last executing test programs: 1.422397369s ago: executing program 2 (id=4962): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.414535599s ago: executing program 3 (id=4963): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x85000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.392123969s ago: executing program 2 (id=4964): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) 1.367208837s ago: executing program 3 (id=4965): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/mtrr\x00', 0x2, 0x0) pread64(r0, &(0x7f0000002680)=""/20, 0x14, 0x33e3721f) 1.319088792s ago: executing program 2 (id=4966): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2', 0x1) 1.318726963s ago: executing program 3 (id=4967): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000014c0)={0x4, "ed388c54dd7cb8fcc648f4b95da2ac30bebbf8d4df1e3d86be43ef64c91aa2fc"}) read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020) 1.269223643s ago: executing program 2 (id=4969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) writev(r0, &(0x7f0000000040), 0x2) 1.263804863s ago: executing program 3 (id=4970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/irq/default_smp_affinity\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/265, 0x109) 1.22461147s ago: executing program 2 (id=4972): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x20000810) 1.219313488s ago: executing program 3 (id=4973): mkdir(&(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='prev_comm.function ==', 0x15) 1.18678193s ago: executing program 2 (id=4974): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000340)=[{r1, 0x430a}], 0x1, 0x0, 0x0, 0x0) 1.166120046s ago: executing program 3 (id=4976): syz_usb_connect(0x5, 0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x0, 0x0) 620.072945ms ago: executing program 1 (id=4993): setns(0xc9, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000840)=0x1, 0x4) connect$inet(r0, &(0x7f0000000700)={0x2, 0xe24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 566.924664ms ago: executing program 1 (id=4995): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r0}, 0x38) 523.595371ms ago: executing program 1 (id=4997): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000680)={0x1, 0x43}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x78}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0xb0}, 0x2) 459.367659ms ago: executing program 1 (id=4998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x40, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x40}}, 0x0) 417.911689ms ago: executing program 1 (id=4999): r0 = io_uring_setup(0x3249, &(0x7f0000000200)={0x0, 0x2c3f, 0x400, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000500)={0x0, 0x208000}) close_range(r0, 0xffffffffffffffff, 0x0) 260.029269ms ago: executing program 1 (id=5003): r0 = syz_create_resource$futex(&(0x7f0000000380)=0x1) r1 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) futex(r1, 0xb, 0x1, 0x0, r0, 0x403) futex(r1, 0xc, 0x1, 0x0, r0, 0x1) 167.023273ms ago: executing program 0 (id=5007): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0xe}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 135.097277ms ago: executing program 0 (id=5008): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 106.690345ms ago: executing program 0 (id=5009): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='get', 0x3) 70.054062ms ago: executing program 0 (id=5010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 37.460848ms ago: executing program 0 (id=5011): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x0, 0x2, 0x1, 0x4, 0x0, 0x5}}) 0s ago: executing program 0 (id=5012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x68) ioctl(r0, 0xc138fd01, &(0x7f0000000240)="0400000000000000000000003801") kernel console output (not intermixed with test programs): not known [ 100.398002][T10698] md: couldn't set array info. -22 [ 100.399848][T10706] netlink: set zone limit has 4 unknown bytes [ 100.474216][T10714] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 100.474230][T10714] nbd: error processing sock list [ 100.493699][T10716] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 100.494171][T10716] team0: Device ipvlan2 is already an upper device of the team interface [ 100.615048][ T68] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.615312][ T68] Bluetooth: hci0: command 0x040f tx timeout [ 101.067428][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 101.067444][ T43] audit: type=1400 audit(1794245644.271:594): avc: denied { bind } for pid=10748 comm="syz.0.2171" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.109371][T10751] vivid-001: ================= START STATUS ================= [ 101.109408][T10751] vivid-001: Radio HW Seek Mode: Bounded [ 101.109431][T10751] vivid-001: Radio Programmable HW Seek: false [ 101.109493][T10751] vivid-001: RDS Rx I/O Mode: Block I/O [ 101.109512][T10751] vivid-001: Generate RBDS Instead of RDS: false [ 101.109530][T10751] vivid-001: RDS Reception: true [ 101.109550][T10751] vivid-001: RDS Program Type: 0 inactive [ 101.109574][T10751] vivid-001: RDS PS Name: inactive [ 101.109595][T10751] vivid-001: RDS Radio Text: inactive [ 101.109616][T10751] vivid-001: RDS Traffic Announcement: false inactive [ 101.109637][T10751] vivid-001: RDS Traffic Program: false inactive [ 101.109657][T10751] vivid-001: RDS Music: false inactive [ 101.109679][T10751] vivid-001: ================== END STATUS ================== [ 101.135536][T10753] libceph: resolve '0' (ret=-3): failed [ 101.499418][T10724] syz.1.2161 (10724): drop_caches: 2 [ 101.558888][T10790] ALSA: seq fatal error: cannot create timer (-22) [ 101.590554][ T43] audit: type=1400 audit(1794245644.791:595): avc: denied { read } for pid=10794 comm="syz.3.2194" lport=46815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.681652][T10806] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.729930][ T43] audit: type=1400 audit(1794245644.931:596): avc: denied { read write } for pid=10809 comm="syz.3.2200" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.732308][ T43] audit: type=1400 audit(1794245644.931:597): avc: denied { open } for pid=10809 comm="syz.3.2200" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.733271][ T43] audit: type=1400 audit(1794245644.931:598): avc: denied { ioctl } for pid=10809 comm="syz.3.2200" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.772333][T10810] device-mapper: table: 248:3: multipath: not enough priority group arguments (-EINVAL) [ 101.772358][T10810] device-mapper: ioctl: error adding target to table [ 101.814794][T10815] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 101.992958][T10833] macvtap1: entered allmulticast mode [ 101.992981][T10833] bond0: entered allmulticast mode [ 101.992994][T10833] bond_slave_0: