last executing test programs: 1m7.369557408s ago: executing program 3 (id=1206): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8) 1m7.279865887s ago: executing program 3 (id=1207): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 1m7.279586822s ago: executing program 3 (id=1208): r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 1m6.370281754s ago: executing program 3 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m5.947574426s ago: executing program 3 (id=1222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\" \x00\x00\x00\a='], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0xe002) 1m5.520132463s ago: executing program 3 (id=1231): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="cf"], 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m5.502368924s ago: executing program 32 (id=1231): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="cf"], 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 35.908515445s ago: executing program 0 (id=1741): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000380)=[{0x2, 0xffff}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 35.060807639s ago: executing program 0 (id=1751): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 35.055808274s ago: executing program 0 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2023) 35.028950777s ago: executing program 0 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 34.950291087s ago: executing program 0 (id=1754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 34.729023278s ago: executing program 0 (id=1755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 34.679509574s ago: executing program 33 (id=1755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 16.509408867s ago: executing program 5 (id=2177): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x39, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 16.425117278s ago: executing program 5 (id=2179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 16.314749452s ago: executing program 5 (id=2181): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 16.167914215s ago: executing program 5 (id=2184): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) 16.095627402s ago: executing program 5 (id=2186): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 16.088486087s ago: executing program 5 (id=2188): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2.030271888s ago: executing program 4 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x21, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40094) 1.966973348s ago: executing program 4 (id=2474): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1.83571329s ago: executing program 4 (id=2479): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 1.003921352s ago: executing program 34 (id=2188): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 909.893223ms ago: executing program 1 (id=2490): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 909.658599ms ago: executing program 4 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 853.119183ms ago: executing program 1 (id=2493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82", 0x2}, {&(0x7f00000005c0)="f422", 0x2}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) 779.555323ms ago: executing program 1 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="080006"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 683.385539ms ago: executing program 1 (id=2497): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000004c0)=""/26, 0xfffffc26, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 680.953002ms ago: executing program 2 (id=2498): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x0) 677.472063ms ago: executing program 2 (id=2499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg$unix(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) 599.951308ms ago: executing program 1 (id=2500): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 599.736068ms ago: executing program 2 (id=2501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="b969080000b80b00000014000000000ff3400f08410f79450041dee60f4dc3b8010000000f01c10f00d00f090fc76c17000f00d80f01d10f01c2", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 409.044908ms ago: executing program 2 (id=2502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x4) 408.835853ms ago: executing program 2 (id=2503): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 352.257963ms ago: executing program 2 (id=2504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x2d, 0x30, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local}, {0x14, 0x7, 0x0, @rand_addr=0x64010102, "121c78ace5f640b3c04d94f791874c6c6c5d6eb0"}}}, 0xfdef) 352.061813ms ago: executing program 1 (id=2505): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 196.13µs ago: executing program 4 (id=2506): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) close(r0) 0s ago: executing program 4 (id=2507): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) kernel console output (not intermixed with test programs): 791352][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.796623][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 102.798985][ T24] usb 6-1: can't read configurations, error -71 [ 102.885115][ T7242] can0 (unregistered): slcan off ttynull. [ 103.047487][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 103.051291][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 103.057600][ T7308] netlink: 'syz.2.540': attribute type 19 has an invalid length. [ 103.256142][ T60] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.291594][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 103.298834][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 104.185880][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 104.189325][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.459839][ T7360] Context (ID=0x1) not attached to queue pair (handle=0x4d5:0x2) [ 104.774969][ T1774] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.934006][ T1774] usb 6-1: Using ep0 maxpacket: 8 [ 104.937736][ T1774] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 104.941453][ T1774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.954685][ T1774] pvrusb2: Hardware description: Terratec Grabster AV400 [ 104.957852][ T1774] pvrusb2: ********** [ 104.959596][ T1774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 104.964022][ T1774] pvrusb2: Important functionality might not be entirely working. [ 104.967295][ T1774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.972051][ T1774] pvrusb2: ********** [ 104.984467][ T70] wlan1: Trigger new scan to find an IBSS to join [ 105.157446][ T2495] pvrusb2: Invalid write control endpoint [ 105.191781][ T2495] pvrusb2: Invalid write control endpoint [ 105.195561][ T2495] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.198657][ T2495] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.201699][ T2495] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.207088][ T2495] pvrusb2: Device being rendered inoperable [ 105.212770][ T2495] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 105.217456][ T2495] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.228505][ T2495] pvrusb2: Attached sub-driver cx25840 [ 105.230884][ T2495] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.235818][ T2495] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.289582][ T7378] kAFS: unable to lookup cell '(,cL' [ 105.293406][ T7378] kAFS: unable to lookup cell '(,cL' [ 105.313897][ T63] Bluetooth: hci5: command 0x1003 tx timeout [ 105.316143][ T5952] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.364375][ T1774] usb 6-1: USB disconnect, device number 5 [ 105.377505][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 105.386539][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 105.434672][ T7374] nbd0: detected capacity change from 0 to 128 [ 105.445556][ T63] block nbd0: Receive control failed (result -104) [ 105.452056][ T5952] block nbd0: Receive control failed (result -32) [ 105.620054][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 105.970240][ T7427] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 105.976522][ T7427] bond1 (unregistering): Released all slaves [ 105.979047][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 105.982817][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 105.984317][ T6092] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.097455][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 106.097468][ T40] audit: type=1400 audit(1775462152.556:346): avc: denied { unlink } for pid=7440 comm="syz.1.596" name="#5" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.173908][ T6092] usb 5-1: Using ep0 maxpacket: 8 [ 106.177750][ T6092] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.181282][ T6092] usb 5-1: config 179 has no interface number 0 [ 106.184672][ T6092] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.188578][ T6092] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.192398][ T6092] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.196877][ T6092] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 106.200821][ T6092] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.205464][ T6092] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 106.208514][ T6092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.214310][ T7410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.400450][ T40] audit: type=1400 audit(1775462152.856:347): avc: denied { getopt } for pid=7462 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.447147][ T7469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.449721][ T7469] IPv6: NLM_F_CREATE should be set when creating new route [ 106.452446][ T7469] IPv6: NLM_F_CREATE should be set when creating new route [ 106.453600][ T6092] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input10 [ 106.455168][ T7469] IPv6: NLM_F_CREATE should be set when creating new route [ 106.462919][ T40] audit: type=1400 audit(1775462152.916:348): avc: denied { read } for pid=5328 comm="acpid" name="js0" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.471508][ T40] audit: type=1400 audit(1775462152.916:349): avc: denied { open } for pid=5328 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.480435][ T40] audit: type=1400 audit(1775462152.916:350): avc: denied { ioctl } for pid=5328 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2914 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.489968][ T7469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.587156][ T7477] netem: incorrect gi model size [ 106.589467][ T7477] netem: change failed [ 106.637831][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.637832][ T24] usb 5-1: USB disconnect, device number 4 [ 106.642504][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 106.646730][ T7481] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 106.858924][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 107.048829][ T7516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.633'. [ 107.049635][ T40] audit: type=1400 audit(1775462153.506:351): avc: denied { nlmsg_read } for pid=7515 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.273584][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 107.366904][ T7562] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 107.426777][ T7564] option changes via remount are deprecated (pid=7563 comm=syz.3.653) [ 107.430169][ T7564] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 "" [ 107.434498][ T40] audit: type=1400 audit(1775462153.876:352): avc: denied { remount } for pid=7563 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.463509][ T40] audit: type=1400 audit(1775462153.916:353): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.529486][ T40] audit: type=1400 audit(1775462153.986:354): avc: denied { mounton } for pid=7572 comm="syz.3.657" path="/129/file0/file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.529587][ T7573] overlay: ./file0 is not a directory [ 107.647974][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 107.680041][ T7587] netlink: 'syz.2.664': attribute type 8 has an invalid length. [ 107.970958][ T40] audit: type=1400 audit(1775462154.426:355): avc: denied { mounton } for pid=7597 comm="syz.2.667" path="/136/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 108.011318][ T7600] loop2: detected capacity change from 0 to 7 [ 108.034136][ T1181] wlan1: Trigger new scan to find an IBSS to join [ 108.039396][ T7600] Dev loop2: unable to read RDB block 7 [ 108.042077][ T7600] loop2: unable to read partition table [ 108.045171][ T7600] loop2: partition table beyond EOD, truncated [ 108.050857][ T7600] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 108.062306][ C2] blk_print_req_error: 10 callbacks suppressed [ 108.062325][ C2] invalid error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 108.069303][ C2] buffer_io_error: 10 callbacks suppressed [ 108.069317][ C2] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 108.399329][ T7609] misc userio: Can't change port type on an already running userio instance [ 108.717524][ T7617] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 108.971651][ T63] Bluetooth: hci4: sending frame failed (-49) [ 108.975905][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 109.051760][ T7645] hub 1-0:1.0: USB hub found [ 109.053590][ T7645] hub 1-0:1.0: 2 ports detected [ 109.097970][ T7656] binder: 7654:7656 unknown command 0 [ 109.100494][ T7656] binder: 7654:7656 ioctl c0306201 200000000280 returned -22 [ 109.202262][ T7670] netem: change failed [ 109.263410][ T7672] bond1: invalid ARP target 0.0.0.0 specified for addition [ 109.268924][ T7672] bond1: option arp_ip_target: invalid value (0) [ 109.275429][ T7672] bond1 (unregistering): Released all slaves [ 109.436348][ T7681] hugetlbfs: syz.3.706 (7681): Using mlock ulimits for SHM_HUGETLB is obsolete [ 109.625135][ T7699] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.895635][ T7716] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.899193][ T7716] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 110.141710][ T7751] sp0: Synchronizing with TNC [ 110.160699][ T7753] input: syz1 as /devices/virtual/input/input12 [ 110.434323][ T1774] e1000 0000:00:06.0 eth0: Reset adapter [ 112.024129][ T70] wlan1: Trigger new scan to find an IBSS to join [ 112.665340][ T1774] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 114.985568][ T1181] wlan1: Trigger new scan to find an IBSS to join [ 118.024660][ T70] wlan1: Trigger new scan to find an IBSS to join [ 118.925681][ T70] wlan1: Creating new IBSS network, BSSID 72:a3:3a:8c:af:f1 [ 120.579346][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 120.637259][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 120.637280][ T40] audit: type=1400 audit(1775462167.096:377): avc: denied { getopt } for pid=7821 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.721451][ T7834] loop6: detected capacity change from 0 to 7 [ 