last executing test programs: 2m49.760704892s ago: executing program 4 (id=1916): r0 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) 2m48.806160801s ago: executing program 4 (id=1936): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='\r', 0x160a}], 0x1) 2m48.656168504s ago: executing program 4 (id=1938): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) 2m48.563960089s ago: executing program 4 (id=1941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) 2m48.434303897s ago: executing program 4 (id=1945): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x0, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x2, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) 2m48.31198003s ago: executing program 4 (id=1948): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008550e, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, 0x0, 0x0, 0x200, 0xffffffff, 0x0, 0x218, 0x0, 0x0}) 2m41.548595385s ago: executing program 1 (id=2136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x1, 0x0, &(0x7f0000000080)='u', 0x0}, 0x50) 2m41.45934067s ago: executing program 1 (id=2139): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "fcfffff48f00"}) 2m41.337272329s ago: executing program 1 (id=2143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) 2m41.227279075s ago: executing program 1 (id=2145): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) 2m41.137656632s ago: executing program 1 (id=2148): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c880}, 0x40002) 2m41.073261336s ago: executing program 1 (id=2151): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 2m32.197860803s ago: executing program 32 (id=1948): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008550e, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, 0x0, 0x0, 0x200, 0xffffffff, 0x0, 0x218, 0x0, 0x0}) 2m24.968421255s ago: executing program 33 (id=2151): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 2m7.389021014s ago: executing program 5 (id=3025): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004000) 2m7.30626082s ago: executing program 5 (id=3027): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0xffffffffffffffff) 2m7.23997309s ago: executing program 5 (id=3030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x8046) 2m7.151372776s ago: executing program 5 (id=3033): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) 2m7.023617682s ago: executing program 5 (id=3036): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 2m6.751107499s ago: executing program 5 (id=3044): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x13, 0x2, 0x0, 0x5, 0x0}) 1m50.666184228s ago: executing program 34 (id=3044): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x13, 0x2, 0x0, 0x5, 0x0}) 1m48.348613013s ago: executing program 0 (id=3632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000ff0100"}) 1m48.152019191s ago: executing program 0 (id=3637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb430500017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1m48.018851216s ago: executing program 0 (id=3641): r0 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 1m47.840310653s ago: executing program 0 (id=3645): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) 1m47.744094185s ago: executing program 0 (id=3647): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1m47.590887871s ago: executing program 0 (id=3650): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 1m31.562485344s ago: executing program 35 (id=3650): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 13.721000329s ago: executing program 3 (id=5784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) 13.563130986s ago: executing program 3 (id=5788): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004044104d7a00000000000109022d96010000006c090400020103000300092101000201220700090581030002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x8, {0x8, 0xd, "934ac61234b8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.639623962s ago: executing program 3 (id=5831): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) 10.152404018s ago: executing program 3 (id=5843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 10.042190166s ago: executing program 3 (id=5844): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) 9.915673031s ago: executing program 3 (id=5845): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x8001, 0x2, 0x1, 0x7, 0x4, 0xccb, 0x8, 0xaa, 0xd, 0x100, 0x0, 0x1, 0x5, 0x7, 0x6, 0xffffffff, 0x1, 0x1a449, 0xffffffff, 0x40000003, 0x89, 0x2, 0x2, 0x20001e58, 0x115, 0x8, 0x3c, 0xa, 0x4, 0x7, 0xd]}) 2.160381514s ago: executing program 6 (id=5959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) 2.029968784s ago: executing program 6 (id=5962): sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1.915064093s ago: executing program 6 (id=5965): r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) 1.773001305s ago: executing program 8 (id=5968): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x48010) 1.69911301s ago: executing program 8 (id=5971): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x4004, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd, 0x5, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default]}) 1.688826065s ago: executing program 6 (id=5972): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 1.619294849s ago: executing program 7 (id=5973): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfdff]}}], 0xffc8) 1.560700601s ago: executing program 8 (id=5974): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @broadcast}}}}) 1.550069191s ago: executing program 6 (id=5975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.511230854s ago: executing program 7 (id=5977): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) 1.4116559s ago: executing program 6 (id=5978): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x10, &(0x7f0000000280)={0x0, 0x31}, 0x0, 0x0}) 1.410557552s ago: executing program 7 (id=5979): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x0, 0x0) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r1, 0x1, &(0x7f0000003d80)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000003bc0)="c6", 0x1, 0x800}]) 1.400595055s ago: executing program 8 (id=5980): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) 1.289024513s ago: executing program 8 (id=5983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x24}}, 0x10) 1.242438443s ago: executing program 7 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000b00001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000fff28500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003a0c0000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.140024475s ago: executing program 8 (id=5986): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xf, 0x5200, 0x1, &(0x7f0000000280)="1c"}, {0x5, 0x4200, 0x0, 0x0}], 0x2}) 1.091746549s ago: executing program 7 (id=5987): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) 1.030652406s ago: executing program 7 (id=5989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x3, '\x00'}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0x8, "069011aa"}]}}, 0x0}, 0xfffffffffffffffc) 567.554378ms ago: executing program 2 (id=5995): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 471.220085ms ago: executing program 2 (id=5996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='contention_end\x00', r0, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mmu_write_cr3\x00', r0}, 0x18) 234.536732ms ago: executing program 2 (id=5997): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) 184.253602ms ago: executing program 2 (id=5998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='mm_migrate_pages\x00', r0, 0x0, 0x1005}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 106.921167ms ago: executing program 2 (id=5999): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x400087, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x27f}) 0s ago: executing program 2 (id=6000): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): greater than 23:59:59 [ 276.538996][T14373] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4003'. [ 277.097100][T14418] openvswitch: netlink: EtherType 53b is less than min 600 [ 277.107867][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4021'. [ 277.124888][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4021'. [ 277.295415][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 277.469502][ T24] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 277.482116][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.495526][ T24] usb 8-1: config 0 has no interface number 0 [ 277.503974][ T24] usb 8-1: config 0 interface 52 has no altsetting 0 [ 277.514167][ T24] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 277.527349][ T24] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=24 [ 277.535982][ T24] usb 8-1: Manufacturer: syz [ 277.540660][ T24] usb 8-1: SerialNumber: syz [ 277.550540][ T24] usb 8-1: config 0 descriptor?? [ 277.562716][ T5893] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 277.576573][ T24] hub 8-1:0.52: bad descriptor, ignoring hub [ 277.582635][ T24] hub 8-1:0.52: probe with driver hub failed with error -5 [ 277.749545][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.760077][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.773302][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 277.785726][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.809665][ T5893] usb 4-1: SerialNumber: syz [ 277.840362][ T5893] usb 4-1: 0:2 : does not exist [ 278.053277][T14524] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4050'. [ 278.131763][T14534] netlink: 'syz.6.4053': attribute type 9 has an invalid length. [ 278.153463][ T10] usb 8-1: USB disconnect, device number 2 [ 278.314161][ T10] usb 4-1: USB disconnect, device number 83 [ 279.184552][T14632] xt_CONNSECMARK: invalid mode: 66 [ 279.733370][T14681] trusted_key: encrypted_key: master key parameter '' is invalid [ 279.914333][T14695] netlink: 'syz.7.4116': attribute type 25 has an invalid length. [ 279.932920][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 279.932937][ T30] audit: type=1400 audit(2000000109.084:717): avc: denied { create } for pid=14698 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.993898][ T30] audit: type=1400 audit(2000000109.103:718): avc: denied { write } for pid=14698 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.018074][T14703] erspan0: entered promiscuous mode [ 280.033906][T14703] erspan0: entered allmulticast mode [ 280.162465][ T30] audit: type=1400 audit(2000000109.300:719): avc: denied { write } for pid=14715 comm="syz.7.4127" name="ip_vs" dev="proc" ino=4026534496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 280.185171][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.347869][ T30] audit: type=1400 audit(2000000109.477:720): avc: denied { read } for pid=14728 comm="syz.2.4130" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.410474][ T30] audit: type=1400 audit(2000000109.477:721): avc: denied { open } for pid=14728 comm="syz.2.4130" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.433539][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.492090][ T30] audit: type=1400 audit(2000000109.496:722): avc: denied { ioctl } for pid=14728 comm="syz.2.4130" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.654427][ T30] audit: type=1400 audit(2000000109.767:723): avc: denied { getopt } for pid=14749 comm="syz.6.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.733866][ T30] audit: type=1400 audit(2000000109.842:724): avc: denied { execmem } for pid=14753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 280.804328][ T30] audit: type=1400 audit(2000000109.908:725): avc: denied { create } for pid=14759 comm="syz.7.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.851472][ T30] audit: type=1400 audit(2000000109.908:726): avc: denied { bind } for pid=14759 comm="syz.7.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.956917][T14773] netlink: 'syz.6.4151': attribute type 21 has an invalid length. [ 280.994403][ T1163] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.003172][ T1163] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.049738][ T1163] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.071043][ T1087] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.195681][T14789] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4156'. [ 281.266883][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 281.282784][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 281.293104][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 281.316016][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 281.323824][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 281.417766][T14809] netlink: 'syz.3.4161': attribute type 10 has an invalid length. [ 281.468147][T14809] team0: Port device dummy0 added [ 281.580441][T14824] xt_hashlimit: max too large, truncated to 1048576 [ 281.601209][T14824] xt_limit: Overflow, try lower: 0/0 [ 281.664710][T14828] QAT: Device 3 not found [ 282.056066][ T5880] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 282.091865][T14881] bond3: entered promiscuous mode [ 282.102581][T14881] bond3: entered allmulticast mode [ 282.109013][T14881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.223484][T14798] chnl_net:caif_netlink_parms(): no params data found [ 282.239680][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 282.246515][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.271520][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.299108][ T5880] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 282.323701][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.350230][ T5880] usb 8-1: config 0 descriptor?? [ 282.372800][ T5880] xbox_remote_probe: endpoint_in message size==0? [ 282.495673][T14798] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.507527][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.522226][T14798] bridge_slave_0: entered allmulticast mode [ 282.536126][T14798] bridge_slave_0: entered promiscuous mode [ 282.557194][T14798] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.564492][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.573949][T14798] bridge_slave_1: entered allmulticast mode [ 282.588922][ T5880] usbhid 8-1:0.0: can't add hid device: -71 [ 282.594947][ T5880] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 