529237][ T7030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13281'. [ 444.560475][ T7040] input: syz1 as /devices/virtual/input/input46 [ 444.563207][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 444.656190][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.658677][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.661014][ T6951] bridge_slave_0: entered allmulticast mode [ 444.672777][ T6951] bridge_slave_0: entered promiscuous mode [ 444.675976][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.678163][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.680600][ T6951] bridge_slave_1: entered allmulticast mode [ 444.683310][ T6951] bridge_slave_1: entered promiscuous mode [ 444.703777][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.708684][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.724062][ T6951] team0: Port device team_slave_0 added [ 444.727133][ T6951] team0: Port device team_slave_1 added [ 444.727336][ T6143] Bluetooth: hci0: command tx timeout [ 444.742343][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.744524][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.752359][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.756504][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.758664][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.766536][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.789158][ T6951] hsr_slave_0: entered promiscuous mode [ 444.791582][ T6951] hsr_slave_1: entered promiscuous mode [ 444.793623][ T6951] debugfs: 'hsr0' already exists in 'hsr' [ 444.798831][ T6951] Cannot create hsr debugfs directory [ 444.891506][ T6951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.895060][ T6951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.023932][ T6951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.028005][ T6951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.049050][ T7287] xfrm0 speed is unknown, defaulting to 1000 [ 445.138040][ T6951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.142267][ T6951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.177771][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13308'. [ 445.236949][ T6951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.240141][ T6951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.324920][ T7334] netlink: 'syz.3.13313': attribute type 9 has an invalid length. [ 445.328047][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13313'. [ 445.455699][ T6951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.459901][ T6951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.463757][ T6951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.474763][ T6951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.511887][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.520147][ T6951] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.524844][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.527231][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.533634][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.535952][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.633170][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.748157][ T6951] veth0_vlan: entered promiscuous mode [ 445.753488][ T6951] veth1_vlan: entered promiscuous mode [ 445.769507][ T6951] veth0_macvtap: entered promiscuous mode [ 445.773433][ T6951] veth1_macvtap: entered promiscuous mode [ 445.781437][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.788834][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.795547][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.799004][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.802377][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.805429][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.840414][ T938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.842838][ T938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.855018][ T938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.857517][ T938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.147960][ T7422] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 446.151524][ T7422] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 446.154700][ T7422] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 446.610236][ T6143] Bluetooth: hci3: command tx timeout [ 447.189643][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 447.189656][ T40] audit: type=1400 audit(934.462:57062): avc: denied { mounton } for pid=7452 comm="syz.7.13334" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 447.237855][ T40] audit: type=1400 audit(934.509:57063): avc: denied { bpf } for pid=7455 comm="syz.2.13339" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.251699][ T40] audit: type=1400 audit(934.509:57064): avc: denied { perfmon } for pid=7455 comm="syz.2.13339" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.259564][ T40] audit: type=1400 audit(934.528:57065): avc: denied { ioctl } for pid=7458 comm="syz.7.13340" path="socket:[119715]" dev="sockfs" ino=119715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.308174][ T40] audit: type=1400 audit(934.574:57066): avc: denied { create } for pid=7463 comm="syz.7.13343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.314221][ T40] audit: type=1400 audit(934.574:57067): avc: denied { ioctl } for pid=7463 comm="syz.7.13343" path="socket:[118664]" dev="sockfs" ino=118664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.398123][ T40] audit: type=1400 audit(934.658:57068): avc: denied { read } for pid=7479 comm="syz.4.13349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.452831][ T40] audit: type=1400 audit(934.705:57069): avc: denied { write } for pid=7479 comm="syz.4.13349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 448.095670][ T40] audit: type=1400 audit(935.303:57070): avc: denied { create } for pid=7488 comm="syz.2.13360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.103603][ T7490] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 448.115060][ T40] audit: type=1400 audit(935.313:57071): avc: denied { setopt } for pid=7488 comm="syz.2.13360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.297045][ T7516] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13361'. [ 448.300009][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13361'. [ 448.845916][ T6143] Bluetooth: hci3: command tx timeout [ 448.939125][ T7533] bond0: entered promiscuous mode [ 448.941081][ T7533] bond_slave_0: entered promiscuous mode [ 448.943738][ T7533] bond_slave_1: entered promiscuous mode [ 448.946196][ T7533] bond0: left promiscuous mode [ 448.947751][ T7533] bond_slave_0: left promiscuous mode [ 448.949607][ T7533] bond_slave_1: left promiscuous mode [ 449.309964][ T7577] ip6gre1: entered allmulticast mode [ 449.313056][ T7577] team0: Device ip6gre1 is of different type [ 449.325970][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.540334][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13394'. [ 449.740278][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13408'. [ 449.795366][ T7656] netlink: 71 bytes leftover after parsing attributes in process `syz.2.13406'. [ 449.847796][ T7667] team0: Device gtp0 is of different type [ 450.667626][ T7764] 9pnet_fd: p9_fd_create_unix (7764): problem connecting socket: ./file0: -30 [ 451.060344][ T6143] Bluetooth: hci3: command tx timeout [ 451.302238][ T7820] overlayfs: failed to clone lowerpath [ 451.305803][ T7820] 9pnet_fd: p9_fd_create_unix (7820): problem connecting socket: ./file0: -111 [ 451.344885][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13468'. [ 451.347882][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13468'. [ 451.680699][ T39] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 451.842312][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.845772][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.849391][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.854275][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.857127][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.866739][ T39] usb 9-1: config 0 descriptor?? [ 452.304367][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.306980][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.309396][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.311822][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.314374][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.316714][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.319036][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.321333][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.324308][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.326773][ T39] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 452.334532][ T39] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 452.559674][ T7920] loop8: detected capacity change from 0 to 7 [ 452.562643][ C2] blk_print_req_error: 25 callbacks suppressed [ 452.562656][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.567512][ C2] buffer_io_error: 25 callbacks suppressed [ 452.567522][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.572243][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.575314][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.578065][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.581198][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.583856][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.586824][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.589586][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.592612][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.593438][ T60] usb 9-1: USB disconnect, device number 22 [ 452.598156][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.601275][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.605460][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.608878][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.611767][ T1363] ldm_validate_partition_table(): Disk read failed. [ 452.614137][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.617230][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.621615][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.624691][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.627858][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.630838][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 452.635613][ T1363] Dev loop8: unable to read RDB block 0 [ 452.643588][ T1363] loop8: unable to read partition table [ 452.645462][ T1363] loop8: partition table beyond EOD, truncated [ 452.648755][ T7920] ldm_validate_partition_table(): Disk read failed. [ 452.651457][ T7920] Dev loop8: unable to read RDB block 0 [ 452.654831][ T7920] loop8: unable to read partition table [ 452.657363][ T7920] loop8: partition table beyond EOD, truncated [ 452.660423][ T7920] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 452.697920][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 452.697932][ T40] audit: type=1400 audit(939.613:57249): avc: denied { create } for pid=7937 comm="syz.7.13502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 452.706965][ T40] audit: type=1400 audit(939.613:57250): avc: denied { setopt } for pid=7937 comm="syz.7.13502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 452.765822][ T40] audit: type=1400 audit(939.678:57251): avc: denied { create } for pid=7944 comm="syz.7.13505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.785353][ T40] audit: type=1400 audit(939.697:57252): avc: denied { setopt } for pid=7944 comm="syz.7.13505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.791524][ T40] audit: type=1400 audit(939.697:57253): avc: denied { module_request } for pid=7944 comm="syz.7.13505" kmod="arptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 452.838459][ T7951] Process accounting resumed [ 452.855698][ T40] audit: type=1400 audit(939.753:57254): avc: denied { mount } for pid=7953 comm="syz.3.13509" name="/" dev="ramfs" ino=123095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 452.926089][ T40] audit: type=1400 audit(939.828:57255): avc: denied { mount } for pid=7959 comm="syz.3.13511" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 453.009345][ T40] audit: type=1400 audit(939.903:57256): avc: denied { create } for pid=7965 comm="syz.3.13514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 453.015355][ T40] audit: type=1400 audit(939.903:57257): avc: denied { connect } for pid=7965 comm="syz.3.13514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 453.021479][ T40] audit: type=1400 audit(939.903:57258): avc: denied { write } for pid=7965 comm="syz.3.13514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 453.285361][ T6143] Bluetooth: hci3: command tx timeout [ 453.863855][ T7999] IPv6: NLM_F_REPLACE set, but no existing node found! [ 454.034092][ T39] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 454.195954][ T39] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 454.198590][ T39] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.201738][ T39] usb 12-1: config 0 interface 0 has no altsetting 0 [ 454.206393][ T39] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.206718][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13533'. [ 454.209734][ T39] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.209749][ T39] usb 12-1: Product: syz [ 454.220502][ T39] usb 12-1: Manufacturer: syz [ 454.222046][ T39] usb 12-1: SerialNumber: syz [ 454.227594][ T39] usb 12-1: config 0 descriptor?? [ 454.232152][ T39] hub 12-1:0.0: bad descriptor, ignoring hub [ 454.234118][ T39] hub 12-1:0.0: probe with driver hub failed with error -5 [ 454.238302][ T39] usb 12-1: selecting invalid altsetting 0 [ 454.283532][ T8035] netlink: 'syz.2.13538': attribute type 4 has an invalid length. [ 454.379406][ T8052] loop6: detected capacity change from 0 to 524288000 [ 454.451428][ T8052] support for cryptoloop has been removed. Use dm-crypt instead. [ 455.132817][ T8076] xfrm0 speed is unknown, defaulting to 1000 [ 455.204636][ T6008] usb 12-1: USB disconnect, device number 4 [ 455.217521][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13557'. [ 455.220452][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13557'. [ 455.382102][ T6008] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 455.493595][ T8155] loop5: detected capacity change from 0 to 7 [ 455.497693][ T1363] ldm_validate_partition_table(): Disk read failed. [ 455.500256][ T1363] Dev loop5: unable to read RDB block 0 [ 455.502341][ T1363] loop5: unable to read partition table [ 455.504293][ T1363] loop5: partition table beyond EOD, truncated [ 455.515955][ T8155] ldm_validate_partition_table(): Disk read failed. [ 455.518466][ T8155] Dev loop5: unable to read RDB block 0 [ 455.520752][ T8155] loop5: unable to read partition table [ 455.523603][ T8155] loop5: partition table beyond EOD, truncated [ 455.525598][ T8155] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 455.544244][ T6008] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 455.546959][ T6008] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 455.550159][ T6008] usb 12-1: config 0 interface 0 has no altsetting 0 [ 455.564766][ T6008] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 455.568645][ T6008] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 455.574540][ T6008] usb 12-1: Product: syz [ 455.575977][ T6008] usb 12-1: Manufacturer: syz [ 455.577540][ T6008] usb 12-1: SerialNumber: syz [ 455.580699][ T6008] usb 12-1: config 0 descriptor?? [ 455.584794][ T6008] hub 12-1:0.0: bad descriptor, ignoring hub [ 455.586924][ T8155] loop5: detected capacity change from 7 to 0 [ 455.588964][ T6008] hub 12-1:0.0: probe with driver hub failed with error -5 [ 455.596750][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13576'. [ 455.599682][ T6008] usb 12-1: selecting invalid altsetting 0 [ 455.599684][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13576'. [ 