entered allmulticast mode [ 101.993009][T10833] bond_slave_1: entered allmulticast mode [ 101.993059][T10833] bond_slave_0: entered promiscuous mode [ 101.993089][T10833] bond_slave_1: entered promiscuous mode [ 102.000293][T10833] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 102.014435][ T43] audit: type=1400 audit(1794245645.211:599): avc: denied { read } for pid=10834 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.027925][T10833] bond0: left allmulticast mode [ 102.027942][T10833] bond_slave_0: left allmulticast mode [ 102.027952][T10833] bond_slave_1: left allmulticast mode [ 102.058620][ T5881] bond_slave_0: left promiscuous mode [ 102.058645][ T5881] bond_slave_1: left promiscuous mode [ 102.214502][T10852] jffs2: notice: (10852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (1 dead, 0 orphan) found. [ 102.220287][T10848] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.222503][ T43] audit: type=1400 audit(1794245645.421:600): avc: denied { mount } for pid=10850 comm="syz.3.2220" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.227830][ T43] audit: type=1400 audit(1794245645.421:601): avc: denied { mounton } for pid=10850 comm="syz.3.2220" path="/606/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.229793][ C3] Illegal XDP return value 16128 on prog (id 42) dev lo, expect packet loss! [ 102.250884][ T43] audit: type=1400 audit(1794245645.451:602): avc: denied { egress } for pid=5901 comm="kworker/3:4" saddr=fe80::1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 102.251289][ T43] audit: type=1400 audit(1794245645.451:603): avc: denied { sendto } for pid=5901 comm="kworker/3:4" saddr=fe80::1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 102.350439][T10861] can0: slcan on ttynull. [ 102.426031][T10860] can0 (unregistered): slcan off ttynull. [ 103.176832][ T1170] IPVS: starting estimator thread 0... [ 103.177022][T10953] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 103.224541][T10958] Bluetooth: hci0: unsupported parameter 5161 [ 103.224562][T10958] Bluetooth: hci0: unsupported parameter 8192 [ 103.224573][T10958] Bluetooth: hci0: unsupported parameter 5161 [ 103.224584][T10958] Bluetooth: hci0: unsupported parameter 8192 [ 103.264965][T10955] IPVS: using max 26 ests per chain, 62400 per kthread [ 103.272542][T10967] netlink: 'syz.3.2268': attribute type 10 has an invalid length. [ 103.285951][T10967] team0: Port device dummy0 added [ 103.292085][T10967] netlink: 'syz.3.2268': attribute type 10 has an invalid length. [ 103.303181][T10967] team0: Port device dummy0 removed [ 103.403372][T10975] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 103.427720][T10977] sg_write: data in/out 197376/16 bytes for SCSI command 0x8-- guessing data in; [ 103.427720][T10977] program syz.3.2273 not setting count and/or reply_len properly [ 103.480405][T10986] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2276'. [ 103.638933][T11002] netlink: 'syz.3.2284': attribute type 32 has an invalid length. [ 103.638956][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 103.665314][T11002] bond2: Setting coupled_control to off (0) [ 103.732392][T11012] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2288'. [ 103.853107][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 103.893060][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2300'. [ 103.934967][T11042] ubi: bad wear-leveling threshold 1 [ 104.004120][T11054] block nbd0: not configured, cannot reconfigure [ 104.011087][T11056] ip_tables: iptables: counters copy to user failed while replacing table [ 104.089374][T11069] netlink: 'syz.3.2317': attribute type 4 has an invalid length. [ 104.089394][T11069] netlink: 'syz.3.2317': attribute type 5 has an invalid length. [ 104.089404][T11069] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 104.089415][T11069] netlink: 'syz.3.2317': attribute type 4 has an invalid length. [ 104.089426][T11069] netlink: 'syz.3.2317': attribute type 5 has an invalid length. [ 104.089432][T11069] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 104.089586][T11069] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 104.208629][T11088] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 104.462288][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 104.468909][T11136] xt_LOG: level 115 >= 8 [ 104.473879][T11133] bond1: (slave bond_slave_0): Device is not our slave [ 104.473891][T11133] bond1: option active_slave: invalid value (bond_slave_0) [ 104.491015][T11133] bond1 (unregistering): Released all slaves [ 104.751592][T11172] xt_IDLETIMER: label is empty or not nul-terminated [ 104.888273][T11183] EXT4-fs: Conflicting test_dummy_encryption options [ 105.265966][T11207] bond1: invalid ARP target 0.0.0.0 specified for addition [ 105.265991][T11207] bond1: option arp_ip_target: invalid value (0) [ 105.267554][T11207] bond1 (unregistering): Released all slaves [ 105.465717][ T856] lg-g15 0003:046D:0A07.0005: hidraw0: USB HID vfffff5.00 Device [syz0] on syz0 [ 105.467021][ T856] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0005/input/input7 [ 105.507980][T11219] fido_id[11219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.706046][T11237] nbd: must specify an index to disconnect [ 105.743616][T11240] smc: smcd device lo applied user defined pnetid SYZ0 [ 105.785307][ T42] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 105.936637][ T42] usb 7-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 105.937591][ T42] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.937616][ T42] usb 7-1: config 0 has no interface number 0 [ 105.939916][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.939934][ T42] usb 7-1: Product: syz [ 105.939946][ T42] usb 7-1: Manufacturer: syz [ 105.939957][ T42] usb 7-1: SerialNumber: syz [ 105.945441][ T42] usb 7-1: config 0 descriptor?? [ 105.950777][ T42] usb 7-1: selecting invalid altsetting 1 [ 105.952233][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 105.952245][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 105.989648][ T42] DVB: Unable to find symbol stv0299_attach() [ 106.016698][ T42] DVB: Unable to find symbol tda8083_attach() [ 106.016711][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 106.085419][T11265] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 106.152218][ T856] usb 7-1: USB disconnect, device number 10 [ 106.222780][T11276] device-mapper: ioctl: populate_table: next target spec (offset 208) overlaps 'struct dm_ioctl' [ 106.674990][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.686415][T11307] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2428'. [ 106.764601][T11315] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2431'. [ 106.834915][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 