120.730290][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.734689][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.738090][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.742307][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.749038][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.753179][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.756900][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.761029][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.766281][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.770540][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.774576][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.778788][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.782812][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.786555][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.789643][ T7834] ldm_validate_partition_table(): Disk read failed. [ 120.791745][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.795632][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.798479][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.801709][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.805305][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.808589][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.816728][ T7834] Dev loop6: unable to read RDB block 0 [ 120.823176][ T7834] loop6: unable to read partition table [ 120.828972][ T7834] loop6: partition table beyond EOD, truncated [ 120.833118][ T7834] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 120.857138][ T40] audit: type=1400 audit(1775462167.316:378): avc: denied { create } for pid=7845 comm="syz.3.768" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 121.277114][ T40] audit: type=1400 audit(1775462167.736:379): avc: denied { bind } for pid=7866 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.538079][ T7881] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 121.544187][ T7881] pim6reg1: group set to 0 [ 121.569264][ T40] audit: type=1400 audit(1775462168.026:380): avc: denied { write } for pid=7882 comm="syz.2.785" name="mcfilter6" dev="proc" ino=4026533252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 121.698878][ T40] audit: type=1400 audit(1775462168.156:381): avc: denied { read } for pid=7890 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.297935][ T5952] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 122.631289][ T7917] netlink: 'syz.2.800': attribute type 4 has an invalid length. [ 122.676179][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 122.722463][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 122.777093][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 122.832592][ T40] audit: type=1400 audit(1775462169.286:382): avc: denied { name_bind } for pid=7931 comm="syz.0.809" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 123.070590][ T40] audit: type=1400 audit(1775462169.526:383): avc: denied { block_suspend } for pid=7961 comm="syz.2.822" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.320313][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 123.712195][ T40] audit: type=1400 audit(1775462170.166:384): avc: denied { listen } for pid=8030 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.721970][ T40] audit: type=1400 audit(1775462170.166:385): avc: denied { accept } for pid=8030 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.823950][ T6092] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 123.973897][ T6092] usb 7-1: Using ep0 maxpacket: 8 [ 123.976999][ T6092] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.980546][ T6092] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.983719][ T6092] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.987217][ T6092] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.992010][ T6092] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.995302][ T6092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.208683][ T6092] usb 7-1: GET_CAPABILITIES returned 0 [ 124.211058][ T6092] usbtmc 7-1:16.0: can't read capabilities [ 124.413289][ T830] usb 7-1: USB disconnect, device number 5 [ 124.492336][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 124.725740][ T8062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.114258][ T8088] veth1_macvtap: left promiscuous mode [ 125.116066][ T8088] macsec0: entered allmulticast mode [ 125.126255][ T8088] veth1_macvtap: entered promiscuous mode [ 125.128345][ T8088] veth1_macvtap: entered allmulticast mode [ 125.131127][ T8088] macsec0: left allmulticast mode [ 125.132840][ T8088] veth1_macvtap: left allmulticast mode [ 125.371579][ T40] audit: type=1400 audit(1775462171.826:386): avc: denied { write } for pid=8115 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.398858][ T8118] xt_hashlimit: size too large, truncated to 1048576 [ 125.582314][ T8140] netlink: 165 bytes leftover after parsing attributes in process `syz.2.904'. [ 125.656335][ T8148] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 125.670755][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 125.735601][ T8152] support for the xor transformation has been removed. [ 125.776581][ T8155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 125.780593][ T8155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.912'. [ 125.864970][ T40] audit: type=1400 audit(1775462172.316:387): avc: denied { create } for pid=8167 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.881761][ T40] audit: type=1400 audit(1775462172.316:388): avc: denied { ioctl } for pid=8167 comm="syz.3.918" path="socket:[21612]" dev="sockfs" ino=21612 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.982714][ T40] audit: type=1400 audit(1775462172.436:389): avc: denied { read write } for pid=8172 comm="syz.2.919" name="file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.003889][ T40] audit: type=1400 audit(1775462172.436:390): avc: denied { open } for pid=8172 comm="syz.2.919" path="/190/file0/file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.016927][ T40] audit: type=1400 audit(1775462172.476:391): avc: denied { create } for pid=8182 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.106004][ T40] audit: type=1400 audit(1775462172.566:392): avc: denied { kexec_image_load } for pid=8192 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 126.143244][ T8187] xt_hashlimit: size too large, truncated to 1048576 [ 126.345072][ T40] audit: type=1400 audit(1775462172.806:393): avc: denied { bind } for pid=8214 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.413745][ T40] audit: type=1400 audit(1775462172.866:394): avc: denied { mount } for pid=8220 comm="syz.0.942" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.424624][ T40] audit: type=1400 audit(1775462172.876:395): avc: denied { mounton } for pid=8220 comm="syz.0.942" path="/270/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.463228][ T40] audit: type=1400 audit(1775462172.916:396): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.679847][ T8247] ipvlan2: entered allmulticast mode [ 126.683373][ T8247] batadv_slave_1: entered allmulticast mode [ 126.688583][ T8247] batman_adv: batadv0: Adding interface: ipvlan2 [ 126.691189][ T8247] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.701141][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.705329][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.708874][ T8247] batman_adv: batadv0: Interface activated: ipvlan2 [ 126.760796][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 126.765436][ T8255] lo: Master is either lo or non-ether device [ 126.781782][ T8260] tipc: Started in network mode [ 126.783524][ T8260] tipc: Node identity ac14140f, cluster identity 4711 [ 126.789928][ T8260] tipc: New replicast peer: 255.255.255.255 [ 126.794664][ T8260] tipc: Enabled bearer , priority 10 [ 126.925953][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 127.202676][ T8300] macvtap2: entered promiscuous mode [ 127.206939][ T8300] macsec0: entered promiscuous mode [ 127.214829][ T8300] macsec0: left promiscuous mode [ 127.787776][ T830] tipc: Node number set to 2886997007 [ 127.907732][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 127.923436][ T8333] kvm: kvm [8332]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003e) = 0x100000000 [ 128.040593][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 128.046201][ T8344] netlink: 'syz.2.1001': attribute type 21 has an invalid length. [ 128.071687][ T8353] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 128.230155][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 128.429166][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 128.618415][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1038'. [ 128.959149][ T8459] fuse: Bad value for 'fd' [ 130.824022][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.826818][ T8443] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.724913][ T8443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.728532][ T8443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.731964][ T8443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.988187][ T8490] __nla_validate_parse: 2 callbacks suppressed [ 131.988207][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 132.127014][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 132.127032][ T40] audit: type=1400 audit(1775462178.586:402): avc: denied { unlink } for pid=8495 comm="syz.0.1070" name="file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.139723][ T40] audit: type=1400 audit(1775462178.586:403): avc: denied { create } for pid=8495 comm="syz.0.1070" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.313880][ T6092] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 132.484010][ T6092] usb 7-1: Using ep0 maxpacket: 8 [ 132.487599][ T6092] usb 7-1: config 0 has no interfaces? [ 132.491892][ T6092] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 132.495806][ T6092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.498916][ T6092] usb 7-1: Product: syz [ 132.500585][ T6092] usb 7-1: Manufacturer: syz [ 132.502419][ T6092] usb 7-1: SerialNumber: syz [ 132.514340][ T6092] usb 7-1: config 0 descriptor?? [ 132.722979][ T1774] usb 7-1: USB disconnect, device number 6 [ 132.904200][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.104486][ T1774] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 133.262349][ T40] audit: type=1400 audit(1775462179.716:404): avc: denied { mount } for pid=8553 comm="syz.1.1092" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.291317][ T8559] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 133.794042][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.794078][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.628392][ T2160] block nbd0: Connection timed out, retrying (0/2 alive) [ 135.631803][ T2160] block nbd0: Dead connection, failed to find a fallback [ 135.634853][ T2160] block nbd0: shutting down sockets [ 135.636818][ T2160] blk_print_req_error: 11 callbacks suppressed [ 135.636827][ T2160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.641829][ T2160] buffer_io_error: 11 callbacks suppressed [ 135.641838][ T2160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.647439][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.650710][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.653256][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.657398][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.660359][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.663900][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.666791][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.669642][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.672052][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.675108][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.677584][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.680512][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.682961][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.687254][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.689686][ T7082] ldm_validate_partition_table(): Disk read failed. [ 135.691801][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.695133][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.697902][ T7082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.701381][ T7082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.704213][ T7082] Dev nbd0: unable to read RDB block 0 [ 135.706281][ T7082] nbd0: unable to read partition table [ 135.719374][ T7082] ldm_validate_partition_table(): Disk read failed. [ 135.722345][ T7082] Dev nbd0: unable to read RDB block 0 [ 135.725702][ T7082] nbd0: unable to read partition table [ 138.196939][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.199647][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.677106][ T8595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.677121][ T40] audit: type=1400 audit(1775462190.136:405): avc: denied { getattr } for pid=8594 comm="syz.0.1102" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.746540][ T8603] vcan0: tx address claim with dlc 0 [ 143.773390][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 143.953120][ T8592] udevd[8592]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 144.211841][ T8642] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1122'. [ 144.214927][ T8642] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1122'. [ 144.223966][ T1460] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 144.385806][ T1460] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.389377][ T1460] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.392529][ T1460] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.395685][ T1460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.399818][ T1460] usb 6-1: config 0 descriptor?? [ 144.820261][ T1460] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 144.834078][ T1460] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input13 [ 144.944953][ T1460] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 145.025182][ T840] usb 6-1: USB disconnect, device number 6 [ 145.392243][ T40] audit: type=1400 audit(1775462191.846:406): avc: denied { mount } for pid=8673 comm="syz.3.1135" name="/" dev="autofs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 145.403154][ T40] audit: type=1400 audit(1775462191.856:407): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 145.469741][ T840] IPVS: starting estimator thread 0... [ 145.474514][ T8683] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1138'. [ 145.480148][ T8683] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1138'. [ 145.501551][ T8683] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 145.564223][ T8682] IPVS: using max 43 ests per chain, 103200 per kthread [ 145.859054][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 145.908258][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 146.429485][ T40] audit: type=1400 audit(1775462192.886:408): avc: denied { create } for pid=8740 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.440430][ T40] audit: type=1400 audit(1775462192.896:409): avc: denied { write } for pid=8740 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.481143][ T8664] Set syz1 is full, maxelem 65536 reached [ 147.016090][ T8780] capability: warning: `syz.3.1183' uses 32-bit capabilities (legacy support in use) [ 147.033377][ T8780] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 147.039003][ T8780] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.410755][ T40] audit: type=1400 audit(1775462193.866:410): avc: denied { bind } for pid=8816 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.825083][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 147.849221][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1204'. [ 147.988106][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.992550][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.997760][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.003027][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.007252][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.014843][ T10] usb 7-1: config 0 descriptor?? [ 148.252329][ T40] audit: type=1400 audit(1775462194.706:411): avc: denied { accept } for pid=8841 comm="syz.0.1209" lport=49500 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.255026][ T8842] sctp: [Deprecated]: syz.0.1209 (pid 8842) Use of int in maxseg socket option. [ 148.255026][ T8842] Use struct sctp_assoc_value instead [ 148.260759][ T40] audit: type=1400 audit(1775462194.716:412): avc: denied { getopt } for pid=8841 comm="syz.0.1209" lport=49500 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.316946][ T8844] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 148.321095][ T40] audit: type=1400 audit(1775462194.776:413): avc: denied { map } for pid=8843 comm="syz.0.1210" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.330856][ T40] audit: type=1400 audit(1775462194.776:414): avc: denied { execute } for pid=8843 comm="syz.0.1210" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.433130][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.443843][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.446267][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.448541][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.450878][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.453215][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.462740][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.473824][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.476132][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.478418][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.492887][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 148.691568][ T40] audit: type=1400 audit(1775462195.146:415): avc: denied { connect } for pid=8851 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.697838][ T10] usb 7-1: USB disconnect, device number 7 [ 148.703917][ T40] audit: type=1400 audit(1775462195.146:416): avc: denied { read } for pid=8851 comm="syz.1.1213" laddr=172.20.20.10 lport=63979 faddr=172.20.20.6 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.932960][ T1181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.227160][ T8855] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 149.527761][ T8874] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1224'. [ 149.567176][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 149.580959][ T8878] ip6gretap0: entered promiscuous mode [ 149.583590][ T8878] macsec1: entered promiscuous mode [ 149.595362][ T8878] macsec1: entered allmulticast mode [ 149.597342][ T8878] ip6gretap0: entered allmulticast mode [ 149.601175][ T8878] ip6gretap0: left allmulticast mode [ 149.603317][ T8878] ip6gretap0: left promiscuous mode [ 149.650886][ T8885] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1229'. [ 149.816010][ T40] audit: type=1400 audit(1775462196.276:417): avc: denied { execute } for pid=8888 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 149.844615][ T40] audit: type=1400 audit(1775462196.276:418): avc: denied { execute_no_trans } for pid=8888 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 149.936511][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.942338][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.947230][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.951349][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.955077][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.956224][ T40] audit: type=1400 audit(1775462196.416:419): avc: denied { write } for pid=8897 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.239324][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 150.298973][ T8932] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1254'. [ 150.302749][ T8932] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1254'. [ 150.329982][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.332272][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.334918][ T8895] bridge_slave_0: entered allmulticast mode [ 150.337662][ T8895] bridge_slave_0: entered promiscuous mode [ 150.340827][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.343119][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.346285][ T8895] bridge_slave_1: entered allmulticast mode [ 150.349001][ T8895] bridge_slave_1: entered promiscuous mode [ 150.365108][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.369953][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.386516][ T8895] team0: Port device team_slave_0 added [ 150.389733][ T8895] team0: Port device team_slave_1 added [ 150.404125][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.406387][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.414293][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.418689][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.420957][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.429142][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.452545][ T8895] hsr_slave_0: entered promiscuous mode [ 150.455003][ T8895] hsr_slave_1: entered promiscuous mode [ 150.457190][ T8895] debugfs: 'hsr0' already exists in 'hsr' [ 150.458980][ T8895] Cannot create hsr debugfs directory [ 150.599495][ T8895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.605760][ T8895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.612595][ T8895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.617229][ T8895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.699229][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.715469][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.722536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.725557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.735281][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.738194][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.905572][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.918921][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 150.921912][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 151.068436][ T8895] veth0_vlan: entered promiscuous mode [ 151.075323][ T8895] veth1_vlan: entered promiscuous mode [ 151.106149][ T8895] veth0_macvtap: entered promiscuous mode [ 151.115637][ T8895] veth1_macvtap: entered promiscuous mode [ 151.126223][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.132425][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.141067][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.159521][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.162369][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.216365][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.242828][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.246665][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.266302][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.269304][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.288283][ T40] audit: type=1400 audit(1775462197.746:420): avc: denied { mounton } for pid=8895 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 151.718479][ T40] audit: type=1400 audit(1775462198.176:421): avc: denied { bind } for pid=8991 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.724983][ T40] audit: type=1400 audit(1775462198.176:422): avc: denied { listen } for pid=8991 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.943198][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803cb35000: rx timeout, send abort [ 151.948903][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803cb35000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.957141][ T40] audit: type=1400 audit(1775462198.416:423): avc: denied { read } for pid=5325 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 151.965678][ T40] audit: type=1400 audit(1775462198.416:424): avc: denied { search } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.024782][ T5952] Bluetooth: hci3: command tx timeout [ 152.280131][ T8964] Set syz1 is full, maxelem 65536 reached [ 152.328454][ T9016] mmap: syz.0.1275 (9016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.565678][ T9033] syzkaller1: entered promiscuous mode [ 152.567630][ T9033] syzkaller1: entered allmulticast mode [ 152.894878][ T9057] syzkaller1: entered promiscuous mode [ 152.896596][ T9057] syzkaller1: entered allmulticast mode [ 153.436594][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 154.113999][ T5952] Bluetooth: hci3: command tx timeout [ 154.201841][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 154.201859][ T40] audit: type=1400 audit(1775462200.656:432): avc: denied { mounton } for pid=9094 comm="syz.2.1313" path="/" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 154.257838][ T9099] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1315'. [ 154.400522][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 154.404930][ T9115] netlink: 'syz.2.1322': attribute type 30 has an invalid length. [ 154.458644][ T9118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.554081][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 154.554898][ T9118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.559785][ T9126] __nla_validate_parse: 1 callbacks suppressed [ 154.559802][ T9126] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1327'. [ 154.657738][ T9118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.716457][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 154.719861][ T9118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.720121][ T840] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.728358][ T840] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.732718][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 154.735364][ T840] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 154.738127][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.753317][ T840] usb 6-1: config 0 descriptor?? [ 154.827486][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.837882][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.846102][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.854484][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.941746][ T9134] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 155.172479][ T840] hid_parser_main: 5 callbacks suppressed [ 155.172493][ T840] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 155.177854][ T840] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 155.180524][ T840] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 155.182994][ T840] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 155.185920][ T840] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 155.188978][ T840] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 155.354016][ T9170] syzkaller1: entered promiscuous mode [ 155.356417][ T9170] syzkaller1: entered allmulticast mode [ 155.391524][ T840] usb 6-1: USB disconnect, device number 7 [ 155.483459][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 155.487673][ T9182] netlink: 'syz.4.1355': attribute type 30 has an invalid length. [ 155.490594][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 155.524392][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 155.552926][ T9189] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1359'. [ 155.571524][ T6032] IPVS: starting estimator thread 0... [ 155.654101][ T9193] IPVS: using max 43 ests per chain, 103200 per kthread [ 155.737557][ T9207] netlink: 'syz.2.1366': attribute type 39 has an invalid length. [ 155.738221][ T40] audit: type=1400 audit(1775462202.196:433): avc: denied { create } for pid=9206 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.749309][ T40] audit: type=1400 audit(1775462202.196:434): avc: denied { connect } for pid=9206 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.758408][ T40] audit: type=1400 audit(1775462202.196:435): avc: denied { read } for pid=9206 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.184558][ T5952] Bluetooth: hci3: command tx timeout [ 156.648288][ T40] audit: type=1400 audit(1775462203.106:436): avc: denied { relabelfrom } for pid=9221 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.657197][ T40] audit: type=1400 audit(1775462203.106:437): avc: denied { relabelto } for pid=9221 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.984298][ T1189] wlan1: Trigger new scan to find an IBSS to join [ 157.053920][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 157.188330][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e57a400: rx timeout, send abort [ 157.192075][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e57a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.203878][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 157.208620][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.213181][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.217780][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.220603][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.224494][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.229743][ T9230] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1385'. [ 157.230982][ T10] usb 9-1: config 0 descriptor?? [ 157.269086][ T6092] IPVS: starting estimator thread 0... [ 157.364006][ T9235] IPVS: using max 44 ests per chain, 105600 per kthread [ 157.643343][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 157.646063][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 157.648350][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 157.650502][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 157.652673][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 157.655318][ T10] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 157.846101][ T10] usb 9-1: USB disconnect, device number 2 [ 158.263907][ T5952] Bluetooth: hci3: command tx timeout [ 158.444100][ T9263] support for the xor transformation has been removed. [ 158.596504][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 158.814090][ T34] IPVS: starting estimator thread 0... [ 158.823285][ T9303] netlink: 'syz.0.1410': attribute type 29 has an invalid length. [ 158.863979][ T9303] netlink: 