282.606520][T14798] bridge_slave_1: entered promiscuous mode [ 282.632300][ T5880] usb 8-1: USB disconnect, device number 3 [ 282.696112][T14798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.709066][T14798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.817436][T14798] team0: Port device team_slave_0 added [ 282.829711][T14798] team0: Port device team_slave_1 added [ 282.917966][T14798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.939324][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.982217][T14798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.000131][T14798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.007528][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.072146][T14798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.162408][T14798] hsr_slave_0: entered promiscuous mode [ 283.188652][T14798] hsr_slave_1: entered promiscuous mode [ 283.195095][T14798] debugfs: 'hsr0' already exists in 'hsr' [ 283.213146][T14798] Cannot create hsr debugfs directory [ 283.496148][ T5834] Bluetooth: hci8: command tx timeout [ 283.618574][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4214'. [ 284.260507][T16001] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4226'. [ 285.720438][ T5834] Bluetooth: hci8: command tx timeout [ 286.304778][T15231] syz.7.4206: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.325932][T15231] CPU: 0 UID: 0 PID: 15231 Comm: syz.7.4206 Not tainted syzkaller #0 PREEMPT(full) [ 286.325959][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.325970][T15231] Call Trace: [ 286.325977][T15231] [ 286.325984][T15231] dump_stack_lvl+0x16c/0x1f0 [ 286.326017][T15231] warn_alloc+0x248/0x3a0 [ 286.326047][T15231] ? __pfx_warn_alloc+0x10/0x10 [ 286.326084][T15231] ? veth_dev_init+0x37c/0x570 [ 286.326101][T15231] ? __vmalloc_node_noprof+0xad/0xf0 [ 286.326128][T15231] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 286.326161][T15231] ? veth_dev_init+0x37c/0x570 [ 286.326184][T15231] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.326218][T15231] __kvmalloc_node_noprof+0x431/0x9c0 [ 286.326236][T15231] ? veth_dev_init+0x37c/0x570 [ 286.326262][T15231] ? veth_dev_init+0x37c/0x570 [ 286.326278][T15231] ? __pfx_netdev_lock_cmp_fn+0x10/0x10 [ 286.326300][T15231] ? veth_dev_init+0x37c/0x570 [ 286.326315][T15231] veth_dev_init+0x37c/0x570 [ 286.326331][T15231] ? kasan_save_track+0x14/0x30 [ 286.326350][T15231] ? __pfx_veth_dev_init+0x10/0x10 [ 286.326367][T15231] register_netdevice+0x653/0x2270 [ 286.326400][T15231] ? __pfx_register_netdevice+0x10/0x10 [ 286.326427][T15231] ? dev_addr_mod+0x316/0x540 [ 286.326452][T15231] veth_newlink+0x44d/0xa00 [ 286.326471][T15231] ? __pfx_veth_newlink+0x10/0x10 [ 286.326534][T15231] ? validate_linkmsg+0x57c/0xb60 [ 286.326561][T15231] ? __pfx_validate_linkmsg+0x10/0x10 [ 286.326585][T15231] ? alloc_netdev_mqs+0xe17/0x1550 [ 286.326615][T15231] ? rtnl_create_link+0xa4a/0xf90 [ 286.326639][T15231] ? __pfx_veth_newlink+0x10/0x10 [ 286.326658][T15231] rtnl_newlink+0xc45/0x2000 [ 286.326692][T15231] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.326715][T15231] ? find_held_lock+0x2b/0x80 [ 286.326739][T15231] ? avc_has_perm_noaudit+0x117/0x3b0 [ 286.326770][T15231] ? avc_has_perm_noaudit+0x149/0x3b0 [ 286.326818][T15231] ? find_held_lock+0x2b/0x80 [ 286.326838][T15231] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.326861][T15231] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.326884][T15231] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 286.326911][T15231] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.326936][T15231] rtnetlink_rcv_msg+0x95e/0xe90 [ 286.326964][T15231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.326997][T15231] ? ref_tracker_free+0x37c/0x830 [ 286.327025][T15231] netlink_rcv_skb+0x158/0x420 [ 286.327053][T15231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.327081][T15231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.327117][T15231] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.327148][T15231] netlink_unicast+0x5aa/0x870 [ 286.327178][T15231] ? __pfx_netlink_unicast+0x10/0x10 [ 286.327212][T15231] netlink_sendmsg+0x8c8/0xdd0 [ 286.327246][T15231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.327283][T15231] ____sys_sendmsg+0xa98/0xc70 [ 286.327301][T15231] ? copy_msghdr_from_user+0x10a/0x160 [ 286.327325][T15231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.327349][T15231] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.327375][T15231] ___sys_sendmsg+0x134/0x1d0 [ 286.327396][T15231] ? futex_private_hash_put+0x176/0x300 [ 286.327426][T15231] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.327448][T15231] ? __lock_acquire+0x622/0x1c90 [ 286.327508][T15231] __sys_sendmsg+0x16d/0x220 [ 286.327533][T15231] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.327556][T15231] ? __x64_sys_futex+0x1e0/0x4c0 [ 286.327590][T15231] do_syscall_64+0xcd/0xfa0 [ 286.327620][T15231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.327639][T15231] RIP: 0033:0x7f937818f6c9 [ 286.327655][T15231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.327672][T15231] RSP: 002b:00007f937901c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.327690][T15231] RAX: ffffffffffffffda RBX: 00007f93783e5fa0 RCX: 00007f937818f6c9 [ 286.327703][T15231] RDX: 8ae257a062cc3564 RSI: 0000200000000200 RDI: 0000000000000003 [ 286.327714][T15231] RBP: 00007f9378211f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.327724][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.327735][T15231] R13: 00007f93783e6038 R14: 00007f93783e5fa0 R15: 00007fffa0154ef8 [ 286.327761][T15231] [ 286.327828][T15231] Mem-Info: [ 286.747698][T15231] active_anon:7047 inactive_anon:0 isolated_anon:0 [ 286.747698][T15231] active_file:15173 inactive_file:40711 isolated_file:0 [ 286.747698][T15231] unevictable:768 dirty:508 writeback:0 [ 286.747698][T15231] slab_reclaimable:12843 slab_unreclaimable:145416 [ 286.747698][T15231] mapped:50044 shmem:1365 pagetables:1484 [ 286.747698][T15231] sec_pagetables:0 bounce:0 [ 286.747698][T15231] kernel_misc_reclaimable:0 [ 286.747698][T15231] free:1191475 free_pcp:27921 free_cma:0 [ 286.796810][T15231] Node 0 active_anon:28188kB inactive_anon:0kB active_file:60636kB inactive_file:162644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:200120kB dirty:2020kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13876kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.828849][T15231] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.859628][T15231] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.889575][T15231] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 286.896822][T15231] Node 0 DMA32 free:882612kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28188kB inactive_anon:0kB active_file:60636kB inactive_file:162644kB unevictable:1536kB writepending:2020kB zspages:0kB present:3129332kB managed:2544868kB mlocked:0kB bounce:0kB free_pcp:66408kB local_pcp:30920kB free_cma:0kB [ 286.931892][T15231] lowmem_reserve[]: 0 0 1 1 1 [ 286.936847][T15231] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.967897][T15231] lowmem_reserve[]: 0 0 0 0 0 [ 286.973396][T15231] Node 1 Normal free:3867884kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:45432kB local_pcp:17608kB free_cma:0kB [ 287.006519][T15231] lowmem_reserve[]: 0 0 0 0 0 [ 287.011244][T15231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 287.024218][T15231] Node 0 DMA32: 1*4kB (U) 54*8kB (M) 126*16kB (UME) 155*32kB (UME) 26*64kB (ME) 76*128kB (ME) 58*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 205*4096kB (UM) = 882548kB [ 287.042277][T15231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 287.054766][T15231] Node 1 Normal: 194*4kB (UME) 55*8kB (UME) 50*16kB (UME) 82*32kB (UME) 32*64kB (UME) 10*128kB (UE) 4*256kB (UME) 1*512kB (M) 4*1024kB (UME) 2*2048kB (ME) 940*4096kB (M) = 3867936kB [ 287.072950][T15231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.082962][T15231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.092663][T15231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.102256][T15231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.111856][T15231] 57245 total pagecache pages [ 287.116527][T15231] 0 pages in swap cache [ 287.120720][T15231] Free swap = 124996kB [ 287.124859][T15231] Total swap = 124996kB [ 287.128983][T15231] 2097051 pages RAM [ 287.132818][T15231] 0 pages HighMem/MovableOnly [ 287.137475][T15231] 428744 pages reserved [ 287.142082][T15231] 0 pages cma reserved [ 287.944332][ T5834] Bluetooth: hci8: command tx timeout [ 289.739892][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 289.739910][ T30] audit: type=1400 audit(2000000118.261:755): avc: denied { create } for pid=23523 comm="syz.2.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.836885][ T30] audit: type=1400 audit(2000000118.261:756): avc: denied { write } for pid=23523 comm="syz.2.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.935199][ T30] audit: type=1400 audit(2000000118.448:757): avc: denied { read } for pid=14798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.935474][T14798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.022825][T23549] bridge1: entered promiscuous mode [ 290.031928][T14798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.070330][ T30] audit: type=1400 audit(2000000118.569:758): avc: denied { read } for pid=23556 comm="syz.7.4242" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.113913][ T30] audit: type=1400 audit(2000000118.597:759): avc: denied { open } for pid=23556 comm="syz.7.4242" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.177615][ T5834] Bluetooth: hci8: command tx timeout [ 290.198063][ T30] audit: type=1400 audit(2000000118.597:760): avc: denied { ioctl } for pid=23556 comm="syz.7.4242" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.202387][T14798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.276883][T14798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.503758][T14798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.530919][ T30] audit: type=1326 audit(2000000118.990:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.2.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 290.536094][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4253'. [ 290.595447][T14798] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.602959][ T30] audit: type=1326 audit(2000000118.990:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.2.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 290.642126][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.649275][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.671083][ T30] audit: type=1326 audit(2000000118.990:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.2.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 290.694482][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.733132][ T30] audit: type=1326 audit(2000000118.990:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.2.4252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 290.763049][T23604] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4258'. [ 290.780728][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.787902][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.099336][T23631] netlink: 'syz.7.4268': attribute type 1 has an invalid length. [ 291.118541][ T5879] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 291.250214][T14798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.290299][ T5879] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 291.298466][ T5879] usb 4-1: config 0 has no interface number 0 [ 291.307747][ T5879] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 291.332407][ T5879] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 291.364925][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.372996][ T5879] usb 4-1: Product: syz [ 291.407236][ T5879] usb 4-1: Manufacturer: syz [ 291.412001][ T5879] usb 4-1: SerialNumber: syz [ 291.429777][ T5879] usb 4-1: config 0 descriptor?? [ 291.435414][T23609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.686021][ T5879] radio-si470x 4-1:0.35: this is not a si470x device. [ 291.719759][ T5879] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 291.730954][ T5879] usb 4-1: USB disconnect, device number 84 [ 291.758849][T14798] veth0_vlan: entered promiscuous mode [ 291.815706][T14798] veth1_vlan: entered promiscuous mode [ 291.873218][T14798] veth0_macvtap: entered promiscuous mode [ 291.907333][T14798] veth1_macvtap: entered promiscuous mode [ 291.943958][T23692] bridge2: entered promiscuous mode [ 291.975432][T14798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.013570][T14798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.050510][T19857] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.070595][T19857] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.090021][T19857] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.135040][ T3492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.290079][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.314484][T23720] netlink: 'syz.6.4293': attribute type 22 has an invalid length. [ 292.330601][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.382860][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.412487][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.790481][T23759] ./file0: Can't open blockdev [ 292.941622][T23776] trusted_key: encrypted_key: keyword 'nʌ' not recognized [ 293.021627][T23782] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 293.096087][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 293.104573][T23789] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 293.145292][T23792] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 293.267882][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 293.291696][ T5893] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.303100][ T5893] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 293.330977][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.355807][ T5893] usb 9-1: config 0 descriptor?? [ 293.377380][ T5893] gspca_main: spca501-2.14.0 probing 0000:0000 [ 293.804702][ T5893] gspca_spca501: reg write: error -71 [ 293.821653][ T5893] spca501 9-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 293.853131][ T5893] spca501 9-1:0.0: probe with driver spca501 failed with error -22 [ 293.873718][ T5893] usb 9-1: USB disconnect, device number 2 [ 294.249288][T23881] wireguard0: entered promiscuous mode [ 294.260688][T23881] wireguard0: entered allmulticast mode [ 294.509920][T23898] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 294.522898][T23898] bond2 (unregistering): Released all slaves [ 294.555067][T23945] usb usb8: usbfs: process 23945 (syz.8.4362) did not claim interface 0 before use [ 294.663857][T23963] IPv6: sit1: Disabled Multicast RS [ 295.104817][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 295.104834][ T30] audit: type=1400 audit(2000000123.274:791): avc: denied { create } for pid=24018 comm="syz.2.