106.836520][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.836544][ T42] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 106.846136][ T42] usb 6-1: string descriptor 0 read error: -22 [ 106.846237][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.855550][ T42] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 106.855582][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 106.855594][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 106.859878][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.860535][ T42] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 106.860569][ T42] usb 6-1: media controller created [ 106.860586][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860596][ T42] dw2102: i2c transfer failed. [ 106.860606][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860615][ T42] dw2102: i2c transfer failed. [ 106.860624][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860633][ T42] dw2102: i2c transfer failed. [ 106.860642][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860651][ T42] dw2102: i2c transfer failed. [ 106.860659][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860669][ T42] dw2102: i2c transfer failed. [ 106.860677][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 106.860687][ T42] dw2102: i2c transfer failed. [ 106.860692][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 106.873400][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.898046][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 106.898063][ T42] dw2102: command 0x0e transfer failed. [ 106.898069][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 106.898079][ T42] dw2102: command 0x0e transfer failed. [ 107.217002][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 107.217023][ T42] dw2102: command 0x0e transfer failed. [ 107.217029][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 107.217039][ T42] dw2102: command 0x0e transfer failed. [ 107.217045][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 107.217054][ T42] dw2102: command 0x51 transfer failed. [ 107.217643][T11296] dvb-usb: bulk message failed: -22 (3/0) [ 107.217660][T11296] dw2102: i2c transfer failed. [ 107.237251][ T42] DVB: Unable to find symbol ds3000_attach() [ 107.237263][ T42] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 107.295744][ T42] rc_core: IR keymap rc-su3000 not found [ 107.295759][ T42] Registered IR keymap rc-empty [ 107.296657][ T42] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 107.301194][ T42] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input8 [ 107.304105][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 107.304120][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 107.304129][ T42] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 107.311010][ T42] usb 6-1: USB disconnect, device number 3 [ 107.366311][ T42] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 107.671767][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 107.671786][ T43] audit: type=1400 audit(1794245650.871:624): avc: denied { accept } for pid=11397 comm="syz.2.2471" lport=52940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.814783][T11413] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 107.822033][T11413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.827367][T11413] team0: Port device netdevsim1 added [ 107.839675][T11413] team0: Port device netdevsim1 removed [ 107.841004][T11413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.847686][T11413] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 108.132172][T11448] CUSE: unknown device info "" [ 108.132187][T11448] CUSE: unknown device info "" [ 108.132194][T11448] CUSE: unknown device info "" [ 108.132201][T11448] CUSE: unknown device info "" [ 108.132207][T11448] CUSE: zero length info key specified [ 108.174612][T11452] 0x000000000000-0x000000020000 : "" [ 108.186079][T11452] ftl_cs: FTL header not found. [ 108.257985][T11462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2501'. [ 108.275833][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 108.302237][T11468] can0: slcan on ttynull. [ 108.321416][ T43] audit: type=1400 audit(1794245651.521:625): avc: denied { ioctl } for pid=11470 comm="syz.2.2505" path="socket:[29427]" dev="sockfs" ino=29427 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.356633][T11466] can0 (unregistered): slcan off ttynull. [ 108.439499][T11484] xt_hashlimit: size too large, truncated to 1048576 [ 108.542434][ T43] audit: type=1400 audit(1794245651.741:626): avc: denied { connect } for pid=11496 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.647528][T11511] __nla_validate_parse: 1 callbacks suppressed [ 108.647548][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 108.647562][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 108.647574][T11511] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 108.839736][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 108.898673][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 108.899166][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 108.970117][ T43] audit: type=1400 audit(1794245652.171:627): avc: denied { ioctl } for pid=11549 comm="syz.0.2543" path="socket:[30238]" dev="sockfs" ino=30238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.076972][ T43] audit: type=1400 audit(1794245652.271:628): avc: denied { mount } for pid=11561 comm="syz.3.2548" name="/" dev="ramfs" ino=27446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.464690][T11598] device-mapper: table: 248:2: integrity: Unknown tag size (-EINVAL) [ 109.464714][T11598] device-mapper: ioctl: error adding target to table [ 109.724640][T11619] xt_hashlimit: size too large, truncated to 1048576 [ 109.833261][T11634] validate_nla: 3 callbacks suppressed [ 109.833280][T11634] netlink: 'syz.3.2578': attribute type 1 has an invalid length. [ 109.833293][T11634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2578'. [ 109.833383][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2578'. [ 110.124433][ T43] audit: type=1400 audit(1794245653.321:629): avc: denied { ioctl } for pid=11668 comm="syz.2.2595" path="socket:[31106]" dev="sockfs" ino=31106 ioctlcmd=0x400461f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 110.124518][T11669] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2595:11669 [ 110.173130][T11671] vlan2: entered promiscuous mode [ 110.173288][T11671] vlan2: entered allmulticast mode [ 110.173300][T11671] bridge0: entered allmulticast mode [ 110.176742][T11671] bridge0: port 3(vlan2) entered blocking state [ 110.176876][T11671] bridge0: port 3(vlan2) entered disabled state [ 110.564506][ T43] audit: type=1400 audit(1794245653.761:630): avc: denied { create } for pid=11711 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 