'syz.0.1410': attribute type 29 has an invalid length. [ 158.869030][ T9303] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1410'. [ 158.873155][ T9303] unsupported nla_type 58 [ 158.888412][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 158.893080][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 158.908476][ T9301] IPVS: using max 28 ests per chain, 67200 per kthread [ 159.281623][ T40] audit: type=1400 audit(1775462205.736:438): avc: denied { read } for pid=9329 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.631640][ T40] audit: type=1400 audit(1775462206.086:439): avc: denied { ioctl } for pid=9348 comm="syz.0.1430" path="socket:[26047]" dev="sockfs" ino=26047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.036549][ T70] wlan1: Trigger new scan to find an IBSS to join [ 160.374121][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 160.529722][ T29] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.534755][ T29] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.539015][ T29] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.543023][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.551154][ T9374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.570205][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.854271][ T840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.893624][ T29] usb 9-1: USB disconnect, device number 3 [ 161.005437][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 161.009250][ T840] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 161.012643][ T840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.017827][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.021869][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.026194][ T840] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.031593][ T840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.035880][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.043890][ T5991] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 161.204002][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 161.209643][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.212850][ T5991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.217914][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.222769][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.228465][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.232980][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.236729][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.241490][ T5991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 161.246164][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.249449][ T5991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.254344][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.259088][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.264309][ T840] usb 5-1: usb_control_msg returned -32 [ 161.266884][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.271511][ T840] usbtmc 5-1:16.0: can't read capabilities [ 161.275281][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.285285][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.292616][ T5991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 161.296547][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.299746][ T5991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.304869][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.309124][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.313301][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.317769][ T5991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.322045][ T5991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.328104][ T5991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 161.333706][ T5991] usb 7-1: string descriptor 0 read error: -22 [ 161.336964][ T5991] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.340718][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.353408][ T5991] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 161.556185][ T34] usb 7-1: USB disconnect, device number 8 [ 161.616723][ T9419] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 161.627217][ T9421] xt_hashlimit: size too large, truncated to 1048576 [ 161.818978][ T34] usb 5-1: USB disconnect, device number 5 [ 161.833190][ T5952] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 161.834169][ T40] audit: type=1400 audit(1775462208.286:440): avc: denied { create } for pid=9430 comm="syz.1.1467" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 162.043690][ T40] audit: type=1400 audit(1775462208.496:441): avc: denied { read } for pid=9443 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.560739][ T9482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.598613][ T40] audit: type=1400 audit(1775462209.056:442): avc: denied { unlink } for pid=9484 comm="syz.2.1491" name="file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 162.919332][ T40] audit: type=1400 audit(1775462209.376:443): avc: denied { ioctl } for pid=9499 comm="syz.4.1497" path="socket:[25349]" dev="sockfs" ino=25349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.985838][ T46] wlan1: Trigger new scan to find an IBSS to join [ 163.420039][ T9542] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 163.551209][ T40] audit: type=1400 audit(1775462210.006:444): avc: denied { mounton } for pid=9552 comm="syz.1.1522" path="/422/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 163.596651][ T40] audit: type=1400 audit(1775462210.046:445): avc: denied { read } for pid=9556 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.748371][ T9570] __nla_validate_parse: 1 callbacks suppressed [ 163.748390][ T9570] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1529'. [ 163.911337][ T46] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 163.955944][ T9583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1532'. [ 164.293978][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 164.323944][ T5952] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 164.446069][ T10] usb 9-1: config 0 has no interfaces? [ 164.448693][ T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.452670][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.460135][ T10] usb 9-1: config 0 descriptor?? [ 164.871434][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.876992][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.880485][ T6092] usb 9-1: USB disconnect, device number 4 [ 164.953918][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.105403][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.109241][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.113315][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.117527][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.122050][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.125110][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.129163][ T10] usb 6-1: config 0 descriptor?? [ 165.343877][ T5952] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 165.560916][ T10] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 165.594288][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.860546][ T40] audit: type=1400 audit(1775462212.316:446): avc: denied { accept } for pid=9656 comm="syz.0.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.057259][ T9671] netlink: 'syz.2.1568': attribute type 5 has an invalid length. [ 166.066854][ T9671] netlink: 'syz.2.1568': attribute type 5 has an invalid length. [ 166.520037][ T40] audit: type=1400 audit(1775462212.976:447): avc: denied { read } for pid=9700 comm="syz.4.1581" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.533870][ T40] audit: type=1400 audit(1775462212.976:448): avc: denied { open } for pid=9700 comm="syz.4.1581" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.874261][ T9724] netlink: 'syz.0.1592': attribute type 10 has an invalid length. [ 166.877414][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 166.999342][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 167.031746][ T9734] netlink: 'syz.2.1597': attribute type 29 has an invalid length. [ 167.035660][ T9734] netlink: 'syz.2.1597': attribute type 29 has an invalid length. [ 167.039268][ T9734] netlink: 604 bytes leftover after parsing attributes in process `syz.2.1597'. [ 167.069921][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 167.071518][ T9738] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1599'. [ 167.075516][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 167.133514][ T9742] 9pnet_virtio: no channels available for device syz [ 167.254568][ T9749] team0 (unregistering): Port device team_slave_0 removed [ 167.262347][ T9749] team0 (unregistering): Port device team_slave_1 removed [ 167.825165][ T5991] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 167.837579][ T5991] usb 6-1: device reset changed ep0 maxpacket size! [ 167.843007][ T840] usb 6-1: USB disconnect, device number 8 [ 167.893941][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 167.973972][ T840] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.044428][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 168.047489][ T29] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.051144][ T29] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.055263][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 168.057675][ T29] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.060619][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.065740][ T29] usb 9-1: config 0 descriptor?? [ 168.134069][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 168.137048][ T840] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.139594][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.143279][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.147321][ T840] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.151475][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.155749][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.159717][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.164690][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 168.167667][ T840] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.170143][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.173842][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.177813][ T840] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.181589][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.186009][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.189663][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.194284][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 168.197512][ T840] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.199961][ T840] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.203474][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.207516][ T840] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.211421][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.215396][ T840] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.219053][ T840] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.223251][ T840] usb 6-1: config 168 interface 0 has no altsetting 0 [ 168.228224][ T840] usb 6-1: string descriptor 0 read error: -22 [ 168.230401][ T840] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.233300][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.242382][ T840] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 168.342722][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 168.450877][ T840] usb 6-1: USB disconnect, device number 9 [ 168.491885][ T29] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 168.495486][ T29] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 168.498563][ T29] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 168.501662][ T29] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 168.504685][ T29] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 168.508468][ T29] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 168.693232][ T840] usb 9-1: USB disconnect, device number 5 [ 168.738107][ T9819] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 169.377950][ T9854] xt_hashlimit: size too large, truncated to 1048576 [ 169.550366][ T9866] loop6: detected capacity change from 0 to 7 [ 169.554118][ C0] blk_print_req_error: 27 callbacks suppressed [ 169.554137][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.560743][ C0] buffer_io_error: 27 callbacks suppressed [ 169.560756][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.567425][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.571490][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.575749][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.579811][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.583210][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.586675][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.590382][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.594332][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.597752][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.601745][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.605367][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.609401][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.612815][ T9866] ldm_validate_partition_table(): Disk read failed. [ 169.614183][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.619001][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.622571][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.626415][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.629970][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.634021][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.638576][ T9866] Dev loop6: unable to read RDB block 0 [ 169.642287][ T9866] loop6: unable to read partition table [ 169.645135][ T9866] loop6: partition table beyond EOD, truncated [ 169.647905][ T9866] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 170.096411][ T40] audit: type=1400 audit(1775462216.556:449): avc: denied { wake_alarm } for pid=9892 comm="syz.2.1668" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.285889][ T40] audit: type=1400 audit(1775462216.746:450): avc: denied { bind } for pid=9894 comm="syz.2.