455.822625][ T8199] netem: unknown loss type 0 [ 455.824129][ T8199] netem: change failed [ 455.917141][ T59] usb 12-1: USB disconnect, device number 5 [ 456.375351][ T8225] mkiss: ax0: crc mode is auto. [ 456.707786][ T8275] xt_hashlimit: size too large, truncated to 1048576 [ 457.923188][ T8327] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13626'. [ 457.963702][ T8336] vivid-004: disconnect [ 457.966263][ T8336] vivid-004: reconnect [ 458.064091][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 458.064104][ T40] audit: type=1400 audit(944.623:57382): avc: denied { create } for pid=8356 comm="syz.3.13644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.072823][ T40] audit: type=1400 audit(944.642:57383): avc: denied { bind } for pid=8356 comm="syz.3.13644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.101083][ T40] audit: type=1400 audit(944.670:57384): avc: denied { create } for pid=8364 comm="syz.3.13639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.111324][ T40] audit: type=1400 audit(944.679:57385): avc: denied { write } for pid=8364 comm="syz.3.13639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.118930][ T40] audit: type=1400 audit(944.679:57386): avc: denied { read } for pid=8364 comm="syz.3.13639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.138312][ T40] audit: type=1400 audit(944.689:57387): avc: denied { ioctl } for pid=8364 comm="syz.3.13639" path="socket:[120279]" dev="sockfs" ino=120279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.148795][ T40] audit: type=1400 audit(944.689:57388): avc: denied { write } for pid=8367 comm="syz.4.13640" name="raw" dev="proc" ino=4026533168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 458.169161][ T40] audit: type=1400 audit(944.726:57389): avc: denied { read } for pid=8375 comm="syz.4.13652" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.178988][ T40] audit: type=1400 audit(944.726:57390): avc: denied { open } for pid=8375 comm="syz.4.13652" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.189349][ T40] audit: type=1400 audit(944.736:57391): avc: denied { ioctl } for pid=8375 comm="syz.4.13652" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.197318][ T8376] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 458.215053][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13647'. [ 458.227789][ T8383] netlink: 3 bytes leftover after parsing attributes in process `syz.7.13647'. [ 458.273038][ T6143] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 458.387319][ T8422] netlink: 'syz.4.13660': attribute type 1 has an invalid length. [ 458.390373][ T8422] netlink: 'syz.4.13660': attribute type 2 has an invalid length. [ 458.393710][ T8422] netlink: 'syz.4.13660': attribute type 1 has an invalid length. [ 458.396892][ T8422] netlink: 'syz.4.13660': attribute type 3 has an invalid length. [ 458.400024][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13660'. [ 458.433192][ T6143] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 458.438914][ T8425] Bluetooth: MGMT ver 1.23 [ 458.551845][ T8451] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13672'. [ 458.565036][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.796632][ T8478] vcan0: tx address claim with dlc 0 [ 458.811224][ T8480] ~Q: renamed from vlan0 (while UP) [ 458.835289][ T8485] veth1_to_batadv: entered promiscuous mode [ 458.848242][ T221] batman_adv: batadv0: IGMP Querier appeared [ 458.850183][ T221] batman_adv: batadv0: MLD Querier appeared [ 458.905404][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13688'. [ 458.908032][ T8492] netlink: 'syz.3.13688': attribute type 19 has an invalid length. [ 459.367584][ T8552] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 459.415671][ T8562] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 459.446357][ T8566] overlayfs: failed to clone upperpath [ 459.989261][ T8648] input: syz1 as /devices/virtual/input/input49 [ 460.423633][ T8699] openvswitch: netlink: IP tunnel dst address not specified [ 460.581459][ T8717] __nla_validate_parse: 10 callbacks suppressed [ 460.581476][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13778'. [ 460.891769][ T8748] bond1: option xmit_hash_policy: invalid value (6) [ 460.894796][ T8748] bond1 (unregistering): Released all slaves [ 460.934765][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13790'. [ 460.937934][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13790'. [ 461.111321][ T8840] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 461.167222][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13806'. [ 461.232040][ T8862] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 461.247313][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 461.744394][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13829'. [ 462.142978][ T1346] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 462.313925][ T1346] usb 12-1: Using ep0 maxpacket: 32 [ 462.316767][ T1346] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 462.319192][ T1346] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 462.322438][ T1346] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 462.325959][ T1346] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 462.329890][ T1346] usb 12-1: config 0 interface 0 has no altsetting 0 [ 462.333593][ T1346] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 462.336571][ T1346] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 462.339217][ T1346] usb 12-1: Product: syz [ 462.340574][ T1346] usb 12-1: Manufacturer: syz [ 462.341988][ T1346] usb 12-1: SerialNumber: syz [ 462.344974][ T1346] usb 12-1: config 0 descriptor?? [ 462.350011][ T1346] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.353988][ T1346] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 462.460747][ T9079] bridge0: entered promiscuous mode [ 462.462448][ T9079] macvlan2: entered promiscuous mode [ 462.565199][ T1346] usb 12-1: USB disconnect, device number 6 [ 462.567185][ C2] ldusb 12-1:0.0: usb_submit_urb failed (-19) [ 462.575522][ T1346] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 462.669112][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13850'. [ 462.672641][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13850'. [ 462.763878][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13851'. [ 462.766815][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13851'. [ 462.786697][ T9047] ldusb: No device or device unplugged -19 [ 462.825583][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13852'. [ 463.350986][ T9130] pimreg: entered allmulticast mode [ 463.354012][ T9130] pimreg: left allmulticast mode [ 463.383956][ T6156] Bluetooth: hci4: command 0x1003 tx timeout [ 463.388665][ T6143] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 463.415974][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 463.415986][ T40] audit: type=1400 audit(949.634:57567): avc: denied { ioctl } for pid=9137 comm="syz.4.13860" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.450065][ T40] audit: type=1400 audit(949.662:57568): avc: denied { read } for pid=9142 comm="syz.7.13862" dev="nsfs" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.456438][ T40] audit: type=1400 audit(949.662:57569): avc: denied { open } for pid=9142 comm="syz.7.13862" path="net:[4026533428]" dev="nsfs" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.566730][ T6143] block nbd3: Receive control failed (result -32) [ 463.617298][ T40] audit: type=1400 audit(949.812:57570): avc: denied { execmem } for pid=9160 comm="syz.7.13867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 463.822651][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 463.848990][ T40] audit: type=1400 audit(950.036:57571): avc: denied { read } for pid=9165 comm="syz.7.13868" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 463.856083][ T40] audit: type=1400 audit(950.036:57572): avc: denied { open } for pid=9165 comm="syz.7.13868" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 