110.566683][ T43] audit: type=1400 audit(1794245653.771:631): avc: denied { write } for pid=11711 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 110.696319][ T68] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 110.705261][ T68] Bluetooth: hci0: command 0x040f tx timeout [ 110.719175][ T68] Bluetooth: Frame is too long (len 18, expected len 4) [ 110.736039][T11735] netlink: 'syz.1.2624': attribute type 11 has an invalid length. [ 110.790915][ T68] Bluetooth: hci3: link tx timeout [ 110.790934][ T68] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.001801][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2631'. [ 111.001822][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2631'. [ 111.001832][T11750] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 111.278155][T11772] device-mapper: raid: Choosing default region size of 4MiB [ 111.278906][T11772] device-mapper: table: 248:14: raid: RAID device lookup failure (-ENOENT) [ 111.278924][T11772] device-mapper: ioctl: error adding target to table [ 111.342931][T11781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2645'. [ 111.468455][ T43] audit: type=1400 audit(1794245654.671:632): avc: denied { write } for pid=11792 comm="syz.0.2651" name="nullb" dev="configfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.526790][ T43] audit: type=1400 audit(1794245654.731:633): avc: denied { append } for pid=11800 comm="syz.0.2655" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.572093][T11807] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 111.622233][T11801] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 111.622250][T11801] device-mapper: ioctl: error adding target to table [ 111.771482][T11837] Invalid logical block size (-14) [ 111.908951][T11859] device-mapper: table: 248:1: thin-pool: Invalid block size (-EINVAL) [ 111.908977][T11859] device-mapper: ioctl: error adding target to table [ 111.991221][T11866] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 112.074582][T11873] xt_hashlimit: size too large, truncated to 1048576 [ 112.077184][T11876] team0: entered allmulticast mode [ 112.077202][T11876] team_slave_0: entered allmulticast mode [ 112.077220][T11876] team_slave_1: entered allmulticast mode [ 112.090172][T11877] ip_tables: iptables: counters copy to user failed while replacing table [ 112.245183][ T856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.395646][ T856] usb 5-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 112.396740][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 112.396761][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.396776][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 112.396793][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.400302][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.400322][ T856] usb 5-1: Product: syz [ 112.400335][ T856] usb 5-1: Manufacturer: syz [ 112.400348][ T856] usb 5-1: SerialNumber: syz [ 112.403867][T11908] tipc: Started in network mode [ 112.403881][T11908] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 112.404387][ T856] usb 5-1: config 0 descriptor?? [ 112.406161][T11908] tipc: Enabled bearer , priority 2 [ 112.634593][ T856] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 112.660566][T11925] batadv0: entered promiscuous mode [ 112.662137][T11925] macvlan2: entered promiscuous mode [ 112.662286][T11925] macvlan2: entered allmulticast mode [ 112.662296][T11925] batadv0: entered allmulticast mode [ 112.662910][T11925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.828614][ T856] usb 5-1: USB disconnect, device number 4 [ 112.859166][ T68] Bluetooth: hci3: command 0x0406 tx timeout [ 113.025546][T11955] netlink: 'syz.1.2726': attribute type 6 has an invalid length. [ 113.056220][T11958] usb usb8: usbfs: process 11958 (syz.1.2727) did not claim interface 0 before use [ 113.129559][T11965] device-mapper: table: 248:5: striped: Invalid stripe count (-EINVAL) [ 113.129574][T11965] device-mapper: ioctl: error adding target to table [ 113.450543][T11991] Bluetooth: hci0: load_link_keys: too big key_count value 5121 [ 113.529230][ T5881] tipc: Node number set to 4269801488 [ 113.709279][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 113.709296][ T43] audit: type=1400 audit(1794245656.911:637): avc: denied { map } for pid=12002 comm="syz.0.2748" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.709571][ T43] audit: type=1400 audit(1794245656.911:638): avc: denied { execute } for pid=12002 comm="syz.0.2748" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.845921][T11950] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 114.034641][T12027] overlayfs: failed to resolve './file0/file0': -2 [ 114.154696][T12043] jffs2: notice: (12043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (1 dead, 0 orphan) found. [ 114.512832][T12092] tipc: MTU too low for tipc bearer [ 114.931845][T12171] ip_tables: iptables: counters copy to user failed while replacing table [ 114.934193][T12168] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 115.058773][ T43] audit: type=1400 audit(1794245658.261:639): avc: denied { read } for pid=5496 comm="dhcpcd" name="n52" dev="tmpfs" ino=2678 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.059317][ T43] audit: type=1400 audit(1794245658.261:640): avc: denied { open } for pid=5496 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=2678 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.059892][ T43] audit: type=1400 audit(1794245658.261:641): avc: denied { getattr } for pid=5496 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=2678 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.210369][ T43] audit: type=1400 audit(1794245658.411:642): avc: denied { write } for pid=12198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.210553][ T43] audit: type=1400 audit(1794245658.411:643): avc: denied { create } for pid=12198 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.210995][ T43] audit: type=1400 audit(1794245658.411:644): avc: denied { write } for pid=12198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2686 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.211390][ T43] audit: type=1400 audit(1794245658.411:645): avc: denied { append } for pid=12198 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2686 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.234785][T12204] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.268938][ T43] audit: type=1400 audit(1794245658.471:646): avc: denied { bind } for pid=12211 comm="syz.1.