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 295.157315][ T30] audit: type=1400 audit(2000000123.321:792): avc: denied { bind } for pid=24018 comm="syz.2.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 295.210606][ T30] audit: type=1400 audit(2000000123.377:793): avc: denied { create } for pid=24022 comm="syz.6.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 295.267908][ T30] audit: type=1400 audit(2000000123.415:794): avc: denied { getopt } for pid=24022 comm="syz.6.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 295.287405][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.492791][T24049] netlink: 'syz.6.4389': attribute type 10 has an invalid length. [ 295.500654][T24049] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4389'. [ 295.547187][T24049] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 295.564219][T24049] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 295.582107][T24049] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 295.733772][T24073] netlink: 'syz.6.4396': attribute type 1 has an invalid length. [ 295.969342][ T30] audit: type=1400 audit(2000000124.088:795): avc: denied { write } for pid=24089 comm="syz.3.4406" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.024831][ T30] audit: type=1400 audit(2000000124.126:796): avc: denied { nlmsg_read } for pid=24093 comm="syz.7.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.155418][ T30] audit: type=1400 audit(2000000124.257:797): avc: denied { connect } for pid=24103 comm="syz.8.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 296.265629][ T30] audit: type=1400 audit(2000000124.369:798): avc: denied { setopt } for pid=24110 comm="syz.3.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.384291][T24124] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.519241][T24132] netlink: 'syz.8.4420': attribute type 1 has an invalid length. [ 296.544515][T24132] netlink: 'syz.8.4420': attribute type 2 has an invalid length. [ 296.656061][ T30] audit: type=1400 audit(2000000124.724:799): avc: denied { write } for pid=24143 comm="syz.3.4424" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 296.765911][T24154] netlink: 'syz.7.4426': attribute type 10 has an invalid length. [ 296.800739][T24154] bridge0: port 3(netdevsim0) entered blocking state [ 296.832702][T24154] bridge0: port 3(netdevsim0) entered disabled state [ 296.844279][T24154] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 296.885194][T24154] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 296.904508][T24154] bridge0: port 3(netdevsim0) entered blocking state [ 296.911728][T24154] bridge0: port 3(netdevsim0) entered forwarding state [ 297.367975][T24202] xt_connbytes: Forcing CT accounting to be enabled [ 297.501808][ T30] audit: type=1400 audit(2000000125.519:800): avc: denied { append } for pid=24215 comm="syz.8.4454" name="nbd8" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.583416][T24223] libceph: resolve '0' (ret=-3): failed [ 297.701894][T24231] netlink: 'syz.3.4460': attribute type 4 has an invalid length. [ 297.744550][T24231] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4460'. [ 297.922969][T24255] netlink: zone id is out of range [ 297.943244][T24255] netlink: zone id is out of range [ 297.948399][T24255] netlink: zone id is out of range [ 297.963484][T24255] netlink: zone id is out of range [ 297.969007][T24255] netlink: zone id is out of range [ 297.975596][T24255] netlink: zone id is out of range [ 297.981174][T24255] netlink: get zone limit has 4 unknown bytes [ 298.142647][ T5893] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 298.302433][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 298.321625][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 298.334866][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.337759][T24289] netlink: 'syz.8.4485': attribute type 1 has an invalid length. [ 298.352307][ T5893] usb 4-1: Product: syz [ 298.357560][ T5893] usb 4-1: Manufacturer: syz [ 298.362176][ T5893] usb 4-1: SerialNumber: syz [ 298.369025][T24289] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4485'. [ 298.379251][T24289] netlink: 'syz.8.4485': attribute type 1 has an invalid length. [ 298.381138][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 298.415029][ T5893] usb 4-1: config 0 descriptor?? [ 298.506407][T24332] sock: sock_timestamping_bind_phc: sock not bind to device [ 298.569801][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 298.583281][ T5880] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 298.592726][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.600728][ T5880] usb 7-1: Product: syz [ 298.615941][ T5880] usb 7-1: Manufacturer: syz [ 298.620575][ T5880] usb 7-1: SerialNumber: syz [ 298.649694][ T5880] usb 7-1: config 0 descriptor?? [ 298.651440][ T5893] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 298.663469][ T5880] gspca_main: se401-2.14.0 probing 047d:5003 [ 298.878425][ T5893] usb write operation failed. (-71) [ 298.923465][ T5893] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.947520][ T5893] dvbdev: DVB: registering new adapter (Terratec H7) [ 298.963314][ T5893] usb 4-1: media controller created [ 298.976360][ T5893] usb read operation failed. (-71) [ 298.987180][ T5893] usb write operation failed. (-71) [ 299.011602][ T5893] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 299.041077][ T5893] usb 4-1: USB disconnect, device number 85 [ 299.097415][ T5880] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 299.116915][ T5880] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 299.151834][ T5880] usb 7-1: USB disconnect, device number 7 [ 299.336560][T24402] random: crng reseeded on system resumption [ 299.671387][ T5939] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 299.793751][T24440] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4522'. [ 299.866543][ T5939] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 299.866576][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.868975][ T5939] usb 3-1: config 0 descriptor?? [ 299.875990][ T5939] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 300.278607][T24475] netlink: 'syz.8.4537': attribute type 7 has an invalid length. [ 300.307762][ T5939] gspca_sunplus: reg_w_riv err -71 [ 300.324931][ T5939] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 300.354840][ T5939] usb 3-1: USB disconnect, device number 82 [ 300.531733][T24495] xt_nfacct: accounting object `syz1' does not exist [ 300.864696][T24521] Invalid ELF header magic: != ELF [ 300.867414][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 300.867429][ T30] audit: type=1400 audit(2000000128.672:826): avc: denied { module_load } for pid=24520 comm="syz.6.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 300.962732][T24526] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 301.504767][T24579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4575'. [ 301.612886][T24588] netlink: 'syz.2.4580': attribute type 15 has an invalid length. [ 301.660156][T24588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4580'. [ 301.808545][ T30] audit: type=1400 audit(2000000129.551:827): avc: denied { accept } for pid=24600 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.817494][T24607] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4587'. [ 302.175941][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4600'. [ 302.192166][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4600'. [ 302.344213][ T30] audit: type=1400 audit(2000000130.056:828): avc: denied { ioctl } for pid=24647 comm="syz.3.4606" path="socket:[42585]" dev="sockfs" ino=42585 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 302.368837][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.740734][ T30] audit: type=1400 audit(2000000130.421:829): avc: denied { bind } for pid=24680 comm="syz.2.4622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.852179][ T30] audit: type=1326 audit(2000000130.524:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24691 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937818f6c9 code=0x7ffc0000 [ 302.911612][ T30] audit: type=1326 audit(2000000130.561:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24691 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937818f6c9 code=0x7ffc0000 [ 302.935046][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.000432][ T30] audit: type=1326 audit(2000000130.561:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24691 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f937818f6c9 code=0x7ffc0000 [ 303.023765][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.124845][ T30] audit: type=1326 audit(2000000130.561:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24691 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937818f6c9 code=0x7ffc0000 [ 303.148250][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.179769][ T30] audit: type=1326 audit(2000000130.561:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24691 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937818f6c9 code=0x7ffc0000 [ 303.203185][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.228646][T24716] ipt_REJECT: TCP_RESET invalid for non-tcp [ 303.264472][ T30] audit: type=1400 audit(2000000130.617:835): avc: denied { setopt } for pid=24693 comm="syz.3.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.454767][T24730] kernel read not supported for file /!selinۡluxse6;-aejq > (pid: 24730 comm: syz.8.4644) [ 303.558226][T24740] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 303.603622][T24740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.743650][T24756] program syz.8.4655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.017112][T24782] netlink: 'syz.8.4667': attribute type 5 has an invalid length. [ 304.131554][T24790] nftables ruleset with unbound chain [ 304.799356][T24845] netlink: 356 bytes leftover after parsing attributes in process `syz.7.4696'. [ 304.936114][T24856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4700'. [ 305.081277][T24870] xt_TCPMSS: Only works on TCP SYN packets [ 305.210207][T24881] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4711'. [ 305.225577][T24881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.475415][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4721'. [ 305.518721][T24901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4721'. [ 305.549313][T24901] geneve3: entered promiscuous mode [ 305.554732][T24901] geneve3: entered allmulticast mode [ 305.634203][T24914] netlink: 184 bytes leftover after parsing attributes in process `syz.8.4726'. [ 305.694398][T24922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4727'. [ 306.217742][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 306.217761][ T30] audit: type=1326 audit(2000000133.676:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24963 comm="syz.6.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f35ea58f6c9 code=0x7ffc0000 [ 306.224283][T24966] netlink: 'syz.3.4749': attribute type 2 has an invalid length. [ 306.271292][ T30] audit: type=1326 audit(2000000133.676:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24963 comm="syz.6.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ea58f6c9 code=0x7ffc0000 [ 306.288337][T24966] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4749'. [ 306.315472][T24968] netlink: zone id is out of range [ 306.327920][T24968] netlink: zone id is out of range [ 306.334070][T24968] netlink: zone id is out of range [ 306.337014][T24971] Cannot find set identified by id 0 to match [ 306.339292][T24968] netlink: zone id is out of range [ 306.351166][ T30] audit: type=1326 audit(2000000133.676:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24963 comm="syz.6.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ea58f6c9 code=0x7ffc0000 [ 306.374555][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.381682][T24968] netlink: zone id is out of range [ 306.386936][T24968] netlink: zone id is out of range [ 306.393704][T24968] netlink: zone id is out of range [ 306.398976][T24968] netlink: zone id is out of range [ 306.515945][T24978] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 306.603858][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 306.629857][ T2337] pvrusb2: Failure uploading firmware1 [ 306.642882][ T2337] pvrusb2: Device initialization was not successful. [ 306.669658][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 306.697932][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 306.717013][ T30] audit: type=1400 audit(2000000134.134:958): avc: denied { ioctl } for pid=24991 comm="syz.2.4758" path="socket:[43161]" dev="sockfs" ino=43161 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 306.760251][ T48] pvrusb2: Device being rendered inoperable [ 307.176301][T25024] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.184874][T25024] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.192152][T25024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.245988][ T30] audit: type=1400 audit(2000000134.640:959): avc: denied { bind } for pid=25033 comm="syz.7.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.265228][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.312606][T25036] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 307.474980][ T30] audit: type=1400 audit(2000000134.845:960): avc: denied { getopt } for pid=25040 comm="syz.2.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.544234][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4778'. [ 307.629816][ T30] audit: type=1400 audit(2000000134.995:961): avc: denied { write } for pid=25046 comm="syz.3.4782" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.082251][T25053] bond1 (unregistering): Released all slaves [ 308.630110][ T30] audit: type=1400 audit(2000000135.940:962): avc: denied { ioctl } for pid=25187 comm="syz.3.4806" path="socket:[44153]" dev="sockfs" ino=44153 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.654915][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.897419][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.955174][ T30] audit: type=1400 audit(2000000136.239:963): avc: denied { accept } for pid=25212 comm="syz.6.