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.333314][ T40] audit: type=1400 audit(1775462216.786:451): avc: denied { mount } for pid=9898 comm="syz.2.1672" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 170.343200][ T40] audit: type=1400 audit(1775462216.806:452): avc: denied { mounton } for pid=9898 comm="syz.2.1672" path="/377/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 170.343748][ T9899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.360855][ T9899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.368097][ T9899] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 170.390198][ T40] audit: type=1400 audit(1775462216.856:453): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 170.575772][ T40] audit: type=1400 audit(1775462217.036:454): avc: denied { ioctl } for pid=9913 comm="syz.0.1678" path="socket:[28612]" dev="sockfs" ino=28612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.708880][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 170.712678][ T9921] netlink: 'syz.1.1681': attribute type 30 has an invalid length. [ 170.716541][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 170.838277][ T9935] tun0: tun_chr_ioctl cmd 1074025675 [ 170.840005][ T9935] tun0: persist enabled [ 170.841557][ T9935] tun0: tun_chr_ioctl cmd 1074025675 [ 170.843318][ T9935] tun0: persist disabled [ 171.924012][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.083882][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 172.094510][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.098407][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.101578][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.103683][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 172.107048][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.112485][ T29] usb 5-1: config 0 descriptor?? [ 172.526236][ T29] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 172.529668][ T29] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 172.531865][ T29] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 172.534268][ T29] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 172.536649][ T29] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 172.539218][ T29] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 172.726703][ T840] usb 5-1: USB disconnect, device number 6 [ 178.345759][ T40] audit: type=1400 audit(1775462224.806:455): avc: denied { ioctl } for pid=9979 comm="syz.0.1706" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.416628][ T9990] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1710'. [ 178.809949][ T40] audit: type=1400 audit(1775462225.266:456): avc: denied { create } for pid=10016 comm="syz.0.1722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 178.970314][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 179.031105][ T40] audit: type=1400 audit(1775462225.486:457): avc: denied { ioctl } for pid=10028 comm="syz.4.1729" path="socket:[30042]" dev="sockfs" ino=30042 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.210383][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 179.212988][T10044] netlink: 'syz.1.1735': attribute type 21 has an invalid length. [ 179.606290][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'. [ 179.609534][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'. [ 179.936496][T10083] sctp: [Deprecated]: syz.1.1750 (pid 10083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.936496][T10083] Use struct sctp_sack_info instead [ 180.265540][T10087] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.558031][ T1181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.663418][ T1181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.742905][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.747111][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.750662][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.764272][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.770834][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.784964][ T1181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.855392][ T1181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.860449][ T40] audit: type=1400 audit(1775462227.316:458): avc: denied { watch watch_reads } for pid=10103 comm="syz.4.1761" path="/132/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 181.047391][T10092] chnl_net:caif_netlink_parms(): no params data found [ 181.111767][ T1181] bridge_slave_1: left allmulticast mode [ 181.115154][ T1181] bridge_slave_1: left promiscuous mode [ 181.118585][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.125168][ T1181] bridge_slave_0: left allmulticast mode [ 181.127091][ T1181] bridge_slave_0: left promiscuous mode [ 181.128992][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.213914][ T6032] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 181.333507][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.340529][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.349232][ T1181] bond0 (unregistering): Released all slaves [ 181.375804][ T6032] usb 9-1: Using ep0 maxpacket: 8 [ 181.385299][ T6032] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.385382][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.389567][ T6032] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.392527][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.396728][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 181.399449][T10092] bridge_slave_0: entered allmulticast mode [ 181.401910][ T6032] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 181.405827][T10092] bridge_slave_0: entered promiscuous mode [ 181.408134][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.412919][T10092] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.417522][T10092] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.419008][ T6032] usb 9-1: config 0 descriptor?? [ 181.421475][T10092] bridge_slave_1: entered allmulticast mode [ 181.429305][T10092] bridge_slave_1: entered promiscuous mode [ 181.486562][T10092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.500448][T10092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.528212][T10092] team0: Port device team_slave_0 added [ 181.533014][T10092] team0: Port device team_slave_1 added [ 181.581855][T10092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.585143][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.596147][T10092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.602406][T10092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.605447][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.616316][T10092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.663901][ T40] audit: type=1400 audit(1775462228.116:459): avc: denied { map } for pid=10131 comm="syz.2.1772" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 181.680933][T10092] hsr_slave_0: entered promiscuous mode [ 181.683350][T10092] hsr_slave_1: entered promiscuous mode [ 181.687177][T10092] debugfs: 'hsr0' already exists in 'hsr' [ 181.689095][T10092] Cannot create hsr debugfs directory [ 181.778030][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 181.782300][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 181.812560][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 181.816717][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 181.845926][ T6032] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 181.852059][ T6032] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 181.862213][ T6032] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 181.864860][ T6032] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 181.867473][ T6032] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 181.870767][ T6032] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 181.972151][T10146] input: syz0 as /devices/virtual/input/input14 [ 181.980926][T10092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.991408][T10092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.999116][T10092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.017941][T10092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.024058][ T40] audit: type=1400 audit(1775462228.476:460): avc: denied { setattr } for pid=10147 comm="syz.2.1776" name="/" dev="9p" ino=78133301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.041098][ T6032] usb 9-1: USB disconnect, device number 6 [ 182.095835][ T1181] hsr_slave_0: left promiscuous mode [ 182.100610][ T1181] hsr_slave_1: left promiscuous mode [ 182.104304][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.107679][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.112221][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.116010][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.134476][ T1181] veth1_vlan: left promiscuous mode [ 182.137463][ T1181] veth0_vlan: left promiscuous mode [ 182.501387][T10092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.526441][T10092] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.548619][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.551484][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.570658][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.573919][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.677042][ T40] audit: type=1400 audit(1775462229.136:461): avc: denied { setopt } for pid=10174 comm="syz.4.1784" lport=45148 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 182.785696][T10190] dvmrp0: entered allmulticast mode [ 182.824076][ T63] Bluetooth: hci0: command tx timeout [ 182.858035][T10092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.992807][ T1181] IPVS: stop unused estimator thread 0... [ 183.004596][ T40] audit: type=1400 audit(1775462229.466:462): avc: denied { create } for pid=10213 comm="syz.2.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 183.012639][ T40] audit: type=1400 audit(1775462229.466:463): avc: denied { sys_admin } for pid=10213 comm="syz.2.1797" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 183.080895][ T40] audit: type=1400 audit(1775462229.536:464): avc: denied { write } for pid=10222 comm="syz.1.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.087210][T10092] veth0_vlan: entered promiscuous mode [ 183.097638][T10092] veth1_vlan: entered promiscuous mode [ 183.135824][T10092] veth0_macvtap: entered promiscuous mode [ 183.142585][T10092] veth1_macvtap: entered promiscuous mode [ 183.154538][T10092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.161670][T10092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.167791][ T104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.171738][ T104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.194694][ T104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.199557][ T104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.296226][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.299528][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.338161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.341900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.349285][T10243] Invalid argument reading file caps for ./file0 [ 183.405065][ T40] audit: type=1400 audit(1775462229.866:465): avc: denied { watch } for pid=10248 comm="syz.2.1809" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.488437][T10256] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.581449][T10256] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.690774][T10256] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.773187][T10256] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.895999][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.905642][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.918016][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.933677][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.829905][ T40] audit: type=1400 audit(1775462231.286:466): avc: denied { ioctl } for pid=10296 comm="syz.1.1825" path="socket:[33149]" dev="sockfs" ino=33149 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.843071][ T40] audit: type=1400 audit(1775462231.286:467): avc: denied { write } for pid=10296 comm="syz.1.1825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 184.898837][ T40] audit: type=1400 audit(1775462231.356:468): avc: denied { set_context_mgr } for pid=10298 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 184.906968][ T63] Bluetooth: hci0: command tx timeout [ 185.055131][ T40] audit: type=1326 audit(1775462231.516:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.5.1830" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c4579c819 code=0x0 [ 185.625208][T10340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.649421][T10340] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 185.653990][T10340] overlayfs: failed to look up (tracing) for ino (-66) [ 185.931754][ T40] audit: type=1400 audit(1775462232.386:470): avc: denied { ioctl } for pid=10352 comm="syz.4.1848" path="socket:[31249]" dev="sockfs" ino=31249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.942559][ T40] audit: type=1400 audit(1775462232.396:471): avc: denied { setopt } for pid=10354 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.268941][T10376] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.1859'. [ 186.273084][T10376] netlink: ct family unspecified [ 186.470141][T10399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.699991][T10421] overlayfs: upper fs does not support file handles, falling back to index=off. [ 186.882705][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 186.886194][T10434] netlink: 'syz.2.1887': attribute type 26 has an invalid length. [ 186.980832][ T40] audit: type=1400 audit(1775462233.436:472): avc: denied { mounton } for pid=10441 comm="syz.1.1891" path="/503/file0" dev="tmpfs" ino=2589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 186.981127][T10442] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 186.984287][ T63] Bluetooth: hci0: command tx timeout [ 187.021699][T10446] Bluetooth: MGMT ver 1.23 [ 187.070857][T10452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1895'. [ 187.123915][T10457] syzkaller1: entered promiscuous mode [ 187.125802][T10457] syzkaller1: entered allmulticast mode [ 187.409018][ T40] audit: type=1400 audit(1775462233.866:473): avc: denied { name_bind } for pid=10472 comm="syz.1.1906" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 187.511453][T10482] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.603160][T10489] mmap: syz.5.1913 (10489): VmData 28999680 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 187.918399][ T40] audit: type=1400 audit(1775462234.386:474): avc: denied { write } for pid=10504 comm="syz.2.1919" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.041427][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 188.704568][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803fa8d000: rx timeout, send abort [ 189.023009][ T40] audit: type=1400 audit(1775462235.476:475): avc: denied { mount } for pid=10550 comm="syz.4.1940" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 189.067652][ T5952] Bluetooth: hci0: command tx timeout [ 189.069007][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 189.078566][ T40] audit: type=1400 audit(1775462235.536:476): avc: denied { setattr } for pid=10553 comm="syz.2.1941" name="file0" dev="9p" ino=78133303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 189.156933][T10558] loop5: detected capacity change from 0 to 7 [ 189.163648][T10558] Dev loop5: unable to read RDB block 7 [ 189.167569][T10558] loop5: AHDI p1 [ 189.169361][T10558] loop5: partition table partially beyond EOD, truncated [ 189.193435][ T40] audit: type=1400 audit(1775462235.646:477): avc: denied { create } for pid=10559 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 189.206150][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803fa8c400: rx timeout, send abort [ 189.209798][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803fa8d000: abort rx timeout. Force session deactivation [ 189.214663][ T40] audit: type=1400 audit(1775462235.666:478): avc: denied { ioctl } for pid=10559 comm="syz.4.1945" path="socket:[34841]" dev="sockfs" ino=34841 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 189.405043][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 189.409091][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 189.626277][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 189.629099][T10604] netlink: 'syz.2.1962': attribute type 7 has an invalid length. [ 189.631707][T10604] netlink: 'syz.2.1962': attribute type 8 has an invalid length. [ 189.636208][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 189.642521][T10604] erspan0: entered promiscuous mode [ 189.645914][T10604] gretap0: entered promiscuous mode [ 189.648829][T10604] erspan0: left promiscuous mode [ 189.651978][T10604] gretap0: left promiscuous mode [ 189.709779][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803fa8c400: abort rx timeout. Force session deactivation [ 190.116366][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 190.119951][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 190.237939][T10671] netlink: 'syz.1.1978': attribute type 1 has an invalid length. [ 190.759114][ T40] audit: type=1400 audit(1775462237.216:479): avc: denied { append } for pid=10716 comm="syz.5.1993" path="/45/file0/blkio.throttle.io_serviced" dev="9p" ino=78133311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.144263][ T63] Bluetooth: hci0: command tx timeout [ 191.250042][ T40] audit: type=1400 audit(1775462237.706:480): avc: denied { create } for pid=10738 comm="syz.2.