463.863242][ T40] audit: type=1400 audit(950.036:57573): avc: denied { ioctl } for pid=9165 comm="syz.7.13868" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 463.890681][ T40] audit: type=1400 audit(950.073:57574): avc: denied { connect } for pid=9168 comm="syz.7.13869" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.983131][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 463.987730][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 463.991735][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.001837][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 464.005597][ T10] pvrusb2: ********** [ 464.006856][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 464.010001][ T10] pvrusb2: Important functionality might not be entirely working. [ 464.012568][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 464.016384][ T10] pvrusb2: ********** [ 464.044397][ T40] audit: type=1400 audit(950.213:57575): avc: denied { read } for pid=9181 comm="syz.7.13872" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 464.051322][ T40] audit: type=1400 audit(950.213:57576): avc: denied { open } for pid=9181 comm="syz.7.13872" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 464.217039][ T2485] pvrusb2: Invalid write control endpoint [ 464.244897][ T2485] pvrusb2: Invalid write control endpoint [ 464.247232][ T2485] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 464.251398][ T2485] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 464.254372][ T2485] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 464.258213][ T2485] pvrusb2: Device being rendered inoperable [ 464.265487][ T2485] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 464.268681][ T2485] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 464.273778][ T2485] pvrusb2: Attached sub-driver cx25840 [ 464.275983][ T2485] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.279727][ T2485] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.402157][ T9216] ip6gre2: entered allmulticast mode [ 464.404877][ T9216] team0: Device ip6gre2 is of different type [ 464.429866][ T9151] pvrusb2: Attempted to execute control transfer when device not ok [ 464.434941][ T60] usb 9-1: USB disconnect, device number 23 [ 464.525897][ T9243] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 464.529461][ T9243] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 464.532953][ T9243] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 464.681173][ T9254] xfrm0 speed is unknown, defaulting to 1000 [ 466.171839][ T6156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.176533][ T6156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.179766][ T6156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.183180][ T6156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.186422][ T6156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.236115][ T9357] xfrm0 speed is unknown, defaulting to 1000 [ 466.367976][ T9357] chnl_net:caif_netlink_parms(): no params data found [ 466.413863][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.416213][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.418590][ T9357] bridge_slave_0: entered allmulticast mode [ 466.421399][ T9357] bridge_slave_0: entered promiscuous mode [ 466.425558][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.427886][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.430209][ T9357] bridge_slave_1: entered allmulticast mode [ 466.432970][ T9357] bridge_slave_1: entered promiscuous mode [ 466.449591][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.455011][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.471569][ T9357] team0: Port device team_slave_0 added [ 466.474763][ T9357] team0: Port device team_slave_1 added [ 466.489113][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.491344][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.499749][ T9357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.504220][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.506408][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.514378][ T9357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.546226][ T9357] hsr_slave_0: entered promiscuous mode [ 466.549442][ T9357] hsr_slave_1: entered promiscuous mode [ 466.552961][ T9357] debugfs: 'hsr0' already exists in 'hsr' [ 466.555358][ T9357] Cannot create hsr debugfs directory [ 466.663010][ T9357] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.667318][ T9357] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.671648][ T9357] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.675920][ T9357] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.689612][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.691926][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.694280][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.696503][ T9357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.728179][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.736800][ T221] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.739550][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.746521][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.752664][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.755510][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.762304][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.765322][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.866747][ T9357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.983379][ T9357] veth0_vlan: entered promiscuous mode [ 466.988459][ T9357] veth1_vlan: entered promiscuous mode [ 467.005751][ T9357] veth0_macvtap: entered promiscuous mode [ 467.010678][ T9357] veth1_macvtap: entered promiscuous mode [ 467.019835][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.026636][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.032914][ T221] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.036559][ T221] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.039500][ T221] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.042921][ T221] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.087239][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.090153][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.103285][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.107940][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.378421][ T9696] __nla_validate_parse: 1 callbacks suppressed [ 467.378433][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13948'. [ 467.553328][ T9724] batadv_slave_1: entered promiscuous mode [ 467.559038][ T9723] batadv_slave_1: left promiscuous mode [ 467.708293][ T9744] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13959'. [ 467.774795][ T9754] batman_adv: batadv0: Adding interface: macsec2 [ 467.777005][ T9754] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.785679][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.789085][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.794125][ T9754] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 467.834511][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13974'. [ 467.976582][ T9787] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13975'. [ 468.229707][ T6227] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 468.347593][ T6156] Bluetooth: hci2: command tx timeout [ 468.422287][ T6227] usb 12-1: Using ep0 maxpacket: 8 [ 468.425283][ T6227] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 468.429093][ T6227] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 468.432405][ T6227] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.435964][ T6227] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.440213][ T6227] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.443436][ T6227] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.665137][ T6227] usb 12-1: GET_CAPABILITIES returned 0 [ 468.667514][ T6227] usbtmc 12-1:16.0: can't read capabilities [ 468.700819][ T1207] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 