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.060422][T25221] usb usb9: usbfs: process 25221 (syz.6.4820) did not claim interface 0 before use [ 309.121071][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.305943][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.468742][ T5834] Bluetooth: hci1: unexpected cc 0x1005 length: 3 < 8 [ 309.476341][ T5834] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 309.484821][ T30] audit: type=1400 audit(2000000136.725:964): avc: denied { read } for pid=25248 comm="syz.3.4832" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.535938][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.653305][T25261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4837'. [ 309.930955][ T13] bridge_slave_1: left allmulticast mode [ 309.956891][ T13] bridge_slave_1: left promiscuous mode [ 309.964286][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.103544][ T13] bridge_slave_0: left allmulticast mode [ 310.110797][ T13] bridge_slave_0: left promiscuous mode [ 310.133809][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.403610][T25330] IPVS: length: 161 != 8 [ 310.725370][T25352] delete_channel: no stack [ 312.164987][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.177533][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.189424][ T13] bond0 (unregistering): Released all slaves [ 312.202844][T25377] netlink: 'syz.8.4874': attribute type 1 has an invalid length. [ 312.350589][T25397] vlan1: entered promiscuous mode [ 312.355871][T25397] vlan1: entered allmulticast mode [ 312.395767][T25397] veth0_vlan: entered allmulticast mode [ 312.653879][T25417] geneve2: entered promiscuous mode [ 312.680827][T25417] geneve2: entered allmulticast mode [ 312.715113][ T1087] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.754693][ T1087] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.799250][ T1087] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.808550][ T1087] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.977754][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 312.977773][ T30] audit: type=1400 audit(2000000139.999:992): avc: denied { setopt } for pid=25452 comm="syz.8.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 313.173123][ T5880] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 313.242728][T25470] __nla_validate_parse: 1 callbacks suppressed [ 313.242747][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4907'. [ 313.262277][ T30] audit: type=1400 audit(2000000140.271:993): avc: denied { ioctl } for pid=25445 comm="syz.3.4900" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.287164][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.344553][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 313.361100][ T30] audit: type=1400 audit(2000000140.271:994): avc: denied { create } for pid=25473 comm="syz.8.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.408351][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.418139][ T5880] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 313.462978][ T30] audit: type=1400 audit(2000000140.280:995): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.466131][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.487085][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.563406][ T30] audit: type=1400 audit(2000000140.280:996): avc: denied { open } for pid=5820 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.593155][ T5880] usb 4-1: config 0 descriptor?? [ 313.623970][ T5880] xbox_remote_probe: Unexpected endpoint_in [ 313.633093][ T13] hsr_slave_0: left promiscuous mode [ 313.654642][ T5880] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 313.672874][ T30] audit: type=1400 audit(2000000140.280:997): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.698388][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.718671][ T13] hsr_slave_1: left promiscuous mode [ 313.724652][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.742183][ T30] audit: type=1400 audit(2000000140.317:998): avc: denied { search } for pid=25468 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.761101][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.774187][ T30] audit: type=1400 audit(2000000140.317:999): avc: denied { search } for pid=25468 comm="rm" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.796940][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.800661][ T30] audit: type=1400 audit(2000000140.317:1000): avc: denied { search } for pid=25468 comm="rm" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.821773][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.888244][ T13] veth1_macvtap: left promiscuous mode [ 313.901480][ T13] veth0_macvtap: left promiscuous mode [ 313.914446][ T13] veth1_vlan: left promiscuous mode [ 313.920571][ T5939] usb 4-1: USB disconnect, device number 86 [ 313.938735][ T30] audit: type=1400 audit(2000000140.317:1001): avc: denied { getattr } for pid=25468 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=12984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.945569][ T13] veth0_vlan: left promiscuous mode [ 313.964119][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.546460][T25541] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 314.876060][ T13] team0 (unregistering): Port device team_slave_1 removed [ 314.924309][ T13] team0 (unregistering): Port device team_slave_0 removed [ 315.456704][T25547] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4933'. [ 315.650679][T25552] syz.6.4936 (25552): drop_caches: 2 [ 315.706561][T25563] net_ratelimit: 9 callbacks suppressed [ 315.706582][T25563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.725853][T25664] bond5: Unable to set up delay as MII monitoring is disabled [ 316.733392][T25686] SET target dimension over the limit! [ 316.754541][T25664] bond5 (unregistering): Released all slaves [ 317.128720][T25757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.181393][ T71] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.384781][ T71] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.525993][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4989'. [ 317.703468][ T71] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.900142][ T71] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.396492][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.463850][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 318.463867][ T30] audit: type=1400 audit(2000000146.124:1071): avc: denied { create } for pid=25867 comm="syz.3.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 318.517075][ T30] audit: type=1400 audit(2000000146.143:1072): avc: denied { ioctl } for pid=25867 comm="syz.3.5014" path="socket:[44969]" dev="sockfs" ino=44969 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 318.546663][T25874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.557329][ T30] audit: type=1400 audit(2000000146.180:1073): avc: denied { read } for pid=25871 comm="syz.2.5015" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.602128][ T30] audit: type=1400 audit(2000000146.180:1074): avc: denied { open } for pid=25871 comm="syz.2.5015" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.652692][ T30] audit: type=1400 audit(2000000146.283:1075): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 318.716808][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.785439][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5020'. [ 318.806139][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5020'. [ 318.860055][T25890] sit0: left promiscuous mode [ 318.967213][T25890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.024272][T25901] xt_hashlimit: max too large, truncated to 1048576 [ 319.044534][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.173638][ T30] audit: type=1400 audit(2000000000.168:1076): avc: denied { read } for pid=25907 comm="syz.7.5031" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.205423][ T30] audit: type=1400 audit(2000000000.196:1077): avc: denied { open } for pid=25907 comm="syz.7.5031" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.233709][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.247454][ T30] audit: type=1400 audit(2000000000.233:1078): avc: denied { ioctl } for pid=25907 comm="syz.7.5031" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.380867][ T30] audit: type=1400 audit(2000000000.271:1079): avc: denied { setopt } for pid=25913 comm="syz.2.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.440681][ T30] audit: type=1400 audit(2000000000.411:1080): avc: denied { create } for pid=25922 comm="syz.6.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.642981][T25949] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.810798][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.860282][T25970] Cannot find set identified by id 3 to match [ 320.028443][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.265851][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.560089][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5066'. [ 320.590273][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.893638][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 320.954031][ T71] bridge_slave_1: left allmulticast mode [ 320.974975][ T71] bridge_slave_1: left promiscuous mode [ 320.984756][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.028474][ T71] bridge_slave_0: left allmulticast mode [ 321.034318][ T71] bridge_slave_0: left promiscuous mode [ 321.040129][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.069321][ T71] bridge_slave_1: left allmulticast mode [ 321.084127][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 321.086528][ T71] bridge_slave_1: left promiscuous mode [ 321.095969][ T10] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 321.110210][ T10] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 321.116888][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.143795][ T10] usb 3-1: config 135 has no interface number 0 [ 321.174944][ T71] bridge_slave_0: left allmulticast mode [ 321.176868][ T10] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.193974][ T71] bridge_slave_0: left promiscuous mode [ 321.194164][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.222392][ T71] bridge_slave_1: left allmulticast mode [ 321.231138][ T71] bridge_slave_1: left promiscuous mode [ 321.231610][ T10] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 321.238035][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.255012][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.282158][ T10] usb 3-1: Product: syz [ 321.289544][ T71] bridge_slave_0: left allmulticast mode [ 321.291015][ T10] usb 3-1: Manufacturer: syz [ 321.302418][ T71] bridge_slave_0: left promiscuous mode [ 321.316173][ T10] usb 3-1: SerialNumber: syz [ 321.328882][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.348514][ T10] uvcvideo 3-1:135.230: probe with driver uvcvideo failed with error -22 [ 321.632859][ T10] usb 3-1: USB disconnect, device number 83 [ 321.740070][ T5880] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 321.907508][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 321.915857][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 321.927660][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.938413][ T5880] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.948168][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 321.959493][ T5880] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 321.969619][ T5880] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 321.978761][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.991503][ T5880] usb 9-1: config 0 descriptor?? [ 321.999330][T26094] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 322.046116][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.065433][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.079917][ T71] bond0 (unregistering): Released all slaves [ 322.284966][ T5880] usb 9-1: USB disconnect, device number 3 [ 322.291011][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 322.480863][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.492023][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.503219][ T71] bond0 (unregistering): Released all slaves [ 322.577969][ T71] bond1 (unregistering): Released all slaves [ 322.839289][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.859468][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.874518][ T71] bond0 (unregistering): Released all slaves [ 322.893587][T26132] ip6t_srh: unknown srh match flags 4000 [ 322.980709][ T71] bond1 (unregistering): Released all slaves [ 323.052278][T26138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 323.069453][T26138] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 323.119360][ T71] bond2 (unregistering): Released all slaves [ 323.133068][T26140] netlink: 'syz.8.5099': attribute type 2 has an invalid length. [ 323.136119][ T71] bond3 (unregistering): Released all slaves [ 323.412176][ T71] : left promiscuous mode [ 324.208156][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 324.208173][ T30] audit: type=1400 audit(2000000004.873:1110): avc: denied { execmem } for pid=26214 comm="syz.2.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 324.475824][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5131'. [ 324.622759][ T30] audit: type=1400 audit(2000000005.256:1111): avc: denied { connect } for pid=26249 comm="syz.8.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 325.084762][T26286] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5149'. [ 325.106948][T26284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5147'. [ 325.281261][ T30] audit: type=1400 audit(2000000005.874:1112): avc: denied { create } for pid=26301 comm="syz.3.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.369901][ T30] audit: type=1400 audit(2000000005.902:1113): avc: denied { write } for pid=26301 comm="syz.3.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.439569][ T30] audit: type=1400 audit(2000000005.902:1114): avc: denied { nlmsg_write } for pid=26301 comm="syz.3.