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.709775][T12274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 115.709800][T12274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.709897][T12274] vhci_hcd vhci_hcd.0: Device attached [ 115.944956][ T64] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 115.965434][ T66] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 116.128012][ T66] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.128518][ T66] usb 6-1: config 0 has no interfaces? [ 116.128546][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.136916][ T66] usb 6-1: config 0 descriptor?? [ 116.198373][T12302] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 116.198391][T12302] overlayfs: missing 'lowerdir' [ 116.246657][T12304] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 116.343386][ T66] usb 6-1: USB disconnect, device number 4 [ 116.345313][T12275] vhci_hcd: connection closed [ 116.350814][ T5880] vhci_hcd vhci_hcd.1: stop threads [ 116.350839][ T5880] vhci_hcd vhci_hcd.1: release socket [ 116.350912][ T5880] vhci_hcd vhci_hcd.1: disconnect device [ 116.405281][ T64] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 116.537784][T12317] ip_tables: iptables: counters copy to user failed while replacing table [ 116.708388][T12330] __nla_validate_parse: 5 callbacks suppressed [ 116.708539][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 116.785035][ T5798] Bluetooth: hci0: command 0x040f tx timeout [ 116.785999][ T5143] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 116.899803][T12358] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 116.899817][T12358] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2909'. [ 116.965969][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 116.966641][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 116.966791][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 116.966967][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 116.967322][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 117.040770][T12378] fuseblk: Bad value for 'fd' [ 117.068063][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2916'. [ 117.111291][T12390] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2926'. [ 117.193850][T12403] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.336939][T12423] fuseblk: Bad value for 'fd' [ 117.492536][T12444] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 117.493819][T12444] bond3 (unregistering): Released all slaves [ 117.520719][T12447] program syz.1.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.522936][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 118.546603][T12458] syz.3.2958 (12458): drop_caches: 1 [ 118.547678][T12523] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 118.739113][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 118.739132][ T43] audit: type=1400 audit(1794245661.941:654): avc: denied { map } for pid=12549 comm="syz.2.3000" path="/dev/comedi3" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.739346][ T43] audit: type=1400 audit(1794245661.941:655): avc: denied { execute } for pid=12549 comm="syz.2.3000" path="/dev/comedi3" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.891490][T12572] ip_tables: iptables: counters copy to user failed while replacing table [ 119.048953][ T43] audit: type=1400 audit(1794245662.251:656): avc: denied { write } for pid=12588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.088069][T12586] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 119.094670][T12586] netlink: 'syz.2.3017': attribute type 1 has an invalid length. [ 119.144164][ T43] audit: type=1400 audit(1794245662.341:657): avc: denied { write } for pid=12605 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.272705][ T43] audit: type=1400 audit(1794245662.471:658): avc: denied { write } for pid=12616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.274427][T12623] xt_hashlimit: size too large, truncated to 1048576 [ 119.354302][ T43] audit: type=1400 audit(1794245662.551:659): avc: denied { write } for pid=12631 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.437337][ T43] audit: type=1400 audit(1794245662.631:660): avc: denied { write } for pid=12639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.485421][ T43] audit: type=1400 audit(1794245662.691:661): avc: denied { write } for pid=12648 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.572906][ T43] audit: type=1400 audit(1794245662.771:662): avc: denied { write } for pid=12656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.627299][ T43] audit: type=1400 audit(1794245662.831:663): avc: denied { write } for pid=12669 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.818142][T12693] netlink: 'syz.2.3055': attribute type 13 has an invalid length. [ 119.870220][T12698] ip_tables: iptables: counters copy to user failed while replacing table [ 120.327813][T12761] nbd: couldn't find device at index 2097152 [ 120.652333][T12791] team0: Device ipip0 is up. Set it down before adding it as a team port [ 121.171878][T12805] netlink: 'syz.3.3106': attribute type 4 has an invalid length. [ 121.434763][T12807] syz.0.3107 (12807): drop_caches: 1 [ 121.581421][T12831] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 121.708163][T12845] syz.1.3125 (12845): drop_caches: 1 [ 121.813036][T12863] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 122.071066][T12895] hugetlbfs: Bad value '%' for mount option 'size' [ 122.071066][T12895] [ 122.161109][T12903] netlink: 'syz.1.3154': attribute type 11 has an invalid length. [ 122.927919][T12962] netlink: 'syz.2.3182': attribute type 11 has an invalid length. [ 122.927940][T12962] __nla_validate_parse: 17 callbacks suppressed [ 122.927950][T12962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3182'. [ 122.960380][T12964] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 123.070924][T12972] random: crng reseeded on system resumption [ 123.153872][T12980] xt_IDLETIMER: timeout value is too big [ 123.286669][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 123.286691][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 123.288219][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'. [ 123.288234][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'. [ 123.288244][T12993] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 123.288254][T12993] iwpm_mapping_info_cb: Unable to parse nlmsg [ 123.322443][T12928] orangefs_mount: mount request failed with -4 [ 123.492156][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 123.492171][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'. [ 123.492186][T13022] netlink: 'syz.3.3212': attribute type 7 has an invalid length. [ 123.492193][T13022] netlink: 'syz.3.3212': attribute type 13 has an invalid length. [ 123.578966][T13034] dummy0: left promiscuous mode [ 123.844761][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3235'. [ 123.886787][T13083] netlink: 'syz.3.3236': attribute type 17 has an invalid length. [ 123.892284][T13085] ip_tables: iptables: counters copy to user failed while replacing table [ 123.958967][T13093] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3242'. [ 124.231516][T13130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.379217][T13139] ALSA: seq fatal error: cannot create timer (-19) [ 124.444756][ T5798] Bluetooth: hci4: sending frame failed (-49) [ 124.449648][ T5143] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 124.527429][ T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.527457][ T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.527474][ T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.527490][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.542428][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 124.711340][T13173] bridge_slave_0: default FDB implementation only supports local addresses [ 124.802169][T13180] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 125.247684][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 125.247701][ T43] audit: type=1400 audit(1794245668.451:676): avc: denied { write } for pid=13230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.251791][T13240] ip6gretap0: default FDB implementation only supports local addresses [ 125.348521][ T43] audit: type=1400 audit(1794245668.551:677): avc: denied { write } for pid=13250 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.494182][ T43] audit: type=1400 audit(1794245668.691:678): avc: denied { write } for pid=13272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.571841][ T43] audit: type=1400 audit(1794245668.771:679): avc: denied { write } for pid=13286 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.679745][ T43] audit: type=1400 audit(1794245668.881:680): avc: denied { write } for pid=13300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.743895][ T43] audit: type=1400 audit(1794245668.941:681): avc: denied { write } for pid=13311 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.776263][ T43] audit: type=1400 audit(1794245668.981:682): avc: denied { mounton } for pid=13315 comm="syz.2.3340" path="/787/dbg/bluetooth/l2cap" dev="debugfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 125.914900][T13333] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 125.916342][T13329] IPVS: stopping master sync thread 13333 ... [ 125.972782][T13336] CUSE: info not properly terminated [ 126.427306][T13384] tipc: Enabling of bearer rejected, failed to enable media [ 126.780640][ T43] audit: type=1400 audit(1794245669.981:683): avc: denied { append } for pid=13434 comm="syz.2.3395" name="trace_marker" dev="tracefs" ino=5905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 126.783762][T13437] ip6_vti0: entered promiscuous mode [ 126.878080][ T43] audit: type=1400 audit(1794245670.081:684): avc: denied { connect } for pid=13448 comm="syz.0.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.018101][T13465] netlink: 'syz.0.3407': attribute type 12 has an invalid length. [ 127.444417][T13501] Bluetooth: hci0: unsupported parameter 5135 [ 127.444437][T13501] Bluetooth: hci0: unsupported parameter 8192 [ 127.444447][T13501] Bluetooth: hci0: unsupported parameter 5135 [ 127.444456][T13501] Bluetooth: hci0: unsupported parameter 8192 [ 127.452476][T13503] syz.3.3426 (13503): /proc/13502/oom_adj is deprecated, please use /proc/13502/oom_score_adj instead. [ 127.520951][ T43] audit: type=1400 audit(1794245670.721:685): avc: denied { create } for pid=13510 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.313347][T13625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.313439][T13625] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.331507][T13625] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.339892][T13625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.339976][T13625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.347787][T13625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.358532][T13625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.361398][T13625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.361505][T13625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.365619][T13625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.372781][T13625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.372886][T13625] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.540878][T13661] __nla_validate_parse: 6 callbacks suppressed [ 128.540899][T13661] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3501'. [ 128.662838][T13671] xt_IDLETIMER: timeout value is too big [ 128.802881][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'. [ 128.802903][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3510'. [ 128.802930][T13680] netlink: 'syz.0.3510': attribute type 7 has an invalid length. [ 128.802943][T13680] netlink: 'syz.0.3510': attribute type 13 has an invalid length. [ 128.938677][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3515'. [ 128.938713][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3515'. [ 128.940415][T13692] geneve0: entered promiscuous mode [ 128.992847][T13697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'. [ 129.857075][T13702] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3520'. [ 129.893244][T13704] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 129.893511][T13704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.199190][T13731] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 130.199205][T13731] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3534'. [ 130.375278][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 130.375326][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.375370][ T68] Bluetooth: hci0: command 0x040f tx timeout [ 130.377348][T13624] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.377497][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.417755][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 130.417787][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 130.526429][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 130.526443][ T43] audit: type=1400 audit(1794245673.731:689): avc: denied { firmware_load } for pid=13761 comm="syz.3.3549" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 130.597511][T13763] syz.3.3549 (13763) used greatest stack depth: 18504 bytes left [ 130.640535][ T43] audit: type=1400 audit(1794245673.841:690): avc: denied { unlink } for pid=13768 comm="syz.2.3552" name="#1" dev="tmpfs" ino=4227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.641125][T13769] overlayfs: conflicting lowerdir path [ 130.689312][T13779] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 130.769299][T13788] xt_cgroup: invalid path, errno=-2 [ 130.970823][ T5883] hid-sensor-hub 0003:1234:5678.0006: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 