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.258914][ T40] audit: type=1400 audit(1775462237.706:481): avc: denied { write } for pid=10738 comm="syz.2.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.306403][ T40] audit: type=1400 audit(1775462237.766:482): avc: denied { lock } for pid=10740 comm="syz.4.2005" path="/200/file0/cpuset.effective_cpus" dev="9p" ino=78133313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.342482][T10743] kvm: kvm [10741]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 191.517129][T10749] __nla_validate_parse: 5 callbacks suppressed [ 191.517144][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 191.824185][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 191.841547][ T40] audit: type=1400 audit(1775462238.296:483): avc: denied { setopt } for pid=10768 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.843503][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 191.852456][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 191.968592][T10781] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 191.975526][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.979761][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.982975][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.986652][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.990543][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.993629][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.001532][ T29] usb 9-1: config 0 descriptor?? [ 192.014311][T10777] block nbd1: server does not support multiple connections per device. [ 192.017769][T10777] block nbd1: shutting down sockets [ 192.086959][ T40] audit: type=1400 audit(1775462238.546:484): avc: denied { map } for pid=10786 comm="syz.5.2028" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.167790][T10794] syzkaller1: entered promiscuous mode [ 192.169779][T10794] syzkaller1: entered allmulticast mode [ 192.445856][ T29] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 192.697787][ T5991] usb 9-1: USB disconnect, device number 7 [ 193.066646][T10863] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 193.249925][T10879] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 193.696447][T10909] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.827273][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 193.983883][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 193.988143][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.989891][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.992325][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.001164][ T34] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 194.004358][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.008807][ T34] usb 9-1: config 0 descriptor?? [ 194.108160][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 194.422623][ T34] kye 0003:0458:5016.000B: control desc unexpectedly large [ 194.430115][ T34] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.000B/input/input16 [ 194.520339][ T34] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.000B/input/input17 [ 194.564509][ T34] kye 0003:0458:5016.000B: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 194.755941][ T6092] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 194.921385][ T6092] usb 6-1: unable to get BOS descriptor or descriptor too short [ 194.925096][ T6092] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 194.927705][ T6092] usb 6-1: can't read configurations, error -71 [ 195.128212][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 195.133049][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 195.446926][ C3] kye 0003:0458:5016.000B: usb_submit_urb(ctrl) failed: -1 [ 195.801661][T10979] geneve2: entered promiscuous mode [ 195.804092][T10979] geneve2: entered allmulticast mode [ 195.983915][ T6092] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 195.991753][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 195.991771][ T40] audit: type=1400 audit(1775462242.446:489): avc: denied { create } for pid=10983 comm="syz.5.2106" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.995136][T10986] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.027914][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 196.156299][ T6092] usb 6-1: config 0 has no interfaces? [ 196.164208][ T6092] usb 6-1: config 0 has no interfaces? [ 196.167477][ T6092] usb 6-1: config 0 has no interfaces? [ 196.181086][ T6092] usb 6-1: string descriptor 0 read error: -22 [ 196.183172][ T6092] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 196.192148][ T6092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.197233][ T6092] usb 6-1: config 0 descriptor?? [ 196.214773][ T6272] usb 9-1: USB disconnect, device number 8 [ 196.452821][T11014] Set syz1 is full, maxelem 65536 reached [ 196.610144][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.613172][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.619919][ T6092] usb 6-1: USB disconnect, device number 11 [ 196.713033][ T63] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 196.721628][ T40] audit: type=1400 audit(1775462243.176:490): avc: denied { remount } for pid=11037 comm="syz.5.2132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.795751][ T40] audit: type=1400 audit(1775462243.256:491): avc: denied { mount } for pid=11046 comm="syz.2.2136" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.805134][ T40] audit: type=1400 audit(1775462243.256:492): avc: denied { remount } for pid=11046 comm="syz.2.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.817836][ T40] audit: type=1400 audit(1775462243.266:493): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.868455][ T40] audit: type=1400 audit(1775462243.326:494): avc: denied { append } for pid=11048 comm="syz.2.2137" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.949907][ T40] audit: type=1800 audit(1775462243.406:495): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2142" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 196.980086][T11061] bond1: option downdelay: invalid value (18446744073709551615) [ 196.983590][T11061] bond1: option downdelay: allowed values 0 - 2147483647 [ 196.992169][T11061] bond1 (unregistering): Released all slaves [ 197.173872][ T40] audit: type=1400 audit(1775462243.616:496): avc: denied { create } for pid=11074 comm="syz.5.2149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.185152][ T40] audit: type=1400 audit(1775462243.646:497): avc: denied { bind } for pid=11076 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.192459][ T40] audit: type=1400 audit(1775462243.646:498): avc: denied { name_bind } for pid=11076 comm="syz.4.2150" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 197.424079][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.474315][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 197.573922][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 197.578010][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.582597][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.594381][ T10] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 197.598284][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.601712][ T10] usb 7-1: Product: syz [ 197.603532][ T10] usb 7-1: Manufacturer: syz [ 197.605903][ T10] usb 7-1: SerialNumber: syz [ 197.611323][ T10] usb 7-1: config 0 descriptor?? [ 197.634320][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 197.638373][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.642697][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.647448][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.651932][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.658135][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.662134][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.868817][ T10] usb 7-1: USB disconnect, device number 9 [ 197.874901][T10841] udevd[10841]: setting owner of /dev/bus/usb/007/009 to uid=0, gid=0 failed: No such file or directory [ 197.882284][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 197.886036][ T34] usbtmc 6-1:16.0: can't read capabilities [ 198.083952][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.091685][ T34] usb 6-1: USB disconnect, device number 12 [ 198.724405][T11136] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2175'. [ 198.975979][T11147] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2180'. [ 199.022053][T11151] netlink: 762 bytes leftover after parsing attributes in process `syz.1.2182'. [ 199.213960][T11163] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2187'. [ 199.451320][T11180] netlink: set zone limit has 4 unknown bytes [ 199.634657][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.637406][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.677690][T11195] netlink: 'syz.4.2201': attribute type 7 has an invalid length. [ 199.681051][T11195] netlink: 'syz.4.2201': attribute type 8 has an invalid length. [ 199.684865][T11195] netlink: 'syz.4.2201': attribute type 7 has an invalid length. [ 199.688629][T11195] netlink: 208804 bytes leftover after parsing attributes in process `syz.4.2201'. [ 199.911389][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 199.916083][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 200.120135][T11212] kvm: MONITOR instruction emulated as NOP! [ 200.136425][T11223] overlayfs: failed lookup in lower (newroot/246, name='file0', err=-40): overlapping layers [ 200.508265][T11241] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2221'. [ 200.789510][T11260] overlayfs: workdir and upperdir must reside under the same mount [ 200.865864][T11265] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.958920][T11275] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2239'. [ 201.753974][ T6092] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 201.923927][ T6092] usb 7-1: Using ep0 maxpacket: 32 [ 201.928747][ T6092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.933145][ T6092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.937604][ T6092] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 201.941521][ T6092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.949483][ T6092] usb 7-1: config 0 descriptor?? [ 202.314131][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 202.317954][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 202.317966][ T40] audit: type=1400 audit(1775462249.780:506): avc: denied { read write } for pid=11313 comm="syz.4.2255" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 202.323830][ T40] audit: type=1400 audit(1775462249.780:507): avc: denied { open } for pid=11313 comm="syz.4.2255" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 202.379059][ T6092] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 202.447810][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'. [ 202.496742][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.500919][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.506217][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.510428][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.516099][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.519220][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.527483][ T29] usb 6-1: config 0 descriptor?? [ 202.625606][ T6092] usb 7-1: USB disconnect, device number 10 [ 202.718170][T11329] can0: slcan on ttynull. [ 202.785523][T11328] can0 (unregistered): slcan off ttynull. [ 202.945153][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.954083][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.957548][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.966903][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.969509][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.979899][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.993294][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 202.999576][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 203.004441][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 203.007787][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 203.016313][ T29] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 203.175283][ T63] Bluetooth: hci1: adv larger than maximum supported [ 203.175350][ T63] Bluetooth: hci1: Malformed LE Event: 0x0d [ 203.198272][ T34] usb 6-1: USB disconnect, device number 13 [ 203.566609][ T40] audit: type=1400 audit(1775462251.030:508): avc: denied { map } for pid=11380 comm="syz.4.2281" path="socket:[36318]" dev="sockfs" ino=36318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 203.747540][T11395] __nla_validate_parse: 1 callbacks suppressed [ 203.747562][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 203.769287][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 203.855079][ T40] audit: type=1400 audit(1775462251.310:509): avc: denied { mounton } for pid=11404 comm="syz.1.2293" path="/586/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 203.874405][ T40] audit: type=1400 audit(1775462251.320:510): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 203.909846][T11411] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2296'. [ 204.074327][ T40] audit: type=1400 audit(1775462251.540:511): avc: denied { watch_sb } for pid=11426 comm="syz.4.2304" path="/289" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.084961][ T40] audit: type=1400 audit(1775462251.550:512): avc: denied { read } for pid=11429 comm="syz.1.2303" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 204.093517][ T40] audit: type=1400 audit(1775462251.550:513): avc: denied { open } for pid=11429 comm="syz.1.2303" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 204.113649][ T40] audit: type=1400 audit(1775462251.570:514): avc: denied { ioctl } for pid=11429 comm="syz.1.2303" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 204.319017][T11444] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2311'. [ 204.487317][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'. [ 204.491444][T11454] chnl_net:caif_netlink_parms(): no params data found [ 204.600032][T11456] erspan0: entered promiscuous mode [ 204.604178][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 205.116804][T11481] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 205.116804][T11481] The task syz.4.2326 (11481) triggered the difference, watch for misbehavior. [ 205.254337][T11488] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 205.413477][T11497] atomic_op ffff888057d19998 conn xmit_atomic 0000000000000000 [ 205.618866][T11506] netlink: 'syz.2.2337': attribute type 2 has an invalid length. [ 205.622425][T11506] netlink: 'syz.2.2337': attribute type 2 has an invalid length. [ 205.825134][T11517] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 206.361567][T11548] binder: 11547:11548 ioctl c0306201 2000000003c0 returned -14 [ 206.535038][T11554] netlink: 'syz.2.2357': attribute type 12 has an invalid length. [ 206.538239][T11554] netlink: 'syz.2.2357': attribute type 29 has an invalid length. [ 206.541156][T11554] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2357'. [ 206.545976][T11554] netlink: 'syz.2.2357': attribute type 2 has an invalid length. [ 206.548612][T11554] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2357'. [ 206.810040][ T5952] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 207.070922][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 207.124134][ T40] audit: type=1400 audit(1775462254.580:515): avc: denied { watch_mount } for pid=11577 comm="syz.4.2370" path="/308" dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.134070][ T6092] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 207.203912][ T6272] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 207.307022][ T6092] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.310408][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.316823][ T6092] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.322261][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.326949][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.332616][ T6092] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.335777][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.340251][ T6092] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.343919][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.347873][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.352997][ T6092] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.360167][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.363914][ T6272] usb 6-1: Using ep0 maxpacket: 8 [ 207.364990][ T6092] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.368519][ T6272] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 207.371833][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.371866][ T6092] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.376211][ T6272] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.382485][ T6092] usb 7-1: string descriptor 0 read error: -22 [ 207.385030][ T6272] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.388223][ T6092] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 207.391217][ T6272] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.395391][ T6092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.400049][ T6272] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.410105][ T6272] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.413715][ T6272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.423885][ T6092] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 207.623976][ T63] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 207.627031][ T63] Bluetooth: hci0: command 0x1407 tx timeout [ 207.649644][ T840] usb 7-1: USB disconnect, device number 11 [ 208.183957][ T6272] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 208.335249][ T6272] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.339061][ T6272] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34517, setting to 1024 [ 208.343314][ T6272] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.348705][ T6272] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.351951][ T6272] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.356430][ T6272] usb 9-1: config 0 descriptor?? [ 208.360907][T11602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.774732][ T6272] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 208.779354][ T6272] hid_parser_main: 5 callbacks suppressed [ 208.779374][ T6272] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 208.792188][ T6272] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 209.037888][ T6272] usb 9-1: USB disconnect, device number 9 [ 209.145766][ T40] audit: type=1400 audit(1775462256.610:516): avc: denied { watch watch_reads } for pid=11634 comm="syz.2.2397" path="pipe:[7257]" dev="pipefs" ino=7257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 209.155833][ T40] audit: type=1400 audit(1775462256.610:517): avc: denied { relabelfrom } for pid=11634 comm="syz.2.2397" name="" dev="pipefs" ino=37766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 209.205949][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 209.518598][ T40] audit: type=1400 audit(1775462256.980:518): avc: denied { bind } for pid=11646 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.974104][ T1774] usb 6-1: USB disconnect, device number 14 [ 210.052930][ T40] audit: type=1400 audit(1775462257.510:519): avc: denied { setopt } for pid=11658 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.313882][ T40] audit: type=1400 audit(1775462257.770:520): avc: denied { map } for pid=11665 comm="syz.1.2411" path="/618/file0/cpu.stat" dev="9p" ino=78133315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.323208][ T40] audit: type=1400 audit(1775462257.770:521): avc: denied { execute } for pid=11665 comm="syz.1.2411" path="/618/file0/cpu.stat" dev="9p" ino=78133315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.780990][T11694] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2424'. [ 210.836923][ T5952] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 210.841028][ T5952] Bluetooth: hci2: Injecting HCI hardware error event [ 210.847376][ T5952] Bluetooth: hci2: hardware error 0x00 [ 210.859495][ T40] audit: type=1400 audit(1775462258.320:522): avc: denied { create } for pid=11699 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 210.976323][ T29] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 211.054258][ T2302] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 211.135164][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.138235][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.142401][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.147792][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.205300][ T2302] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.209334][ T2302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.212976][ T2302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.216339][ T2302] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.220653][ T2302] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.223516][ T2302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.227939][ T2302] usb 7-1: config 0 descriptor?? [ 211.359039][ T29] usb 9-1: usb_control_msg returned -32 [ 211.360850][ T29] usbtmc 9-1:16.0: can't read capabilities [ 211.649321][ T2302] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 211.679192][ T2302] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 211.720750][T11714] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 211.854201][ T2302] usb 7-1: USB disconnect, device number 12 [ 211.926625][ T34] usb 9-1: USB disconnect, device number 10 [ 212.451881][ T40] audit: type=1400 audit(1775462259.910:523): avc: denied { ioctl } for pid=11744 comm="syz.1.2446" path="socket:[36851]" dev="sockfs" ino=36851 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.524875][T11747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.813316][T11773] syz_tun: entered allmulticast mode [ 212.821204][T11773] syz_tun: left allmulticast mode [ 212.877852][T11779] syz.4.2461 (11779) used obsolete PPPIOCDETACH ioctl [ 212.914273][ T29] hid-generic 0005:9C3F:0006.0010: item fetching failed at offset 0/3 [ 212.915045][ T5952] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 212.919967][ T29] hid-generic 0005:9C3F:0006.0010: probe with driver hid-generic failed with error -22 [ 213.002346][T11791] loop5: detected capacity change from 0 to 4095 [ 213.124779][ T40] audit: type=1400 audit(1775462260.590:524): avc: denied { listen } for pid=11786 comm="syz.1.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 213.174371][ T40] audit: type=1400 audit(1775462260.640:525): avc: denied { accept } for pid=11786 comm="syz.1.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 213.386700][T11812] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2476'. [ 214.469772][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.476342][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.480258][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.483434][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.486557][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.534388][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 214.546057][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 214.546069][ T40] audit: type=1400 audit(1775462262.010:531): avc: denied { connect } for pid=11855 comm="syz.2.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.688287][ T40] audit: type=1400 audit(1775462262.120:532): avc: denied { module_request } for pid=11849 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 214.702758][T11849] chnl_net:caif_netlink_parms(): no params data found [ 214.802721][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.807102][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.810457][T11849] bridge_slave_0: entered allmulticast mode [ 214.813315][T11849] bridge_slave_0: entered promiscuous mode [ 215.236047][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.239647][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.243021][T11849] bridge_slave_1: entered allmulticast mode [ 215.248164][T11849] bridge_slave_1: entered promiscuous mode [ 215.269318][T11884] syzkaller1: entered promiscuous mode [ 215.271885][T11884] syzkaller1: entered allmulticast mode [ 215.318319][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.353389][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.367656][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.385213][T11849] team0: Port device team_slave_0 added [ 215.388573][T11849] team0: Port device team_slave_1 added [ 215.390885][ T63] block nbd4: Receive control failed (result -107) [ 215.396934][ T63] [ 215.398019][ T63] ====================================================== [ 215.399960][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.401013][ T63] WARNING: possible circular locking dependency detected [ 215.403211][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.405445][ T63] syzkaller #0 Tainted: G L [ 215.405454][ T63] ------------------------------------------------------ [ 215.405458][ T63] kworker/u33:0/63 is trying to acquire lock: [ 215.405464][ T63] ffff888036a49be0 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 215.405547][ T63] [ 215.405547][ T63] but task is already holding lock: [ 215.405551][ T63] ffff88802ce59270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 215.405749][ T63] [ 215.405749][ T63] which lock already depends on the new lock. [ 215.405749][ T63] [ 215.405752][ T63] [ 215.405752][ T63] the existing dependency chain (in reverse order) is: [ 215.405756][ T63] [ 215.405756][ T63] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 215.405771][ T63] __mutex_lock+0x1a2/0x1b90 [ 215.414475][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.416950][ T63] nbd_queue_rq+0x428/0x1080 [ 215.419796][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.421781][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 215.425134][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.427714][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 215.430409][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.434282][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 215.434315][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 215.434335][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 215.434357][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 215.434379][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 215.434397][ T63] __submit_bio+0x584/0x6c0 [ 215.434418][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 215.434440][ T63] submit_bio_noacct+0xd17/0x2010 [ 215.434460][ T63] submit_bh_wbc+0x59c/0x770 [ 215.448803][T11849] hsr_slave_0: entered promiscuous mode [ 215.451519][ T63] block_read_full_folio+0x4c8/0x8e0 [ 215.454239][T11849] hsr_slave_1: entered promiscuous mode [ 215.463463][ T63] filemap_read_folio+0xfc/0x3b0 [ 215.466273][T11849] debugfs: 'hsr0' already exists in 'hsr' [ 215.470165][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 215.472329][T11849] Cannot create hsr debugfs directory [ 215.474705][ T63] read_part_sector+0xd1/0x370 [ 215.474731][ T63] adfspart_check_ICS+0x93/0x910 [ 215.474751][ T63] bdev_disk_changed+0x7f8/0xc80 [ 215.474769][ T63] blkdev_get_whole+0x187/0x290 [ 215.517586][ T63] bdev_open+0x2c7/0xe40 [ 215.519982][ T63] blkdev_open+0x34e/0x4f0 [ 215.522269][ T63] do_dentry_open+0x6d8/0x1660 [ 215.524563][ T63] vfs_open+0x82/0x3f0 [ 215.526550][ T63] path_openat+0x208c/0x31a0 [ 215.528743][ T63] do_file_open+0x20e/0x430 [ 215.530386][T11849] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.530760][ T63] do_sys_openat2+0x10d/0x1e0 [ 215.535641][ T63] __x64_sys_openat+0x12d/0x210 [ 215.538046][ T63] do_syscall_64+0x106/0xf80 [ 215.540219][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.542935][ T63] [ 215.542935][ T63] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 215.545888][ T63] __mutex_lock+0x1a2/0x1b90 [ 215.548058][ T63] nbd_queue_rq+0xba/0x1080 [ 215.550047][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 215.552798][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 215.555796][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 215.558496][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 215.560732][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 215.563216][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 215.566044][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 215.568615][ T63] __submit_bio+0x584/0x6c0 [ 215.570729][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 215.573406][ T63] submit_bio_noacct+0xd17/0x2010 [ 215.575833][ T63] submit_bh_wbc+0x59c/0x770 [ 215.578095][ T63] block_read_full_folio+0x4c8/0x8e0 [ 215.580665][ T63] filemap_read_folio+0xfc/0x3b0 [ 215.582963][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 215.585367][ T63] read_part_sector+0xd1/0x370 [ 215.587789][ T63] adfspart_check_ICS+0x93/0x910 [ 215.590198][ T63] bdev_disk_changed+0x7f8/0xc80 [ 215.592522][ T63] blkdev_get_whole+0x187/0x290 [ 215.594820][ T63] bdev_open+0x2c7/0xe40 [ 215.597081][ T63] blkdev_open+0x34e/0x4f0 [ 215.599551][ T63] do_dentry_open+0x6d8/0x1660 [ 215.601965][ T63] vfs_open+0x82/0x3f0 [ 215.603993][ T63] path_openat+0x208c/0x31a0 [ 215.606206][ T63] do_file_open+0x20e/0x430 [ 215.608364][ T63] do_sys_openat2+0x10d/0x1e0 [ 215.610660][ T63] __x64_sys_openat+0x12d/0x210 [ 215.613154][ T63] do_syscall_64+0x106/0xf80 [ 215.615748][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.618446][ T63] [ 215.618446][ T63] -> #4 (set->srcu){.