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.764485][ T30] audit: type=1400 audit(2000000006.323:1115): avc: denied { getopt } for pid=26342 comm="syz.3.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.040929][T26366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.171378][ T30] audit: type=1400 audit(2000000006.706:1116): avc: denied { setopt } for pid=26372 comm="syz.6.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.194448][T26379] netlink: zone id is out of range [ 326.199609][T26379] netlink: del zone limit has 8 unknown bytes [ 326.321156][T26388] xt_hashlimit: Unknown mode mask 600, kernel too old? [ 326.361905][ T30] audit: type=1326 audit(2000000006.875:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26390 comm="syz.2.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 326.504418][ T30] audit: type=1326 audit(2000000006.884:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26390 comm="syz.2.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 326.574383][T26407] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5185'. [ 326.574897][ T30] audit: type=1326 audit(2000000006.912:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26390 comm="syz.2.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 326.616397][T26412] ipt_REJECT: ECHOREPLY no longer supported. [ 326.779851][T26423] netlink: 'syz.2.5191': attribute type 10 has an invalid length. [ 326.831778][T26423] veth0_vlan: left promiscuous mode [ 326.858830][T26423] veth0_vlan: entered promiscuous mode [ 326.893159][T26423] team0: Device veth0_vlan failed to register rx_handler [ 327.530977][T26473] netlink: 'syz.6.5209': attribute type 2 has an invalid length. [ 327.710559][T26484] netlink: 'syz.8.5214': attribute type 2 has an invalid length. [ 328.125736][ T71] hsr_slave_0: left promiscuous mode [ 328.157186][ T71] hsr_slave_1: left promiscuous mode [ 328.169968][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.193371][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.219811][T26523] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5229'. [ 328.245183][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.258855][T26523] unsupported nlmsg_type 40 [ 328.291336][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.331976][ T71] hsr_slave_0: left promiscuous mode [ 328.353908][ T71] hsr_slave_1: left promiscuous mode [ 328.361167][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.379526][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.407910][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.418538][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.539707][ T71] hsr_slave_0: left promiscuous mode [ 328.562782][ T71] hsr_slave_1: left promiscuous mode [ 328.597823][T26549] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5239'. [ 328.677753][ T71] veth1_macvtap: left promiscuous mode [ 328.690316][ T71] veth0_macvtap: left promiscuous mode [ 328.702150][ T71] veth1_vlan: left promiscuous mode [ 328.713898][ T71] veth0_vlan: left promiscuous mode [ 328.734710][ T71] veth1_macvtap: left promiscuous mode [ 328.741804][ T71] veth0_macvtap: left promiscuous mode [ 328.749759][ T71] veth1_vlan: left promiscuous mode [ 328.756324][ T71] veth0_vlan: left promiscuous mode [ 328.765400][ T71] veth1_macvtap: left promiscuous mode [ 328.778272][ T71] veth0_macvtap: left promiscuous mode [ 328.784219][ T71] veth1_vlan: left promiscuous mode [ 328.791071][ T71] veth0_vlan: left promiscuous mode [ 328.845378][T26564] netlink: 'syz.7.5247': attribute type 1 has an invalid length. [ 328.855656][T26564] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5247'. [ 329.509462][ T71] team0 (unregistering): Port device team_slave_1 removed [ 329.543397][ T71] team0 (unregistering): Port device team_slave_0 removed [ 330.084744][ T71] team0 (unregistering): Port device team_slave_1 removed [ 330.116298][ T71] team0 (unregistering): Port device team_slave_0 removed [ 330.646965][ T71] team0 (unregistering): Port device team_slave_1 removed [ 330.678608][ T71] team0 (unregistering): Port device team_slave_0 removed [ 330.953815][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.034310][T26549] bridge_slave_0 (unregistering): left allmulticast mode [ 331.041905][T26549] bridge_slave_0 (unregistering): left promiscuous mode [ 331.051296][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.244556][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 331.244572][ T30] audit: type=1400 audit(2000000011.458:1144): avc: denied { write } for pid=26604 comm="syz.7.5260" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.328037][ T30] audit: type=1400 audit(2000000011.486:1145): avc: denied { open } for pid=26604 comm="syz.7.5260" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.430530][ T30] audit: type=1400 audit(2000000011.496:1146): avc: denied { ioctl } for pid=26604 comm="syz.7.5260" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.534358][ T30] audit: type=1400 audit(2000000011.533:1147): avc: denied { append } for pid=26609 comm="syz.6.5262" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.600979][ T30] audit: type=1400 audit(2000000011.729:1148): avc: denied { getopt } for pid=26623 comm="syz.6.5267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.757650][T26644] netlink: 'syz.8.5274': attribute type 32 has an invalid length. [ 331.786410][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5274'. [ 331.914306][T26644] bond1: Setting coupled_control to off (0) [ 331.915337][T26690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5280'. [ 332.064572][T26699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.392062][T26720] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5289'. [ 332.830579][ T71] IPVS: stop unused estimator thread 0... [ 332.845767][T26742] netlink: 'syz.7.5298': attribute type 3 has an invalid length. [ 332.861359][T26742] netlink: 'syz.7.5298': attribute type 1 has an invalid length. [ 332.897999][T26742] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5298'. [ 332.914039][T26742] NCSI netlink: No device for ifindex 0 [ 332.961049][ T30] audit: type=1400 audit(2000000013.058:1149): avc: denied { ioctl } for pid=26754 comm="syz.6.5301" path="socket:[47506]" dev="sockfs" ino=47506 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.091799][ T30] audit: type=1400 audit(2000000013.170:1150): avc: denied { create } for pid=26760 comm="syz.7.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.175329][ T30] audit: type=1400 audit(2000000013.207:1151): avc: denied { getopt } for pid=26760 comm="syz.7.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.227934][ T30] audit: type=1400 audit(2000000013.245:1152): avc: denied { write } for pid=26767 comm="syz.3.5307" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 333.327833][T26778] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.508120][ T30] audit: type=1400 audit(2000000013.563:1153): avc: denied { getopt } for pid=26789 comm="syz.8.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.966287][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.972643][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.003292][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5329'. [ 334.023564][T26834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.158936][ T5941] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 334.358843][T26858] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5340'. [ 334.393418][ T5941] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.406886][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.435602][ T5941] usb 3-1: Product: syz [ 334.441102][ T5941] usb 3-1: Manufacturer: syz [ 334.446308][ T5941] usb 3-1: SerialNumber: syz [ 334.465008][ T5941] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.491640][ T5893] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.533448][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5342'. [ 334.574195][T26867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5342'. [ 334.629637][T26867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5342'. [ 335.034585][ T5941] usb 3-1: USB disconnect, device number 84 [ 335.143156][ T5879] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 335.328525][ T5879] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.345492][ T5879] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.362171][ T5879] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.383374][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.399894][ T5879] usb 8-1: SerialNumber: syz [ 335.584598][ T5893] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 335.599174][ T5893] ath9k_htc: Failed to initialize the device [ 335.629003][ T5941] usb 3-1: ath9k_htc: USB layer deinitialized [ 335.666505][ T48] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 335.684259][ T5879] usb 8-1: 0:2 : does not exist [ 335.735511][ T5879] usb 8-1: USB disconnect, device number 4 [ 335.751894][T26961] UHID_CREATE from different security context by process 2411 (syz.2.5366), this is not allowed. [ 335.806080][T26954] udevd[26954]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.858560][ T48] usb 9-1: Using ep0 maxpacket: 32 [ 335.881199][ T48] usb 9-1: config 2 has an invalid interface number: 1 but max is 0 [ 335.889232][ T48] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 335.939025][ T48] usb 9-1: config 2 has no interface number 0 [ 335.959807][ T48] usb 9-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 335.971085][T26981] netlink: 'syz.2.5370': attribute type 21 has an invalid length. [ 335.976095][ T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.998823][ T48] usb 9-1: Product: syz [ 336.003441][ T48] usb 9-1: Manufacturer: syz [ 336.012276][T26981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5370'. [ 336.025704][ T48] usb 9-1: SerialNumber: syz [ 336.315833][ T48] usb 9-1: USB disconnect, device number 4 [ 336.670359][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 336.670376][ T30] audit: type=1400 audit(2000000016.528:1166): avc: denied { setopt } for pid=27031 comm="syz.2.5384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.859913][ T30] audit: type=1400 audit(2000000016.706:1167): avc: denied { write } for pid=27048 comm="syz.2.5389" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 337.003902][ T5879] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 337.120057][ T30] audit: type=1400 audit(2000000016.949:1168): avc: denied { getopt } for pid=27062 comm="syz.2.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 337.185667][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 337.203706][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.237427][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.263445][ T5879] usb 8-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 337.299094][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.332335][ T5879] usb 8-1: config 0 descriptor?? [ 337.616304][T27089] __nla_validate_parse: 1 callbacks suppressed [ 337.616322][T27089] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5401'. [ 337.806657][ T5879] chicony 0003:04F2:1236.0001: unknown main item tag 0x7 [ 337.854756][ T5879] chicony 0003:04F2:1236.0001: hidraw0: USB HID v0.04 Device [HID 04f2:1236] on usb-dummy_hcd.7-1/input0 [ 338.071904][ T5879] usb 8-1: USB disconnect, device number 5 [ 338.141679][T27115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5404'. [ 338.404331][ T30] audit: type=1400 audit(2000000018.146:1169): avc: denied { setopt } for pid=27130 comm="syz.2.5409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.571727][ T30] audit: type=1400 audit(2000000018.305:1170): avc: denied { write } for pid=27155 comm="syz.3.5413" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 338.689945][T27161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5414'. [ 339.075987][ T30] audit: type=1400 audit(2000000018.773:1171): avc: denied { create } for pid=27186 comm="syz.2.5424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.121834][ T30] audit: type=1400 audit(2000000018.773:1172): avc: denied { getopt } for pid=27186 comm="syz.2.5424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 339.185695][ T30] audit: type=1326 audit(2000000018.876:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.8.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc98f6c9 code=0x7fc00000 [ 339.311734][ T5879] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 339.337075][T27199] sp0: Synchronizing with TNC [ 339.369234][T27198] [U] [ 339.410874][ T30] audit: type=1326 audit(2000000019.091:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27212 comm="syz.6.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ea58f6c9 code=0x7ffc0000 [ 339.493462][ T5879] usb 8-1: Using ep0 maxpacket: 16 [ 339.517236][ T30] audit: type=1326 audit(2000000019.091:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27212 comm="syz.6.