131.096536][T13818] fido_id[13818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.191416][T13832] netlink: 'syz.3.3581': attribute type 8 has an invalid length. [ 131.261871][T13840] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 131.320382][ T43] audit: type=1326 audit(1794245674.521:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13845 comm="syz.1.3588" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb97679fb19 code=0x0 [ 131.624022][T13874] gfs2: path_lookup on c::: returned error -2 [ 131.658691][ T43] audit: type=1400 audit(1794245674.861:692): avc: denied { execute } for pid=13877 comm="syz.3.3602" dev="hugetlbfs" ino=37579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 131.659221][ T43] audit: type=1400 audit(1794245674.861:693): avc: denied { execute_no_trans } for pid=13877 comm="syz.3.3602" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=37579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 131.782865][T13892] device-mapper: raid: Choosing default region size of 4MiB [ 131.783380][T13892] device-mapper: table: 248:15: raid: Component device(s) too small (-EINVAL) [ 131.783394][T13892] device-mapper: ioctl: error adding target to table [ 131.864939][T13901] CUSE: unknown device info "" [ 131.864954][T13901] CUSE: unknown device info "" [ 131.864961][T13901] CUSE: unknown device info "ÿ" [ 131.864968][T13901] CUSE: unknown device info "" [ 131.864975][T13901] CUSE: unknown device info "ý" [ 131.864981][T13901] CUSE: unknown device info "" [ 131.864988][T13901] CUSE: unknown device info "" [ 131.864995][T13901] CUSE: DEVNAME unspecified [ 131.904733][T13905] Bluetooth: hci0: unsupported parameter 5135 [ 131.904747][T13905] Bluetooth: hci0: invalid len left 14, exp >= 258 [ 132.053610][T13919] [U] ¥ [ 132.053631][T13919] [U] [ 132.053645][T13919] [U] [ 132.053659][T13919] [U] [ 132.053674][T13919] [U] [ 132.053688][T13919] [U] [ 132.053702][T13919] [U] [ 132.053717][T13919] [U] [ 132.053734][T13919] [U] [ 132.053749][T13919] [U] [ 132.053764][T13919] [U] [ 132.053778][T13919] [U] [ 132.053801][T13919] [U] [ 132.053815][T13919] [U] [ 132.053828][T13919] [U] [ 132.053840][T13919] [U] [ 132.053854][T13919] [U] [ 132.053867][T13919] [U] [ 132.053880][T13919] [U] [ 132.053893][T13919] [U] [ 132.053911][T13919] [U] [ 132.053924][T13919] [U] [ 132.053937][T13919] [U] [ 132.053950][T13919] [U] [ 132.054008][T13919] [U] [ 132.054024][T13919] [U] [ 132.054039][T13919] [U] [ 132.054054][T13919] [U] [ 132.054075][T13919] [U] [ 132.054091][T13919] [U] [ 132.054106][T13919] [U] [ 132.054121][T13919] [U] [ 132.054136][T13919] [U] [ 132.054151][T13919] [U] [ 132.054165][T13919] [U] [ 132.054189][T13919] [U] [ 132.054210][T13919] [U] [ 132.054225][T13919] [U] [ 132.054240][T13919] [U] [ 132.054256][T13919] [U] [ 132.054272][T13919] [U] [ 132.054286][T13919] [U] [ 132.054301][T13919] [U] [ 132.054315][T13919] [U] [ 132.054336][T13919] [U] [ 132.054359][T13919] [U] [ 132.054372][T13919] [U] [ 132.054385][T13919] [U] [ 132.054399][T13919] [U] [ 132.054411][T13919] [U] [ 132.054426][T13919] [U] [ 132.054442][T13919] [U] [ 132.054463][T13919] [U] [ 132.054478][T13919] [U] [ 132.054493][T13919] [U] [ 132.054512][T13919] [U] [ 132.054529][T13919] [U] [ 132.054544][T13919] [U] [ 132.054559][T13919] [U] [ 132.054573][T13919] [U] [ 132.054594][T13919] [U] [ 132.054610][T13919] [U] [ 132.054624][T13919] [U] [ 132.054638][T13919] [U] [ 132.054654][T13919] [U] [ 132.054669][T13919] [U] [ 132.054683][T13919] [U] [ 132.054698][T13919] [U] [ 132.054718][T13919] [U] [ 132.054731][T13919] [U] [ 132.054743][T13919] [U] [ 132.054756][T13919] [U] [ 132.054770][T13919] [U] [ 132.054782][T13919] [U] [ 132.054795][T13919] [U] [ 132.054825][T13919] [U] [ 132.055063][T13919] [U] [ 132.055086][T13919] [U] [ 132.055101][T13919] [U] [ 132.055115][T13919] [U] [ 132.055132][T13919] [U] [ 132.055148][T13919] [U] [ 132.055167][T13919] [U] [ 132.055186][T13919] [U] [ 132.055213][T13919] [U] [ 132.055227][T13919] [U] [ 132.055240][T13919] [U] [ 132.055252][T13919] [U] [ 132.055266][T13919] [U] [ 132.055278][T13919] [U] [ 132.055291][T13919] [U] [ 132.055303][T13919] [U] [ 132.055324][T13919] [U] [ 132.055357][T13919] [U] [ 132.055374][T13919] [U] [ 132.055388][T13919] [U] [ 132.055405][T13919] [U] [ 132.055419][T13919] [U] [ 132.055435][T13919] [U] [ 132.055449][T13919] [U] [ 132.055471][T13919] [U] [ 132.055486][T13919] [U] [ 132.055506][T13919] [U] [ 132.055519][T13919] [U] [ 132.055536][T13919] [U] [ 132.055550][T13919] [U] [ 132.055565][T13919] [U] [ 132.055580][T13919] [U] [ 132.055600][T13919] [U] [ 132.055615][T13919] [U] [ 132.055630][T13919] [U] [ 132.055644][T13919] [U] [ 132.055660][T13919] [U] [ 132.055675][T13919] [U] [ 132.055689][T13919] [U] [ 132.055702][T13919] [U] [ 132.055720][T13919] [U] [ 132.055747][T13919] [U] [ 132.055762][T13919] [U] [ 132.055775][T13919] [U] [ 132.055813][T13919] [U] [ 132.055828][T13919] [U] [ 132.055841][T13919] [U] [ 132.055854][T13919] [U] [ 132.055867][T13919] [U] [ 132.055880][T13919] [U] [ 132.055893][T13919] [U] [ 132.057538][T13918] [U] [ 132.160090][ T43] audit: type=1400 audit(1794245675.361:694): avc: denied { write } for pid=13921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.223940][ T43] audit: type=1400 audit(1794245675.421:695): avc: denied { write } for pid=13935 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.455238][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.455264][ T5798] Bluetooth: hci0: command 0x040f tx timeout [ 132.455277][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 132.455291][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.575392][ T43] audit: type=1400 audit(1794245675.781:696): avc: denied { write } for pid=13978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.674179][ T43] audit: type=1400 audit(1794245675.871:697): avc: denied { write } for pid=13993 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.698676][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.698726][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.774311][ T43] audit: type=1400 audit(1794245675.971:698): avc: denied { write } for pid=14006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.228462][T14082] lo: entered allmulticast mode [ 133.228740][T14082] bond0: entered allmulticast mode [ 133.229013][T14082] dummy0: entered allmulticast mode [ 133.229166][T14082] eql: entered allmulticast mode [ 133.229312][T14082] ifb0: entered allmulticast mode [ 133.229451][T14082] ifb1: entered allmulticast mode [ 133.253455][T14082] e1000 0000:00:07.0 eth0: entered allmulticast mode [ 133.260573][T14082] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 133.260746][T14082] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 133.261118][T14082] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 