468.882197][ T1207] usb 13-1: Using ep0 maxpacket: 32 [ 468.886216][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 468.886226][ T40] audit: type=1400 audit(954.747:57713): avc: denied { write } for pid=9780 comm="syz.7.13972" name="usbtmc0" dev="devtmpfs" ino=3598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 468.895810][ T6227] usb 12-1: USB disconnect, device number 7 [ 468.898827][ T1207] usb 13-1: too many configurations: 17, using maximum allowed: 8 [ 468.904492][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.907948][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.911019][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.913602][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.916478][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.919081][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.921827][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.924399][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.927467][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.930026][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.932798][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.935361][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.938846][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.941415][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.944172][ T1207] usb 13-1: config 0 has an invalid interface number: 2 but max is 0 [ 468.946966][ T1207] usb 13-1: config 0 has no interface number 0 [ 468.950601][ T1207] usb 13-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 468.953483][ T1207] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.956052][ T1207] usb 13-1: Product: syz [ 468.957502][ T1207] usb 13-1: Manufacturer: syz [ 468.959267][ T1207] usb 13-1: SerialNumber: syz [ 468.962202][ T1207] usb 13-1: config 0 descriptor?? [ 468.965087][ T1207] etas_es58x 13-1:0.2: Starting syz syz (Serial Number syz) [ 469.447458][ T9835] netlink: 'syz.7.13986': attribute type 2 has an invalid length. [ 469.454315][ T9835] !: entered promiscuous mode [ 469.463442][ T9835] netlink: 'syz.7.13986': attribute type 2 has an invalid length. [ 469.466036][ T9835] !: left promiscuous mode [ 469.615520][ T40] audit: type=1400 audit(955.430:57714): avc: denied { create } for pid=9847 comm="syz.3.13992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.623471][ T40] audit: type=1400 audit(955.430:57715): avc: denied { setopt } for pid=9847 comm="syz.3.13992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.630545][ T40] audit: type=1400 audit(955.430:57716): avc: denied { bind } for pid=9847 comm="syz.3.13992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.638193][ T40] audit: type=1400 audit(955.430:57717): avc: denied { name_bind } for pid=9847 comm="syz.3.13992" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 469.644180][ T9851] netlink: 'syz.7.13991': attribute type 11 has an invalid length. [ 469.646733][ T40] audit: type=1400 audit(955.430:57718): avc: denied { node_bind } for pid=9847 comm="syz.3.13992" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 469.657578][ T40] audit: type=1400 audit(955.439:57719): avc: denied { write } for pid=9847 comm="syz.3.13992" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.664892][ T40] audit: type=1400 audit(955.439:57720): avc: denied { connect } for pid=9847 comm="syz.3.13992" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.672205][ T40] audit: type=1400 audit(955.439:57721): avc: denied { name_connect } for pid=9847 comm="syz.3.13992" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 469.678954][ T40] audit: type=1400 audit(955.448:57722): avc: denied { ioctl } for pid=9850 comm="syz.7.13991" path="socket:[124626]" dev="sockfs" ino=124626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 470.572616][ T6156] Bluetooth: hci2: command tx timeout [ 471.344991][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.649248][ T1207] etas_es58x 13-1:0.2: could not retrieve the product info string [ 471.678857][ T1207] usb 13-1: USB disconnect, device number 2 [ 471.690696][ T1207] etas_es58x 13-1:0.2: Disconnecting syz syz [ 471.786094][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14015'. [ 471.812292][ T9946] overlayfs: failed to clone lowerpath [ 471.893066][ T9966] bond1: option xmit_hash_policy: invalid value (6) [ 471.896174][ T9966] bond1 (unregistering): Released all slaves [ 471.935865][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14020'. [ 471.938753][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14020'. [ 472.083863][T10051] netlink: 'syz.7.14023': attribute type 9 has an invalid length. [ 472.147548][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14024'. [ 472.228592][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14038'. [ 472.797628][ T6156] Bluetooth: hci2: command tx timeout [ 473.190933][T10095] netlink: 71 bytes leftover after parsing attributes in process `syz.8.14035'. [ 473.460708][T10125] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 473.462748][T10125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.465107][T10125] vhci_hcd vhci_hcd.0: Device attached [ 473.507544][T10137] loop7: detected capacity change from 0 to 524255232 [ 473.717476][ T60] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 473.728197][ T6008] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 473.888613][ T60] usb 13-1: Using ep0 maxpacket: 16 [ 473.891518][ T60] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.894585][ T60] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.897302][ T60] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 473.900301][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.904295][ T60] usb 13-1: config 0 descriptor?? [ 474.123376][T10126] usb 53-1: recv xbuf, 0 [ 474.125117][ T221] vhci_hcd vhci_hcd.8: stop threads [ 474.125911][ T60] usb 13-1: USB disconnect, device number 3 [ 474.126703][ T221] vhci_hcd vhci_hcd.8: release socket [ 474.130356][ T221] vhci_hcd vhci_hcd.8: disconnect device [ 474.198905][ T6008] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 474.708991][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 474.709002][ T40] audit: type=1400 audit(960.188:57824): avc: denied { create } for pid=10164 comm="syz.8.14057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.720070][ T40] audit: type=1400 audit(960.188:57825): avc: denied { read } for pid=10167 comm="syz.7.14058" dev="nsfs" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 474.729374][ T40] audit: type=1400 audit(960.188:57826): avc: denied { open } for pid=10167 comm="syz.7.14058" path="net:[4026533428]" dev="nsfs" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 474.741841][ T40] audit: type=1400 audit(960.188:57827): avc: denied { create } for pid=10167 comm="syz.7.14058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.749407][ T40] audit: type=1400 audit(960.197:57828): avc: denied { getopt } for pid=10164 comm="syz.8.14057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.755691][ T40] audit: type=1400 audit(960.197:57829): avc: denied { write } for pid=10167 comm="syz.7.14058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.765833][ T40] audit: type=1400 audit(960.197:57830): avc: denied { read } for pid=10167 comm="syz.7.14058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.772159][ T40] audit: type=1400 audit(960.197:57831): avc: denied { ioctl } for pid=10167 comm="syz.7.14058" path="socket:[124785]" dev="sockfs" ino=124785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.782454][ T40] audit: type=1400 audit(960.253:57832): avc: denied { bpf } for pid=10178 comm="syz.8.14061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.813091][T10187] ptrace attach of "/syz-executor exec"[9357] was attempted by "/syz-executor exec"[10187] [ 474.926816][ T40] audit: type=1400 audit(960.393:57833): avc: denied { create } for pid=10198 comm="syz.7.14067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.023707][ T6156] Bluetooth: hci2: command tx timeout [ 475.121247][ T1346] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 475.303223][ T1346] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.306731][ T1346] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.309881][ T1346] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.313991][ T1346] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.316951][ T1346] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.322844][ T1346] usb 13-1: config 0 descriptor?? [ 475.758876][ T1346] hid_parser_main: 5 callbacks suppressed [ 475.758891][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.766232][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.768769][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.771939][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.774335][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.776752][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.779212][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.781641][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.786587][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.790872][ T1346] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 475.802803][ T1346] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 475.881663][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.884018][T10256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.029468][ T1346] usb 13-1: USB disconnect, device number 4 [ 476.314112][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14092'. [ 476.713260][T10352] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14103'. [ 477.151498][ T6209] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 477.172845][ T1207] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 477.311900][ T6209] usb 13-1: Using ep0 maxpacket: 8 [ 477.314952][ T6209] usb 13-1: config 0 has an invalid interface number: 186 but max is 0 [ 477.317497][ T6209] usb 13-1: config 0 has no interface number 0 [ 477.319486][ T6209] usb 13-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.323153][ T6209] usb 13-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 477.326628][ T6209] usb 13-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 477.330257][ T6209] usb 13-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 477.333299][ T1207] usb 9-1: Using ep0 maxpacket: 16 [ 477.334358][ T6209] usb 13-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.337078][ T1207] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.341240][ T6209] usb 13-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 477.342912][ T1207] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.346431][ T6209] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.349552][ T1207] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.351651][ T6209] usb 13-1: Product: syz [ 477.351662][ T6209] usb 13-1: Manufacturer: syz [ 477.351670][ T6209] usb 13-1: SerialNumber: syz [ 477.354130][ T6209] usb 13-1: config 0 descriptor?? [ 477.356159][ T1207] usb 9-1: config 1 interface 0 has no altsetting 0 [ 477.367378][ T1207] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 477.370230][ T1207] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.376056][ T1207] usb 9-1: Product: syz [ 477.377487][ T1207] usb 9-1: Manufacturer: syz [ 477.379125][ T1207] usb 9-1: SerialNumber: syz [ 477.583241][ T6209] iowarrior 13-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 477.601768][ T1207] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 477.809065][ T6209] usb 13-1: USB disconnect, device number 5 [ 477.813963][T10388] iowarrior 13-1:0.186: Error -19 while submitting URB [ 477.820239][ T1207] usb 9-1: USB disconnect, device number 24 [ 477.830322][ T1207] usblp1: removed [ 478.761982][T10554] overlayfs: failed to clone upperpath [ 478.869105][T10563] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.14172'. [ 479.163591][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14179'. [ 479.166947][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14179'. [ 479.443842][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14181'. [ 479.446758][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14181'. [ 479.626858][T10609] gretap1: entered promiscuous mode [ 480.018681][T10669] netlink: 3900 bytes leftover after parsing attributes in process `syz.3.14210'. [ 480.022945][T10672] netlink: 348 bytes leftover after parsing attributes in process `syz.7.14211'. [ 480.059221][T10675] syzkaller1: entered promiscuous mode [ 480.061218][T10675] syzkaller1: entered allmulticast mode [ 480.091653][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 480.091669][ T40] audit: type=1400 audit(965.217:58018): avc: denied { perfmon } for pid=10678 comm="syz.3.14213" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.225731][ T40] audit: type=1400 audit(965.348:58019): avc: denied { setattr } for pid=10686 comm="syz.7.14215" name="/" dev="9p" ino=72614169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.235068][ T40] audit: type=1400 audit(965.357:58020): avc: denied { module_request } for pid=10688 comm="syz.3.14216" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 480.287187][ T40] audit: type=1400 audit(965.404:58021): avc: denied { write } for pid=10696 comm="syz.8.14218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.296102][ T40] audit: type=1400 audit(965.404:58022): avc: denied { connect } for pid=10696 comm="syz.8.14218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.302034][ T40] audit: type=1400 audit(965.404:58023): avc: denied { name_connect } for pid=10696 comm="syz.8.14218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 480.308949][ T40] audit: type=1400 audit(965.404:58024): avc: denied { name_connect } for pid=10696 comm="syz.8.14218" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 480.315638][ T40] audit: type=1400 audit(965.404:58025): avc: denied { shutdown } for pid=10696 comm="syz.8.14218" laddr=fe80::13 lport=36665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.322239][T10699] xt_hashlimit: size too large, truncated to 1048576 [ 480.356114][ T40] audit: type=1400 audit(965.469:58026): avc: denied { read } for pid=10705 comm="syz.8.14221" dev="nsfs" ino=4026534068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 480.363226][ T40] audit: type=1400 audit(965.469:58027): avc: denied { open } for pid=10705 comm="syz.8.14221" path="net:[4026534068]" dev="nsfs" ino=4026534068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 480.367533][T10706] xfrm0 speed is unknown, defaulting to 1000 [ 480.422220][T10727] kvm: user requested TSC rate below hardware speed [ 480.701270][T10756] syzkaller1: entered promiscuous mode [ 480.704377][T10756] syzkaller1: entered allmulticast mode [ 481.161645][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14245'. [ 481.979791][T10877] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14267'. [ 482.011097][T10879] overlayfs: failed to clone lowerpath [ 482.069806][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14272'. [ 482.420916][T10936] mmap: syz.3.14289 (10936): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 483.002874][ T6546] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 483.174120][ T6546] usb 12-1: Using ep0 maxpacket: 8 [ 483.180406][ T6546] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.183923][ T6546] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.187231][ T6546] usb 12-1: config 0 interface 0 has no altsetting 0 [ 483.189408][ T6546] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 483.192270][ T6546] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.198311][ T6546] usb 12-1: config 0 descriptor?? [ 483.411113][ T6156] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 483.414096][ T6156] Bluetooth: hci2: Injecting HCI hardware error event [ 483.418135][ T6156] Bluetooth: hci2: hardware error 0x00 [ 483.420083][ T1346] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 