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ea58f6c9 code=0x7ffc0000 [ 339.570598][ T5879] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 339.570631][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.570651][ T5879] usb 8-1: Product: syz [ 339.570666][ T5879] usb 8-1: Manufacturer: syz [ 339.570682][ T5879] usb 8-1: SerialNumber: syz [ 339.574827][ T5879] usb 8-1: config 0 descriptor?? [ 339.581023][ T5879] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 339.636791][T27224] CUSE: info not properly terminated [ 340.016704][ T5879] usb 8-1: clie_3_5_startup: get interface number bad return length: 0 [ 340.029073][ T5879] visor 8-1:0.0: probe with driver visor failed with error -5 [ 340.249838][ T24] usb 8-1: USB disconnect, device number 6 [ 340.256079][ T5939] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 340.455545][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 340.465362][ T5939] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 340.475344][ T5939] usb 9-1: config 0 has no interface number 0 [ 340.484440][ T5939] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 340.499546][ T5939] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 340.514909][ T5939] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.526272][ T5939] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.539657][ T5939] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 340.549118][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.574140][ T5939] usb 9-1: config 0 descriptor?? [ 340.587131][ T5939] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 340.806092][T27299] sp0: Synchronizing with TNC [ 341.100375][T27318] process 'syz.6.5453' launched '/dev/fd/3' with NULL argv: empty string added [ 341.175176][T27321] netlink: 'syz.7.5454': attribute type 10 has an invalid length. [ 341.263065][T27321] veth0_vlan: left promiscuous mode [ 341.299869][T27321] veth0_vlan: entered promiscuous mode [ 341.329727][T27321] team0: Device veth0_vlan failed to register rx_handler [ 341.888364][T27349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 341.894935][T27349] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 341.954534][T27349] vhci_hcd vhci_hcd.0: Device attached [ 341.975908][T27358] vhci_hcd vhci_hcd.0: port 0 already used [ 342.013133][T27355] vhci_hcd: connection closed [ 342.014454][ T1163] vhci_hcd: stop threads [ 342.034390][ T1163] vhci_hcd: release socket [ 342.045189][ T1163] vhci_hcd: disconnect device [ 342.133960][ T5939] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 342.294317][ T5939] usb 8-1: Using ep0 maxpacket: 8 [ 342.311289][ T5939] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 342.326632][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.345875][ T5939] usb 8-1: Product: syz [ 342.361460][ T5939] usb 8-1: Manufacturer: syz [ 342.366185][ T5939] usb 8-1: SerialNumber: syz [ 342.376849][ T5939] usb 8-1: config 0 descriptor?? [ 342.386985][ T5939] gspca_main: se401-2.14.0 probing 047d:5003 [ 342.408048][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5470'. [ 342.582964][ T5828] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 342.758427][ T5828] usb 7-1: Using ep0 maxpacket: 16 [ 342.769415][ T5828] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 342.786764][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 342.799275][ T5828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 342.823404][ T5828] usb 7-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 342.833746][ T5939] gspca_se401: Wrong descriptor type [ 342.842550][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.894475][ T5828] usb 7-1: config 0 descriptor?? [ 343.032762][ T1207] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 343.035451][ T48] usb 9-1: USB disconnect, device number 5 [ 343.077754][ T48] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 343.086107][ T10] usb 8-1: USB disconnect, device number 7 [ 343.213676][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 343.240130][ T1207] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 343.256624][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 343.256642][ T30] audit: type=1400 audit(325.681:1186): avc: denied { read write } for pid=27440 comm="syz.2.5479" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.291415][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 343.308988][ T1207] usb 4-1: Product: syz [ 343.313509][ T1207] usb 4-1: Manufacturer: syz [ 343.318158][ T1207] usb 4-1: SerialNumber: syz [ 343.330361][ T1207] usb 4-1: config 0 descriptor?? [ 343.355191][ T5828] lg-g15 0003:046D:C22E.0002: unknown main item tag 0x1 [ 343.391838][ T5828] lg-g15 0003:046D:C22E.0002: hidraw0: USB HID v0.01 Device [HID 046d:c22e] on usb-dummy_hcd.6-1/input0 [ 343.564252][ T5828] usb 4-1: USB disconnect, device number 87 [ 343.580426][ T30] audit: type=1400 audit(325.962:1187): avc: denied { write } for pid=27469 comm="syz.8.5482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.627506][ T48] usb 7-1: USB disconnect, device number 8 [ 343.830426][T27505] EXT4-fs: Conflicting test_dummy_encryption options [ 344.134632][ T5828] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 344.294262][ T30] audit: type=1400 audit(326.645:1188): avc: denied { read write } for pid=27536 comm="syz.3.5496" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 344.316679][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 344.334547][ T30] audit: type=1400 audit(326.645:1189): avc: denied { open } for pid=27536 comm="syz.3.5496" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 344.358154][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.369830][ T30] audit: type=1400 audit(326.654:1190): avc: denied { ioctl } for pid=27536 comm="syz.3.5496" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 344.390502][ T5828] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 344.394866][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.409811][ T5828] usb 3-1: config 0 has no interface number 0 [ 344.416914][ T5828] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.444978][ T5828] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 344.505526][ T5828] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 344.541340][ T5828] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 344.574203][ T5828] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 344.596901][ T5828] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.596936][ T5828] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 344.596963][ T5828] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29557, setting to 1024 [ 344.596987][ T5828] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 344.597007][ T5828] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.599005][ T5828] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 344.599032][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.599052][ T5828] usb 3-1: Product: syz [ 344.599068][ T5828] usb 3-1: Manufacturer: syz [ 344.599083][ T5828] usb 3-1: SerialNumber: syz [ 344.612975][ T5828] usb 3-1: config 0 descriptor?? [ 344.615490][T27508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.615700][T27508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.617863][ T5828] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 344.617881][ T5828] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 344.630862][ T5828] scsi host1: microtekX6 [ 344.676243][ T30] audit: type=1400 audit(327.000:1191): avc: denied { write } for pid=27555 comm="syz.7.5503" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.822451][ T30] audit: type=1400 audit(327.141:1192): avc: denied { view } for pid=27575 comm="syz.3.5506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 344.926254][ T1207] usb 3-1: USB disconnect, device number 85 [ 345.125746][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5509'. [ 345.423091][T27620] team0: Cannot enslave team device to itself [ 345.591024][ T30] audit: type=1400 audit(327.861:1193): avc: denied { mounton } for pid=27626 comm="syz.8.5519" path="/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.720933][ T30] audit: type=1400 audit(327.982:1194): avc: denied { append } for pid=27644 comm="syz.6.5523" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.867730][ T5939] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 345.940310][ T5879] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 345.984480][ T30] audit: type=1400 audit(328.226:1195): avc: denied { connect } for pid=27659 comm="syz.7.5528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 346.069826][ T5939] usb 3-1: config index 0 descriptor too short (expected 38445, got 45) [ 346.078257][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.110004][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.115022][ T5879] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.130151][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.133772][T27667] syz.3.5529: attempt to access beyond end of device [ 346.133772][T27667] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 346.165340][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.168451][ T5879] usb 9-1: config 0 has no interface number 0 [ 346.172000][ T5939] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 346.187354][ T5879] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 346.203204][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.217718][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.249418][ T5879] usb 9-1: config 0 descriptor?? [ 346.269561][ T5879] usb 9-1: selecting invalid altsetting 1 [ 346.274098][ T5939] usb 3-1: config 0 descriptor?? [ 346.317980][ T5879] dvb_ttusb_budget: ttusb_init_controller: error [ 346.345461][ T5879] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.409098][T27683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5531'. [ 346.544000][ T5879] DVB: Unable to find symbol cx22700_attach() [ 346.606313][ T5879] DVB: Unable to find symbol tda10046_attach() [ 346.612658][ T5879] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 346.645676][ T5879] usb 9-1: USB disconnect, device number 6 [ 346.703542][T27707] sp0: Synchronizing with TNC [ 346.735767][T27707] sp0: Found TNC [ 346.743428][ T5939] hid (null): unknown global tag 0xc [ 346.758217][T27705] [U] ` [ 346.776570][ T5939] waterforce 0003:1044:7A4D.0003: unknown global tag 0xc [ 346.788154][ T5939] waterforce 0003:1044:7A4D.0003: item 0 2 1 12 parsing failed [ 346.797289][ T5941] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 346.813920][ T5939] waterforce 0003:1044:7A4D.0003: hid parse failed with -22 [ 346.832232][ T5939] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22 [ 346.922946][T27735] Bluetooth: MGMT ver 1.23 [ 346.971685][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 346.992699][ T5941] usb 4-1: config 251 has an invalid interface number: 70 but max is 0 [ 347.018890][ T5941] usb 4-1: config 251 has no interface number 0 [ 347.036117][ T5941] usb 4-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=4a.e2 [ 347.062339][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.063808][ T5879] usb 3-1: USB disconnect, device number 86 [ 347.070409][ T5941] usb 4-1: Product: syz [ 347.092004][ T5941] usb 4-1: Manufacturer: syz [ 347.097327][ T5941] usb 4-1: SerialNumber: syz [ 347.125407][ T5941] usb 4-1: Could not find all expected endpoints [ 347.357587][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5533'. [ 347.430302][ T5941] usb 4-1: USB disconnect, device number 88 [ 347.626866][T27787] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5550'. [ 347.782143][T27798] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 347.847689][T27810] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5557'. [ 348.163477][ T5939] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 348.337216][ T5939] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.353356][ T5939] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.377539][ T5939] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.390319][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.401646][ T5939] usb 8-1: SerialNumber: syz [ 348.660672][ T5939] usb 8-1: 0:2 : does not exist [ 348.684242][ T5939] usb 8-1: unit 255 not found! [ 348.743311][ T5939] usb 8-1: USB disconnect, device number 8 [ 348.796238][T26954] udevd[26954]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.954269][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 348.954288][ T30] audit: type=1400 audit(331.004:1202): avc: denied { bind } for pid=27885 comm="syz.8.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.064649][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5575'. [ 349.107327][ T30] audit: type=1400 audit(331.153:1203): avc: denied { ioctl } for pid=27895 comm="syz.8.5578" path="mnt:[4026534672]" dev="nsfs" ino=4026534672 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 349.178318][ T30] audit: type=1326 audit(331.210:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.228590][ T30] audit: type=1326 audit(331.228:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.271978][ T30] audit: type=1326 audit(331.228:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.316170][ T30] audit: type=1326 audit(331.228:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.340148][ T30] audit: type=1326 audit(331.228:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.367255][ T30] audit: type=1326 audit(331.228:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27899 comm="syz.8.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc98f6c9 code=0x7ffc0000 [ 349.397021][ T30] audit: type=1400 audit(331.247:1210): avc: denied { mounton } for pid=27900 comm="syz.3.5580" path="/1181/file0" dev="tmpfs" ino=5944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 349.439998][T27922] netlink: 'syz.3.5587': attribute type 1 has an invalid length. [ 349.521757][ T5939] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 349.659774][ T30] audit: type=1400 audit(331.668:1211): avc: denied { create } for pid=27941 comm="syz.2.5595" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.704313][ T5939] usb 9-1: Using ep0 maxpacket: 32 [ 349.711834][ T5939] usb 9-1: config 18 has an invalid interface number: 88 but max is 0 [ 349.720427][ T5939] usb 9-1: config 18 has no interface number 0 [ 349.733008][ T5939] usb 9-1: config 18 interface 88 has no altsetting 0 [ 349.759311][ T5939] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 349.775932][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.802300][ T5939] usb 9-1: Product: syz [ 349.806516][ T5939] usb 9-1: Manufacturer: syz [ 349.816468][ T5939] usb 9-1: SerialNumber: syz [ 349.876277][ T5941] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 349.885560][T27957] netlink: 'syz.2.5600': attribute type 4 has an invalid length. [ 349.893347][T27957] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5600'. [ 350.060216][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.082682][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 350.094877][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.110162][ T5941] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 350.119477][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.134789][ T5941] usb 4-1: Product: syz [ 350.139056][ T5941] usb 4-1: Manufacturer: syz [ 350.151944][ T5941] usb 4-1: SerialNumber: syz [ 350.169943][ T5941] usb 4-1: config 0 descriptor?? [ 350.180662][T27935] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 350.437713][T27935] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 350.489303][ T5939] asix 9-1:18.