+.+}-{0:0}: [ 215.621426][ T63] __synchronize_srcu+0xa2/0x300 [ 215.623680][ T63] blk_mq_quiesce_queue+0x149/0x1c0 [ 215.626115][ T63] elevator_switch+0x17b/0x7e0 [ 215.628409][ T63] elevator_change+0x352/0x530 [ 215.630515][ T63] elevator_set_default+0x29e/0x360 [ 215.633028][ T63] blk_register_queue+0x412/0x590 [ 215.635417][ T63] __add_disk+0x73f/0xe40 [ 215.637572][ T63] add_disk_fwnode+0x118/0x5c0 [ 215.639781][ T63] nbd_dev_add+0x77a/0xb10 [ 215.642031][ T63] nbd_init+0x291/0x2b0 [ 215.644419][ T63] do_one_initcall+0x11d/0x760 [ 215.646809][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 215.649314][ T63] kernel_init+0x1f/0x1e0 [ 215.651406][ T63] ret_from_fork+0x754/0xd80 [ 215.653620][ T63] ret_from_fork_asm+0x1a/0x30 [ 215.655920][ T63] [ 215.655920][ T63] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 215.659495][ T63] __mutex_lock+0x1a2/0x1b90 [ 215.661808][ T63] elevator_change+0x1bc/0x530 [ 215.664057][ T63] elevator_set_none+0x92/0xf0 [ 215.666402][ T63] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 215.668883][ T63] nbd_start_device+0x1a6/0xbd0 [ 215.671013][ T63] nbd_genl_connect+0xff2/0x1a40 [ 215.673593][ T63] genl_family_rcv_msg_doit+0x214/0x300 [ 215.676304][ T63] genl_rcv_msg+0x560/0x800 [ 215.678471][ T63] netlink_rcv_skb+0x159/0x420 [ 215.680636][ T63] genl_rcv+0x28/0x40 [ 215.682508][ T63] netlink_unicast+0x5aa/0x870 [ 215.684843][ T63] netlink_sendmsg+0x8b0/0xda0 [ 215.687359][ T63] ____sys_sendmsg+0x9e1/0xb70 [ 215.689811][ T63] ___sys_sendmsg+0x190/0x1e0 [ 215.692023][ T63] __sys_sendmsg+0x170/0x220 [ 215.694245][ T63] do_syscall_64+0x106/0xf80 [ 215.696461][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.699248][ T63] [ 215.699248][ T63] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 215.703078][ T63] blk_alloc_queue+0x610/0x790 [ 215.705540][ T63] blk_mq_alloc_queue+0x174/0x290 [ 215.708019][ T63] __blk_mq_alloc_disk+0x29/0x120 [ 215.710353][ T63] nbd_dev_add+0x492/0xb10 [ 215.712520][ T63] nbd_init+0x291/0x2b0 [ 215.714575][ T63] do_one_initcall+0x11d/0x760 [ 215.716771][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 215.719331][ T63] kernel_init+0x1f/0x1e0 [ 215.721456][ T63] ret_from_fork+0x754/0xd80 [ 215.723820][ T63] ret_from_fork_asm+0x1a/0x30 [ 215.726249][ T63] [ 215.726249][ T63] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 215.729376][ T63] fs_reclaim_acquire+0xc4/0x100 [ 215.731759][ T63] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 215.734671][ T63] __alloc_skb+0x140/0x710 [ 215.736840][ T63] tcp_stream_alloc_skb+0x34/0x660 [ 215.739362][ T63] tcp_sendmsg_locked+0x1396/0x45e0 [ 215.741816][ T63] tcp_sendmsg+0x2e/0x50 [ 215.743862][ T63] inet_sendmsg+0xb9/0x140 [ 215.746023][ T63] sock_write_iter+0x4ea/0x5a0 [ 215.748381][ T63] vfs_write+0x6ac/0x1070 [ 215.750598][ T63] ksys_write+0x1f8/0x250 [ 215.752577][ T63] do_syscall_64+0x106/0xf80 [ 215.754802][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.757572][ T63] [ 215.757572][ T63] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 215.761047][ T63] __lock_acquire+0x14b8/0x2630 [ 215.763456][ T63] lock_acquire+0x1cf/0x380 [ 215.765621][ T63] lock_sock_nested+0x41/0xf0 [ 215.767847][ T63] inet_shutdown+0x67/0x410 [ 215.770125][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 215.772365][ T63] recv_work+0x5fb/0x8c0 [ 215.774420][ T63] process_one_work+0xa23/0x19a0 [ 215.776775][ T63] worker_thread+0x5ef/0xe50 [ 215.778965][ T63] kthread+0x370/0x450 [ 215.780906][ T63] ret_from_fork+0x754/0xd80 [ 215.783350][ T63] ret_from_fork_asm+0x1a/0x30 [ 215.785689][ T63] [ 215.785689][ T63] other info that might help us debug this: [ 215.785689][ T63] [ 215.789336][ T63] Chain exists of: [ 215.789336][ T63] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 215.789336][ T63] [ 215.793785][ T63] Possible unsafe locking scenario: [ 215.793785][ T63] [ 215.796286][ T63] CPU0 CPU1 [ 215.798641][ T63] ---- ---- [ 215.800774][ T63] lock(&nsock->tx_lock); [ 215.802728][ T63] lock(&cmd->lock); [ 215.805437][ T63] lock(&nsock->tx_lock); [ 215.808197][ T63] lock(sk_lock-AF_INET); [ 215.810123][ T63] [ 215.810123][ T63] *** DEADLOCK *** [ 215.810123][ T63] [ 215.813496][ T63] 3 locks held by kworker/u33:0/63: [ 215.815637][ T63] #0: ffff8880294e4148 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 215.820207][ T63] #1: ffffc90000b0fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 215.824903][ T63] #2: ffff88802ce59270 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 215.828808][ T63] [ 215.828808][ T63] stack backtrace: [ 215.831472][ T63] CPU: 3 UID: 0 PID: 63 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.831501][ T63] Tainted: [L]=SOFTLOCKUP [ 215.831507][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.831522][ T63] Workqueue: nbd4-recv recv_work [ 215.831548][ T63] Call Trace: [ 215.831628][ T63] [ 215.831639][ T63] dump_stack_lvl+0x100/0x190 [ 215.831670][ T63] print_circular_bug.cold+0x178/0x1c7 [ 215.831701][ T63] check_noncircular+0x146/0x160 [ 215.831734][ T63] __lock_acquire+0x14b8/0x2630 [ 215.831755][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 215.831781][ T63] lock_acquire+0x1cf/0x380 [ 215.831799][ T63] ? inet_shutdown+0x67/0x410 [ 215.831820][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 215.831845][ T63] lock_sock_nested+0x41/0xf0 [ 215.831874][ T63] ? inet_shutdown+0x67/0x410 [ 215.831898][ T63] inet_shutdown+0x67/0x410 [ 215.831917][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 215.831945][ T63] recv_work+0x5fb/0x8c0 [ 215.831963][ T63] ? __lock_acquire+0xd73/0x2630 [ 215.831984][ T63] ? __pfx_recv_work+0x10/0x10 [ 215.831999][ T63] ? debug_object_deactivate+0x2e4/0x3b0 [ 215.832033][ T63] ? rcu_is_watching+0x12/0xc0 [ 215.832059][ T63] process_one_work+0xa23/0x19a0 [ 215.832084][ T63] ? __pfx_process_one_work+0x10/0x10 [ 215.832109][ T63] ? __pfx_recv_work+0x10/0x10 [ 215.832129][ T63] worker_thread+0x5ef/0xe50 [ 215.832153][ T63] ? kthread+0x13a/0x450 [ 215.832169][ T63] ? __pfx_worker_thread+0x10/0x10 [ 215.832190][ T63] kthread+0x370/0x450 [ 215.832208][ T63] ? __pfx_kthread+0x10/0x10 [ 215.832227][ T63] ret_from_fork+0x754/0xd80 [ 215.832249][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 215.832269][ T63] ? __switch_to+0x7b4/0x1120 [ 215.832293][ T63] ? __pfx_kthread+0x10/0x10 [ 215.832311][ T63] ret_from_fork_asm+0x1a/0x30 [ 215.832338][ T63] [ 216.000601][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.098210][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.199090][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.414765][T11891] block nbd4: shutting down sockets [ 216.439306][ T60] bridge_slave_1: left allmulticast mode [ 216.441627][ T60] bridge_slave_1: left promiscuous mode [ 216.444124][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.448764][ T60] bridge_slave_0: left allmulticast mode [ 216.451462][ T60] bridge_slave_0: left promiscuous mode [ 216.454482][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.609209][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.614539][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.619445][ T60] bond0 (unregistering): Released all slaves [ 216.915675][ T60] hsr_slave_0: left promiscuous mode [ 216.918585][ T60] hsr_slave_1: left promiscuous mode [ 216.921177][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.924637][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.928535][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.931792][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.940043][ T60] veth1_macvtap: left promiscuous mode [ 216.942345][ T60] veth0_macvtap: left promiscuous mode [ 216.945724][ T60] veth1_vlan: left promiscuous mode [ 216.948014][ T60] veth0_vlan: left promiscuous mode [ 217.035471][ T60] team0 (unregistering): Port device team_slave_1 removed [ 217.040767][ T60] team0 (unregistering): Port device team_slave_0 removed [ 217.509218][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.580992][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.636925][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.696986][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.780545][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.835110][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.892675][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.958766][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.326227][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.426964][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.527064][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.568799][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.700670][ T60] bridge_slave_1: left allmulticast mode [ 218.703076][ T60] bridge_slave_1: left promiscuous mode [ 218.706152][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.710849][ T60] bridge_slave_0: left allmulticast mode [ 218.713297][ T60] bridge_slave_0: left promiscuous mode [ 218.715798][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.720839][ T60] bridge_slave_1: left allmulticast mode [ 218.723290][ T60] bridge_slave_1: left promiscuous mode [ 218.726422][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.734439][ T60] bridge_slave_0: left allmulticast mode [ 218.736882][ T60] bridge_slave_0: left promiscuous mode [ 218.739269][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.744845][ T60] bridge_slave_1: left allmulticast mode [ 218.747523][ T60] bridge_slave_1: left promiscuous mode [ 218.750018][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.754351][ T60] bridge_slave_0: left allmulticast mode [ 218.756689][ T60] bridge_slave_0: left promiscuous mode [ 218.759106][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.764275][ T60] bridge_slave_1: left allmulticast mode [ 218.767025][ T60] bridge_slave_1: left promiscuous mode [ 218.770007][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.777463][ T60] bridge_slave_0: left allmulticast mode [ 218.779636][ T60] bridge_slave_0: left promiscuous mode [ 218.781810][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.962242][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.967414][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.971948][ T60] bond0 (unregistering): Released all slaves [ 219.062125][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.066082][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.069313][ T60] bond0 (unregistering): Released all slaves [ 219.072666][ T60] bond1 (unregistering): Released all slaves [ 219.140341][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.144412][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.147985][ T60] bond0 (unregistering): Released all slaves [ 219.169791][ T60] dvmrp0 (unregistering): left allmulticast mode [ 219.374658][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.378353][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.381764][ T60] bond0 (unregistering): Released all slaves [ 219.385229][ T60] bond1 (unregistering): Released all slaves [ 219.389647][ T60] bond2 (unregistering): Released all slaves [ 219.499215][ T60] tipc: Disabling bearer [ 219.501805][ T60] tipc: Left network mode [ 220.109044][ T60] hsr_slave_0: left promiscuous mode [ 220.111064][ T60] hsr_slave_1: left promiscuous mode [ 220.113647][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.116503][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.119848][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.122179][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.127042][ T60] hsr_slave_0: left promiscuous mode [ 220.129627][ T60] hsr_slave_1: left promiscuous mode [ 220.132145][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.135525][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.138548][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.141559][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.147314][ T60] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 220.150059][ T60] batman_adv: batadv0: Removing interface: ipvlan2 [ 220.156305][ T60] hsr_slave_0: left promiscuous mode [ 220.158955][ T60] hsr_slave_1: left promiscuous mode [ 220.160863][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.165205][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.170322][ T60] hsr_slave_0: left promiscuous mode [ 220.173199][ T60] hsr_slave_1: left promiscuous mode [ 220.176350][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.179240][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.182502][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.185063][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.196968][ T60] veth1_vlan: left promiscuous mode [ 220.198659][ T60] veth0_vlan: left promiscuous mode [ 220.201709][ T60] veth1_vlan: left promiscuous mode [ 220.203438][ T60] veth0_vlan: left promiscuous mode [ 220.207061][ T60] veth1_vlan: left allmulticast mode [ 220.208889][ T60] veth1_macvtap: left promiscuous mode [ 220.210934][ T60] veth0_macvtap: left promiscuous mode [ 220.213004][ T60] veth1_vlan: left promiscuous mode [ 220.216108][ T60] veth0_vlan: left promiscuous mode [ 220.337267][ T60] team0 (unregistering): Port device team_slave_1 removed [ 220.348229][ T60] team0 (unregistering): Port device team_slave_0 removed [ 220.440371][ T60] team0 (unregistering): Port device team_slave_1 removed [ 220.450398][ T60] team0 (unregistering): Port device team_slave_0 removed [ 220.542990][ T60] team0 (unregistering): Port device team_slave_1 removed [ 220.550626][ T60] team0 (unregistering): Port device team_slave_0 removed [ 220.632752][ T60] team0 (unregistering): Port device team_slave_1 removed [ 220.646270][ T60] team0 (unregistering): Port device team_slave_0 removed [ 221.884151][ T60] IPVS: stop unused estimator thread 0... [ 221.887127][ T60] IPVS: stop unused estimator thread 0... [ 221.890441][ T60] IPVS: stop unused estimator thread 0...