483.592791][ T1346] usb 13-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 483.596433][ T1346] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.599530][ T1346] usb 13-1: config 0 interface 0 has no altsetting 0 [ 483.603502][ T1346] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 483.606413][ T1346] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 483.609185][ T1346] usb 13-1: Product: syz [ 483.610680][ T1346] usb 13-1: Manufacturer: syz [ 483.612433][ T1346] usb 13-1: SerialNumber: syz [ 483.615710][ T1346] usb 13-1: config 0 descriptor?? [ 483.620244][ T1346] usb 13-1: selecting invalid altsetting 0 [ 483.637003][ T6546] hid_parser_main: 28 callbacks suppressed [ 483.637017][ T6546] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 483.641346][ T6546] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 483.643530][ T6546] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 483.646042][ T6546] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 483.648311][ T6546] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 483.650854][ T6546] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 483.655002][T11014] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 483.836369][ T1346] usb 13-1: USB disconnect, device number 6 [ 483.841677][T11028] nullb0: [POWERTEC] p1 [ 483.845688][T11028] nullb0: p1 start 809004142 is beyond EOD, truncated [ 483.852019][ T59] usb 12-1: USB disconnect, device number 8 [ 484.016806][T11068] sctp: [Deprecated]: syz.4.14316 (pid 11068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.016806][T11068] Use struct sctp_sack_info instead [ 484.178266][T11076] netlink: 'syz.4.14319': attribute type 1 has an invalid length. [ 484.181138][T11076] netlink: 'syz.4.14319': attribute type 1 has an invalid length. [ 484.646672][T11124] __nla_validate_parse: 3 callbacks suppressed [ 484.646683][T11124] netlink: 104 bytes leftover after parsing attributes in process `syz.8.14337'. [ 484.661563][T11136] netlink: 200 bytes leftover after parsing attributes in process `syz.4.14342'. [ 484.728247][T11140] netfs: Couldn't get user pages (rc=-14) [ 484.731808][T11140] netfs: Zero-sized read [R=24] [ 484.776537][T11154] loop6: detected capacity change from 0 to 2640 [ 484.779828][ T1363] buffer_io_error: 60 callbacks suppressed [ 484.779839][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.784392][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.786831][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.790145][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.792654][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.795914][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.798559][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.802488][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.805090][ T1363] ldm_validate_partition_table(): Disk read failed. [ 484.807235][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.809823][ T1363] Buffer I/O error on dev loop6, logical block 0, async page read [ 484.813012][ T1363] Dev loop6: unable to read RDB block 0 [ 484.814966][ T1363] loop6: unable to read partition table [ 484.817846][T11154] ldm_validate_partition_table(): Disk read failed. [ 484.820465][T11154] Dev loop6: unable to read RDB block 0 [ 484.823517][T11154] loop6: unable to read partition table [ 484.825430][T11154] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 484.856902][ T5333] ldm_validate_partition_table(): Disk read failed. [ 484.859368][ T5333] Dev loop6: unable to read RDB block 0 [ 484.861644][ T5333] loop6: unable to read partition table [ 485.185275][ T60] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 485.356378][ T60] usb 13-1: Using ep0 maxpacket: 8 [ 485.363192][ T60] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 485.366817][ T60] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 485.370498][ T60] usb 13-1: config 0 interface 0 has no altsetting 0 [ 485.372726][ T60] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 485.375715][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.386824][ T60] usb 13-1: config 0 descriptor?? [ 485.389321][T11167] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 485.506339][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 485.506351][ T40] audit: type=1400 audit(970.284:58152): avc: denied { read write } for pid=11201 comm="syz.7.14360" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 485.515624][ T40] audit: type=1400 audit(970.284:58153): avc: denied { open } for pid=11201 comm="syz.7.14360" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 485.522961][ T40] audit: type=1400 audit(970.284:58154): avc: denied { ioctl } for pid=11201 comm="syz.7.14360" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 485.604493][ T40] audit: type=1400 audit(970.377:58155): avc: denied { read } for pid=11208 comm="syz.4.14363" dev="nsfs" ino=4026533052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.613068][ T40] audit: type=1400 audit(970.377:58156): avc: denied { open } for pid=11208 comm="syz.4.14363" path="net:[4026533052]" dev="nsfs" ino=4026533052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.620446][ T40] audit: type=1400 audit(970.377:58157): avc: denied { create } for pid=11208 comm="syz.4.14363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.627075][ T40] audit: type=1400 audit(970.377:58158): avc: denied { ioctl } for pid=11166 comm="syz.8.14351" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.635508][ T40] audit: type=1400 audit(970.386:58159): avc: denied { bind } for pid=11208 comm="syz.4.14363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.641538][ T40] audit: type=1400 audit(970.386:58160): avc: denied { listen } for pid=11208 comm="syz.4.14363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.667040][ T40] audit: type=1400 audit(970.433:58161): avc: denied { perfmon } for pid=11215 comm="syz.3.14365" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.731851][ T6156] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 485.829217][ T60] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 485.832566][ T60] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 485.835363][ T60] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 485.838821][ T60] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 485.841454][ T60] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 485.844629][ T60] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 486.048191][ T60] usb 13-1: USB disconnect, device number 7 [ 486.745417][T11356] xfrm0 speed is unknown, defaulting to 1000 [ 487.683344][T11452] ------------[ cut here ]------------ [ 487.686404][T11452] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 487.691748][T11452] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#2: syz.3.14428/11452 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.696720][T11452] Modules linked in: [ 487.699804][T11452] CPU: 2 UID: 0 PID: 11452 Comm: syz.3.14428 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.703866][T11452] Tainted: [L]=SOFTLOCKUP [ 487.705650][T11452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.709800][T11452] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 487.712150][T11452] Code: 00 48 8d 3d c5 30 c1 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 02 eb e3 fa e8 4d 60 6a 04 [ 487.720168][T11452] RSP: 0018:ffffc9000d8ef120 EFLAGS: 00010246 [ 487.722783][T11452] RAX: ffff88805f70ea90 RBX: 0000000000000000 RCX: ffff88804cb24ec0 [ 487.725985][T11452] RDX: 0000000000000000 RSI: ffff88805f70f002 RDI: ffffffff90e5dfb0 [ 487.729232][T11452] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 487.732650][T11452] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 487.736039][T11452] R13: ffff88804cb25090 R14: ffff8880495b3100 R15: 0000000000000005 [ 487.738841][T11452] FS: 00007f9d228206c0(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000 [ 487.742334][T11452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.745053][T11452] CR2: 