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 350.525139][ T5939] asix 9-1:18.88: probe with driver asix failed with error -71 [ 350.587785][ T5939] usb 9-1: USB disconnect, device number 7 [ 350.694157][T28015] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 350.704706][ T24] usb 4-1: USB disconnect, device number 89 [ 350.907618][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5619'. [ 351.495372][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5635'. [ 352.072942][T28128] netlink: 'syz.7.5653': attribute type 1 has an invalid length. [ 352.761306][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 352.932729][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 352.951229][ T5910] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 352.964888][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.973026][ T5910] usb 9-1: Product: syz [ 352.996238][ T5910] usb 9-1: Manufacturer: syz [ 353.000887][ T5910] usb 9-1: SerialNumber: syz [ 353.015497][ T5910] usb 9-1: config 0 descriptor?? [ 353.030954][ T5910] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 353.120778][T28194] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 353.260233][ T5910] usb 9-1: USB disconnect, device number 8 [ 353.648326][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 353.690571][ T5879] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 353.889276][ T5879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.918934][ T5879] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.949413][ T5879] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.968570][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.990936][ T5879] usb 8-1: config 0 descriptor?? [ 354.014393][ T5879] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 354.038032][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 354.065342][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 354.098857][ T5879] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 354.105980][ T5879] usb 8-1: media controller created [ 354.124565][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.180875][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 354.199207][ T5879] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 354.232405][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 354.269346][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 354.294968][ T5879] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.322192][ T5879] usb 8-1: USB disconnect, device number 9 [ 354.382704][ T5879] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 354.418106][ T5828] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 354.579904][ T5828] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.595041][ T5828] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.608096][ T5828] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.617592][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.631816][ T5828] usb 9-1: SerialNumber: syz [ 354.870296][ T5828] usb 9-1: 0:2 : does not exist [ 354.909878][ T5828] usb 9-1: USB disconnect, device number 9 [ 354.958966][T26954] udevd[26954]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.982067][ T1207] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 355.070038][ T5939] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 355.098422][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 355.098441][ T30] audit: type=1400 audit(336.756:1244): avc: denied { ioctl } for pid=28382 comm="syz.7.5720" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51492 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 355.158532][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 355.182530][ T1207] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 355.201327][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.222832][ T1207] usb 4-1: config 0 descriptor?? [ 355.237596][T28338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.259564][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 355.279623][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.294802][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 355.303929][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.330743][ T5939] usb 3-1: config 0 descriptor?? [ 355.596565][T28412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5728'. [ 355.607363][T28414] [U] [ 355.717239][ T1207] ryos 0003:1E7D:3138.0004: unknown global tag 0xe [ 355.754051][ T1207] ryos 0003:1E7D:3138.0004: item 0 2 1 14 parsing failed [ 355.761652][ T1207] ryos 0003:1E7D:3138.0004: parse failed [ 355.778921][ T1207] ryos 0003:1E7D:3138.0004: probe with driver ryos failed with error -22 [ 355.816205][ T30] audit: type=1400 audit(337.421:1245): avc: denied { append } for pid=28429 comm="syz.8.5733" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.876287][ T30] audit: type=1400 audit(337.421:1246): avc: denied { open } for pid=28429 comm="syz.8.5733" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.945177][ T5828] usb 4-1: USB disconnect, device number 90 [ 356.026791][ T30] audit: type=1400 audit(337.617:1247): avc: denied { ioctl } for pid=28448 comm="syz.8.5736" path="socket:[52276]" dev="sockfs" ino=52276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.063283][ T5939] usb 3-1: USB disconnect, device number 87 [ 356.103813][ T30] audit: type=1400 audit(337.617:1248): avc: denied { write } for pid=28448 comm="syz.8.5736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.223671][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5741'. [ 356.309767][ T30] audit: type=1400 audit(337.888:1249): avc: denied { write } for pid=28478 comm="syz.6.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.352326][ T30] audit: type=1400 audit(337.888:1250): avc: denied { connect } for pid=28478 comm="syz.6.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.389831][ T30] audit: type=1400 audit(337.888:1251): avc: denied { name_connect } for pid=28478 comm="syz.6.5743" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 356.416987][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 356.644658][ T24] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 356.655887][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.674629][ T24] usb 9-1: Product: syz [ 356.684523][ T24] usb 9-1: Manufacturer: syz [ 356.689207][ T24] usb 9-1: SerialNumber: syz [ 356.786593][ T30] audit: type=1400 audit(338.337:1252): avc: denied { bind } for pid=28495 comm="syz.6.5751" laddr=::ffff:172.20.20.10 lport=42084 faddr=::ffff:10.1.1.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.869022][ T30] audit: type=1400 audit(338.337:1253): avc: denied { name_bind } for pid=28495 comm="syz.6.5751" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 357.509333][ T24] usb 9-1: config 0 descriptor?? [ 357.525829][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 357.551586][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.562742][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 357.582006][ T24] usb 9-1: media controller created [ 357.620595][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.778117][ T24] DVB: Unable to find symbol mt352_attach() [ 357.865726][ T24] DVB: Unable to find symbol nxt6000_attach() [ 357.892183][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 357.926532][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39 [ 357.953726][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 357.961553][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 357.971976][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 357.978636][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 358.006263][ T24] usb 9-1: USB disconnect, device number 10 [ 358.150338][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 358.282949][T28587] ALSA: mixer_oss: invalid index 40000 [ 358.909501][T28628] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 358.962922][ T1207] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 359.133905][ T1207] usb 4-1: config index 0 descriptor too short (expected 38445, got 45) [ 359.153452][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.163609][ T1207] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.184210][ T1207] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.191302][ T1207] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 359.223898][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.235027][T28649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5803'. [ 359.240518][ T1207] usb 4-1: config 0 descriptor?? [ 359.257217][T28649] netlink: 'syz.2.5803': attribute type 4 has an invalid length. [ 359.417431][T28665] sp0: Synchronizing with TNC [ 359.749944][ T1207] waterforce 0003:1044:7A4D.0006: hidraw0: USB HID v0.01 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 359.989507][ T1207] waterforce 0003:1044:7A4D.0006: fw version request failed with -38 [ 360.054053][T28732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5823'. [ 360.083711][ T1207] usb 4-1: USB disconnect, device number 91 [ 360.361528][ T5939] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 360.529480][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 360.529499][ T30] audit: type=1400 audit(341.836:1274): avc: denied { execstack } for pid=28772 comm="syz.2.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 360.592577][ T5939] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.614814][ T5939] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 360.638103][ T5939] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 360.669580][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.694735][ T5939] usb 8-1: config 0 descriptor?? [ 360.714074][ T5939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 360.724073][ T5939] dvb-usb: bulk message failed: -22 (3/0) [ 360.748554][ T5939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.768236][ T5939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 360.775340][ T5939] usb 8-1: media controller created [ 360.805147][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.843228][ T5939] dvb-usb: bulk message failed: -22 (6/0) [ 360.849044][ T5939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 360.890144][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input40 [ 360.913861][ T5939] dvb-usb: schedule remote query interval to 150 msecs. [ 360.917533][ T1207] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 360.927047][ T5939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 360.994295][ T5939] usb 8-1: USB disconnect, device number 10 [ 361.037705][ T5939] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 361.137927][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.148427][ T1207] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.160331][ T1207] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 361.169931][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.194474][ T1207] usb 4-1: config 0 descriptor?? [ 361.208102][ T1207] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 361.214765][ T1207] dvb-usb: bulk message failed: -22 (3/0) [ 361.232151][ T1207] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 361.245390][ T1207] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 361.253146][ T1207] usb 4-1: media controller created [ 361.261139][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.292756][ T1207] dvb-usb: bulk message failed: -22 (6/0) [ 361.298603][ T1207] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 361.334752][ T1207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 361.338323][ T24] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 361.364197][ T1207] dvb-usb: schedule remote query interval to 150 msecs. [ 361.389170][ T1207] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 361.455995][ T1207] usb 4-1: USB disconnect, device number 92 [ 361.480928][ T1207] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 361.545367][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.556734][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 361.568667][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.575657][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 361.594809][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.617627][ T24] usb 3-1: config 0 descriptor?? [ 361.629080][T28829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 361.965107][ T975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 362.087550][ T24] logitech 0003:046D:C24F.0007: unbalanced collection at end of report description [ 362.106356][ T24] logitech 0003:046D:C24F.0007: parse failed [ 362.126539][ T24] logitech 0003:046D:C24F.0007: probe with driver logitech failed with error -22 [ 362.147293][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 362.164099][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.177851][ T975] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 362.198105][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.222469][ T975] usb 8-1: config 0 descriptor?? [ 362.261370][ T30] audit: type=1400 audit(343.454:1275): avc: denied { setattr } for pid=5819 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.337894][ T10] usb 3-1: USB disconnect, device number 88 [ 362.687734][ T975] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.7-1/input0 [ 362.796410][ T30] audit: type=1400 audit(343.950:1276): avc: denied { read write } for pid=28958 comm="syz.8.5850" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 362.861850][ T30] audit: type=1400 audit(343.987:1277): avc: denied { ioctl } for pid=28958 comm="syz.8.5850" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 362.907612][ T975] usb 8-1: USB disconnect, device number 11 [ 363.206050][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 363.240649][T28990] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5855'. [ 363.376806][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 363.389789][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.405432][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 363.420256][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 363.451012][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.465626][ T10] usb 9-1: config 0 descriptor?? [ 363.552419][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 363.700230][ T30] audit: type=1400 audit(344.792:1278): avc: denied { append } for pid=29011 comm="syz.2.5861" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.910938][ T30] audit: type=1400 audit(344.997:1279): avc: denied { ioctl } for pid=29025 comm="syz.2.5866" path="socket:[52855]" dev="sockfs" ino=52855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.986283][ T30] audit: type=1400 audit(345.007:1280): avc: denied { sys_module } for pid=29025 comm="syz.2.5866" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 364.023310][ T10] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 364.040260][ T10] magicmouse 0003:05AC:0324.0009: unknown main item tag 0x0 [ 364.079384][ T10] magicmouse 0003:05AC:0324.0009: hidraw0: USB HID v0.0a Device [HID 05ac:0324] on usb-dummy_hcd.8-1/input0 [ 364.125982][ T10] magicmouse 0003:05AC:0324.0009: magicmouse input not registered [ 364.135905][ T30] audit: type=1400 audit(345.212:1281): avc: denied { write } for pid=29038 comm="syz.7.5868" name="file0" dev="tmpfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 364.161749][ T10] magicmouse 0003:05AC:0324.0009: probe with driver magicmouse failed with error -12 [ 364.278709][ T975] usb 9-1: USB disconnect, device number 11 [ 364.732643][T29076] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5875'. [ 365.155540][ T975] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 365.183176][ T5879] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 365.332566][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 365.339552][ T975] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 365.356735][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.356849][ T975] usb 8-1: config 0 has no interface number 0 [ 365.377632][ T975] usb 8-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 365.384552][ T5879] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 365.407435][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.419512][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.440578][ T5879] usb 3-1: config 0 descriptor?? [ 365.447241][ T975] usb 8-1: Product: syz [ 365.460927][ T975] usb 8-1: Manufacturer: syz [ 365.470897][ T975] usb 8-1: SerialNumber: syz [ 365.494073][ T975] usb 8-1: config 0 descriptor?? [ 365.514757][ T1207] IPVS: starting estimator thread 0... [ 365.517229][ T975] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 365.631914][T29118] IPVS: using max 52 ests per chain, 124800 per kthread [ 365.911763][ T5879] greenasia 0003:0E8F:0012.000A: report_id 1336777258 is invalid [ 365.920358][ T5879] greenasia 0003:0E8F:0012.000A: item 0 4 1 8 parsing failed [ 365.953700][ T5879] greenasia 0003:0E8F:0012.000A: parse failed [ 365.959872][ T5879] greenasia 0003:0E8F:0012.000A: probe with driver greenasia failed with error -22 [ 366.166969][ T5828] usb 3-1: USB disconnect, device number 89 [ 366.277779][ T975] usb 8-1: USB disconnect, device number 12 [ 366.327508][ T30] audit: type=1400 audit(347.252:1282): avc: denied { read } for pid=29162 comm="syz.6.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.254452][T29221] pimreg3: entered allmulticast mode [ 367.368784][ T30] audit: type=1400 audit(348.234:1283): avc: denied { setopt } for pid=29228 comm="syz.2.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.971861][T29259] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 368.191635][T29265] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 368.257410][ T30] audit: type=1400 audit(349.066:1284): avc: denied { read append } for pid=29266 comm="syz.2.5931" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 368.322315][ T30] audit: type=1400 audit(349.066:1285): avc: denied { open } for pid=29266 comm="syz.2.5931" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 368.328685][T29270] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 368.491895][T29270] sp0: Synchronizing with TNC [ 368.534984][ T30] audit: type=1400 audit(349.328:1286): avc: denied { bind } for pid=29283 comm="syz.7.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.903560][ T5828] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 369.036224][ T30] audit: type=1400 audit(349.796:1287): avc: denied { write } for pid=29312 comm="syz.2.5949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 369.065144][ T30] audit: type=1400 audit(349.815:1288): avc: denied { read } for pid=29312 comm="syz.2.5949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 369.097087][ T5828] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.105125][ T5828] usb 8-1: config 0 has no interface number 0 [ 369.115260][ T5828] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 369.132552][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.150075][ T30] audit: type=1400 audit(349.899:1289): avc: denied { getopt } for pid=29314 comm="syz.6.5950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 369.181901][ T5828] usb 8-1: config 0 descriptor?? [ 369.193719][ T5828] usb 8-1: selecting invalid altsetting 1 [ 369.199600][ T5828] dvb_ttusb_budget: ttusb_init_controller: error [ 369.224245][ T5828] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 369.319100][ T5828] DVB: Unable to find symbol cx22700_attach() [ 369.376937][ T5828] DVB: Unable to find symbol tda10046_attach() [ 369.383344][ T5828] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 369.430544][ T5828] usb 8-1: USB disconnect, device number 13 [ 370.087969][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.112174][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.131289][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.152355][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.174688][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.190939][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.207548][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.226154][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.251130][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.280460][ T24] hid-generic 0000:01FF:0003.000B: unknown main item tag 0x0 [ 370.337969][ T24] hid-generic 0000:01FF:0003.000B: hidraw0: HID vdd.f0 Device [syz1] on syz0 [ 370.377356][ T30] audit: type=1400 audit(351.040:1290): avc: denied { name_bind } for pid=29372 comm="syz.8.5966" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 370.450654][T29370] fido_id[29370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 370.565247][T29386] netlink: 'syz.2.5970': attribute type 11 has an invalid length. [ 370.590385][ T30] audit: type=1400 audit(351.246:1291): avc: denied { ioctl } for pid=29389 comm="syz.8.5971" path="socket:[53732]" dev="sockfs" ino=53732 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 371.385733][ T1207] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 371.404215][T29447] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 371.490693][ T5828] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 371.569255][ T1207] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 371.582065][ T1207] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.593463][ T1207] usb 9-1: Product: syz [ 371.603444][ T1207] usb 9-1: Manufacturer: syz [ 371.608644][ T1207] usb 9-1: SerialNumber: syz [ 371.620056][ T1207] usb 9-1: config 0 descriptor?? [ 371.630560][ T1207] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 371.646290][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.661750][ T1207] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 371.671030][ T1207] usb 9-1: media controller created [ 371.682451][ T5828] usb 8-1: Using ep0 maxpacket: 16 [ 371.692461][ T5828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.720453][ T30] audit: type=1326 audit(352.293:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29457 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 371.747138][ T5828] usb 8-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 371.756208][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.771550][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.799567][ T30] audit: type=1326 audit(352.293:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29457 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 371.825710][ T5828] usb 8-1: config 0 descriptor?? [ 371.834394][ T30] audit: type=1326 audit(352.293:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29457 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 371.866988][ T30] audit: type=1326 audit(352.293:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29457 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 371.930463][ T1207] DVB: Unable to find symbol mt352_attach() [ 371.937288][ T30] audit: type=1326 audit(352.293:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29457 comm="syz.2.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337b8f6c9 code=0x7ffc0000 [ 372.004518][ T1207] DVB: Unable to find symbol nxt6000_attach() [ 372.010751][ T1207] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 372.038486][ T1207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input42 [ 372.067883][ T1207] dvb-usb: schedule remote query interval to 1000 msecs. [ 372.075388][ T1207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 372.088676][ T1207] dvb-usb: bulk message failed: -22 (7/0) [ 372.096933][ T1207] dvb-usb: bulk message failed: -22 (7/0) [ 372.120220][ T1207] usb 9-1: USB disconnect, device number 12 [ 372.240748][ T1207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 372.285331][ T5828] kye 0003:0458:0087.000C: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.7-1/input0 [ 372.328840][T29499] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 372.371340][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 372.371522][T29499] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 372.377587][ C0] CPU: 0 UID: 0 PID: 29498 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 372.395606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.405665][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 372.412018][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 86 72 fa f8 48 8d 7b 34 48 b8 00 00 [ 372.431637][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 372.437710][ C0] RAX: 0000000000000001 RBX: ffff8880578afc00 RCX: 1ffff1100af15f90 [ 372.445687][ C0] RDX: 0000000000000000 RSI: ffffffff88c29aa8 RDI: ffff8880578afc80 [ 372.453672][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 372.461646][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 372.469624][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 372.477601][ C0] FS: 00007f0475412880(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 372.486539][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.493125][ C0] CR2: 00007ffddf37bd44 CR3: 0000000050ec1000 CR4: 00000000003526f0 [ 372.501103][ C0] Call Trace: [ 372.504372][ C0] [ 372.507202][ C0] comedi_buf_write_samples+0x406/0x640 [ 372.512736][ C0] parport_interrupt+0xec/0x150 [ 372.517563][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 372.522999][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 372.528435][ C0] __handle_irq_event_percpu+0x236/0x920 [ 372.534051][ C0] handle_irq_event+0xab/0x1e0 [ 372.538794][ C0] handle_edge_irq+0x3ca/0x9e0 [ 372.543568][ C0] __common_interrupt+0xd0/0x2f0 [ 372.548488][ C0] common_interrupt+0xba/0xe0 [ 372.553147][ C0] [ 372.556057][ C0] [ 372.558969][ C0] asm_common_interrupt+0x26/0x40 [ 372.563975][ C0] RIP: 0010:write_comp_data+0x18/0x90 [ 372.569342][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 e7 78 e4 11 65 8b 05 f8 78 e4 11 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 [ 372.589013][ C0] RSP: 0018:ffffc9000ceb76f0 EFLAGS: 00000246 [ 372.595061][ C0] RAX: 0000000080000000 RBX: ffff8880797f7141 RCX: ffffffff8463104a [ 372.603010][ C0] RDX: ffff8880507e8000 RSI: 000000000000005c RDI: 0000000000000001 [ 372.610960][ C0] RBP: 000000000000002e R08: 0000000000000001 R09: 000000000000005c [ 372.618912][ C0] R10: 000000000000002e R11: 0000000000000001 R12: 0000000000000058 [ 372.626861][ C0] R13: ffff88802ce74fe6 R14: 0000000000000041 R15: dffffc0000000000 [ 372.634836][ C0] ? tomoyo_encode2+0x1da/0x3e0 [ 372.639672][ C0] tomoyo_encode2+0x1da/0x3e0 [ 372.644331][ C0] tomoyo_encode+0x29/0x50 [ 372.648725][ C0] tomoyo_realpath_from_path+0x18f/0x6e0 [ 372.654352][ C0] tomoyo_check_open_permission+0x2ab/0x3c0 [ 372.660221][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 372.666624][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.671628][ C0] tomoyo_file_open+0x6b/0x90 [ 372.676287][ C0] security_file_open+0x84/0x1e0 [ 372.681217][ C0] do_dentry_open+0x596/0x1530 [ 372.685977][ C0] vfs_open+0x82/0x3f0 [ 372.690028][ C0] path_openat+0x1de4/0x2cb0 [ 372.694600][ C0] ? __pfx_path_openat+0x10/0x10 [ 372.699528][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 372.704454][ C0] do_filp_open+0x20b/0x470 [ 372.708949][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 372.713969][ C0] ? alloc_fd+0x471/0x7d0 [ 372.718281][ C0] do_sys_openat2+0x11b/0x1d0 [ 372.722938][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.728138][ C0] __x64_sys_openat+0x174/0x210 [ 372.732973][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.738325][ C0] ? do_user_addr_fault+0x843/0x1370 [ 372.743590][ C0] do_syscall_64+0xcd/0xfa0 [ 372.748079][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.753950][ C0] RIP: 0033:0x7f0474ca7407 [ 372.758350][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 372.777937][ C0] RSP: 002b:00007ffddf37c760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 372.786329][ C0] RAX: ffffffffffffffda RBX: 00007f0475412880 RCX: 00007f0474ca7407 [ 372.794280][ C0] RDX: 00000000000a0000 RSI: 000055b453bdc2c0 RDI: ffffffffffffff9c [ 372.802316][ C0] RBP: 000055b453bdc2c0 R08: 0000000000000000 R09: 0000000000000000 [ 372.810279][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b453bdb4c0 [ 372.818226][ C0] R13: 00007ffddf37d968 R14: 00007f0475579000 R15: 000055b420ece4d8 [ 372.826178][ C0] [ 372.829176][ C0] Modules linked in: [ 372.833052][ C0] ---[ end trace 0000000000000000 ]--- [ 372.838488][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 372.844804][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 86 72 fa f8 48 8d 7b 34 48 b8 00 00 [ 372.864387][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 372.870455][ C0] RAX: 0000000000000001 RBX: ffff8880578afc00 RCX: 1ffff1100af15f90 [ 372.878406][ C0] RDX: 0000000000000000 RSI: ffffffff88c29aa8 RDI: ffff8880578afc80 [ 372.886353][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 372.894300][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 372.902249][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 372.910198][ C0] FS: 00007f0475412880(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 372.919110][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.925673][ C0] CR2: 00007ffddf37bd44 CR3: 0000000050ec1000 CR4: 00000000003526f0 [ 372.933640][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 372.941014][ C0] Kernel Offset: disabled [ 372.945310][ C0] Rebooting in 86400 seconds..