0000200000001080 CR3: 000000001eee2000 CR4: 0000000000352ef0 [ 487.748294][T11452] Call Trace: [ 487.749385][T11452] [ 487.750617][T11452] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 487.753400][T11452] mac80211_hwsim_sta_add+0xc9/0x290 [ 487.755573][T11452] drv_sta_state+0x887/0x1960 [ 487.757503][T11452] sta_info_insert_rcu+0x170b/0x2fa0 [ 487.759442][T11452] sta_info_insert+0x16/0xd0 [ 487.761381][T11452] ieee80211_add_station+0x471/0x6d0 [ 487.763671][T11452] nl80211_new_station+0x145b/0x1dd0 [ 487.765386][T11452] ? __pfx_nl80211_new_station+0x10/0x10 [ 487.767217][T11452] ? nl80211_pre_doit+0x19a/0xae0 [ 487.768834][T11452] genl_family_rcv_msg_doit+0x214/0x300 [ 487.770618][T11452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.772553][T11452] ? bpf_lsm_capable+0x9/0x10 [ 487.774218][T11452] ? security_capable+0x80/0x260 [ 487.775813][T11452] ? ns_capable+0xd2/0xf0 [ 487.777176][T11452] genl_rcv_msg+0x560/0x800 [ 487.778599][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.780163][T11452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 487.781840][T11452] ? __pfx_nl80211_new_station+0x10/0x10 [ 487.783624][T11452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 487.785404][T11452] netlink_rcv_skb+0x159/0x420 [ 487.786933][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.788533][T11452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.790167][T11452] ? netlink_deliver_tap+0x1ae/0xcc0 [ 487.791836][T11452] genl_rcv+0x28/0x40 [ 487.793112][T11452] netlink_unicast+0x5aa/0x870 [ 487.794662][T11452] ? __pfx_netlink_unicast+0x10/0x10 [ 487.796443][T11452] netlink_sendmsg+0x8b0/0xda0 [ 487.797953][T11452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.799655][T11452] ? __might_fault+0x60/0x140 [ 487.801112][T11452] ____sys_sendmsg+0xa54/0xc30 [ 487.802638][T11452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.804339][T11452] ? __pfx_futex_wake_mark+0x10/0x10 [ 487.806081][T11452] ___sys_sendmsg+0x190/0x1e0 [ 487.807618][T11452] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.809314][T11452] __sys_sendmsg+0x170/0x220 [ 487.810805][T11452] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.812479][T11452] ? __x64_sys_futex+0x34f/0x4d0 [ 487.814079][T11452] do_syscall_64+0x106/0xf80 [ 487.815579][T11452] ? clear_bhb_loop+0x40/0x90 [ 487.817167][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.819056][T11452] RIP: 0033:0x7f9d2199c139 [ 487.820485][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.826507][T11452] RSP: 002b:00007f9d22820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.829252][T11452] RAX: ffffffffffffffda RBX: 00007f9d21c15fa0 RCX: 00007f9d2199c139 [ 487.831770][T11452] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 487.834270][T11452] RBP: 00007f9d21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 487.836774][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.839373][T11452] R13: 00007f9d21c16038 R14: 00007f9d21c15fa0 R15: 00007ffd54ed3038 [ 487.841872][T11452] [ 487.842884][T11452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.845192][T11452] CPU: 2 UID: 0 PID: 11452 Comm: syz.3.14428 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.848615][T11452] Tainted: [L]=SOFTLOCKUP [ 487.850005][T11452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.853175][T11452] Call Trace: [ 487.854209][T11452] [ 487.855170][T11452] dump_stack_lvl+0x100/0x190 [ 487.856682][T11452] vpanic+0x552/0x970 [ 487.857945][T11452] ? __pfx_vpanic+0x10/0x10 [ 487.859469][T11452] panic+0xd1/0xe0 [ 487.860666][T11452] ? __pfx_panic+0x10/0x10 [ 487.862081][T11452] check_panic_on_warn.cold+0x19/0x34 [ 487.863798][T11452] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 487.865742][T11452] __warn.cold+0x191/0x348 [ 487.867191][T11452] __report_bug+0x296/0x3d0 [ 487.868668][T11452] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 487.870589][T11452] ? __pfx___report_bug+0x10/0x10 [ 487.872193][T11452] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 487.874045][T11452] ? __bfs+0x150/0x2a0 [ 487.875378][T11452] report_bug_entry+0xe1/0x290 [ 487.876909][T11452] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 487.878880][T11452] handle_bug+0x1c9/0x2a0 [ 487.880289][T11452] exc_invalid_op+0x17/0x50 [ 487.881733][T11452] asm_exc_invalid_op+0x1a/0x20 [ 487.883300][T11452] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 487.885531][T11452] Code: 00 48 8d 3d c5 30 c1 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 02 eb e3 fa e8 4d 60 6a 04 [ 487.891473][T11452] RSP: 0018:ffffc9000d8ef120 EFLAGS: 00010246 [ 487.893528][T11452] RAX: ffff88805f70ea90 RBX: 0000000000000000 RCX: ffff88804cb24ec0 [ 487.896035][T11452] RDX: 0000000000000000 RSI: ffff88805f70f002 RDI: ffffffff90e5dfb0 [ 487.898500][T11452] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 487.901102][T11452] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 487.903638][T11452] R13: ffff88804cb25090 R14: ffff8880495b3100 R15: 0000000000000005 [ 487.906110][T11452] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 487.908037][T11452] mac80211_hwsim_sta_add+0xc9/0x290 [ 487.909768][T11452] drv_sta_state+0x887/0x1960 [ 487.911270][T11452] sta_info_insert_rcu+0x170b/0x2fa0 [ 487.912939][T11452] sta_info_insert+0x16/0xd0 [ 487.914387][T11452] ieee80211_add_station+0x471/0x6d0 [ 487.916025][T11452] nl80211_new_station+0x145b/0x1dd0 [ 487.917625][T11452] ? __pfx_nl80211_new_station+0x10/0x10 [ 487.919339][T11452] ? nl80211_pre_doit+0x19a/0xae0 [ 487.920907][T11452] genl_family_rcv_msg_doit+0x214/0x300 [ 487.922491][T11452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.924368][T11452] ? bpf_lsm_capable+0x9/0x10 [ 487.925798][T11452] ? security_capable+0x80/0x260 [ 487.927413][T11452] ? ns_capable+0xd2/0xf0 [ 487.928774][T11452] genl_rcv_msg+0x560/0x800 [ 487.930225][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.931850][T11452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 487.933567][T11452] ? __pfx_nl80211_new_station+0x10/0x10 [ 487.935368][T11452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 487.937074][T11452] netlink_rcv_skb+0x159/0x420 [ 487.938678][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.940303][T11452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.941996][T11452] ? netlink_deliver_tap+0x1ae/0xcc0 [ 487.943733][T11452] genl_rcv+0x28/0x40 [ 487.945038][T11452] netlink_unicast+0x5aa/0x870 [ 487.946581][T11452] ? __pfx_netlink_unicast+0x10/0x10 [ 487.948333][T11452] netlink_sendmsg+0x8b0/0xda0 [ 487.949873][T11452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.951572][T11452] ? __might_fault+0x60/0x140 [ 487.953080][T11452] ____sys_sendmsg+0xa54/0xc30 [ 487.954611][T11452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.956309][T11452] ? __pfx_futex_wake_mark+0x10/0x10 [ 487.958010][T11452] ___sys_sendmsg+0x190/0x1e0 [ 487.959563][T11452] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.961238][T11452] __sys_sendmsg+0x170/0x220 [ 487.962714][T11452] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.964361][T11452] ? __x64_sys_futex+0x34f/0x4d0 [ 487.965949][T11452] do_syscall_64+0x106/0xf80 [ 487.967459][T11452] ? clear_bhb_loop+0x40/0x90 [ 487.968995][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.970864][T11452] RIP: 0033:0x7f9d2199c139 [ 487.972299][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.978132][T11452] RSP: 002b:00007f9d22820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.980723][T11452] RAX: ffffffffffffffda RBX: 00007f9d21c15fa0 RCX: 00007f9d2199c139 [ 487.983341][T11452] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 487.985833][T11452] RBP: 00007f9d21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 487.988400][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.990949][T11452] R13: 00007f9d21c16038 R14: 00007f9d21c15fa0 R15: 00007ffd54ed3038 [ 487.993486][T11452] [ 487.995298][T11452] Kernel Offset: disabled [ 487.996696][T11452] Rebooting in 86400 seconds..