133.261415][T14082] hwsim0: entered allmulticast mode [ 133.261698][T14082] ieee802154 phy0 wpan0: entered allmulticast mode [ 133.261857][T14082] ieee802154 phy1 wpan1: entered allmulticast mode [ 133.262060][T14082] teql0: entered allmulticast mode [ 133.262159][T14082] tunl0: entered allmulticast mode [ 133.262319][T14082] gre0: entered allmulticast mode [ 133.262387][T14082] gretap0: entered allmulticast mode [ 133.262478][T14082] erspan0: entered allmulticast mode [ 133.262551][T14082] ip_vti0: entered allmulticast mode [ 133.262612][T14082] ip6_vti0: entered allmulticast mode [ 133.262681][T14082] sit0: entered allmulticast mode [ 133.262753][T14082] ip6tnl0: entered allmulticast mode [ 133.262839][T14082] ip6gre0: entered allmulticast mode [ 133.262908][T14082] lapb0: entered allmulticast mode [ 133.263295][T14082] lapb1: entered allmulticast mode [ 133.263573][T14082] lapb2: entered allmulticast mode [ 133.263824][T14082] lapb3: entered allmulticast mode [ 133.264161][T14082] lapb4: entered allmulticast mode [ 133.264224][T14082] lapb5: entered allmulticast mode [ 133.264493][T14082] lapb6: entered allmulticast mode [ 133.264691][T14082] lowpan0: entered allmulticast mode [ 133.270130][T14082] rxe_eth0: entered allmulticast mode [ 133.270496][T14082] geneve0: entered allmulticast mode [ 133.270846][T14082] lapb7: entered allmulticast mode [ 133.271031][T14082] bond1: entered allmulticast mode [ 133.271439][T14082] lapb8: entered allmulticast mode [ 133.271859][T14082] lapb9: entered allmulticast mode [ 133.271982][T14082] ieee802154 phy1 wpan2: entered allmulticast mode [ 133.272048][T14082] wireguard0: entered allmulticast mode [ 133.272279][T14082] wg2: entered allmulticast mode [ 134.544957][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.544980][ T5143] Bluetooth: hci0: command 0x040f tx timeout [ 134.544993][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.674471][T14164] tipc: Enabled bearer , priority 10 [ 134.684001][T14166] __nla_validate_parse: 6 callbacks suppressed [ 134.684014][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'. [ 134.717829][T14171] size and base must be multiples of 4 kiB [ 134.717851][T14171] CPU: 1 UID: 0 PID: 14171 Comm: syz.3.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.717877][T14171] Tainted: [L]=SOFTLOCKUP [ 134.717883][T14171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.717894][T14171] Call Trace: [ 134.717900][T14171] [ 134.717908][T14171] dump_stack_lvl+0x100/0x190 [ 134.717945][T14171] mtrr_add.cold+0x74/0x87 [ 134.717967][T14171] mtrr_ioctl+0x25a/0xcf0 [ 134.717989][T14171] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 134.718011][T14171] ? __pfx_mtrr_ioctl+0x10/0x10 [ 134.718039][T14171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.718063][T14171] ? __fget_files+0x34/0x3d0 [ 134.718100][T14171] ? __pfx_mtrr_ioctl+0x10/0x10 [ 134.718123][T14171] proc_reg_unlocked_ioctl+0x229/0x320 [ 134.718143][T14171] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 134.718164][T14171] __x64_sys_ioctl+0x18e/0x210 [ 134.718186][T14171] do_syscall_64+0x123/0x7b0 [ 134.718210][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.718229][T14171] RIP: 0033:0x7f77e3d9fb19 [ 134.718245][T14171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.718263][T14171] RSP: 002b:00007f77e4c40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.718281][T14171] RAX: ffffffffffffffda RBX: 00007f77e4025fa0 RCX: 00007f77e3d9fb19 [ 134.718293][T14171] RDX: 0000200000000380 RSI: 0000000040104d01 RDI: 0000000000000003 [ 134.718304][T14171] RBP: 00007f77e3e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 134.718315][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.718326][T14171] R13: 00007f77e4026038 R14: 00007f77e4025fa0 R15: 00007ffe7dde7288 [ 134.718352][T14171] [ 134.877188][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3739'. [ 134.982715][T14202] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 135.086659][T14220] ip_tables: iptables: counters copy to user failed while replacing table [ 135.125432][T14223] block2mtd: error: cannot open device /dev/ram0 [ 135.190044][T14233] loop2: detected capacity change from 0 to 7 [ 135.200133][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.200326][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.214853][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.214922][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.215256][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.215312][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.215487][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.215539][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.216900][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.216945][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.217435][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.217493][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.217620][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.217666][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.217791][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.217835][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.218635][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.218685][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.221555][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.221623][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 135.223195][T14233] ldm_validate_partition_table(): Disk read failed. [ 135.227162][T14233] Dev loop2: unable to read RDB block 0 [ 135.227564][T14233] loop2: unable to read partition table [ 135.227690][T14233] loop2: partition table beyond EOD, truncated [ 135.227710][T14233] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 135.448623][T14264] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 135.542156][T14273] evm: overlay not supported [ 135.686681][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.851683][ T64] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 135.852662][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.852682][ T64] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.868845][ T64] usb 5-1: string descriptor 0 read error: -22 [ 135.868957][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.880918][ T64] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 135.881027][ T64] etas_es58x 5-1:1.0: could not retrieve the product info string [ 135.926825][T14286] i2c i2c-0: new_device: Invalid device name [ 136.015753][T14290] batadv1: entered promiscuous mode [ 136.015767][T14290] batadv1: entered allmulticast mode [ 136.021271][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 136.034175][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 136.034191][ T43] audit: type=1400 audit(1794245679.231:711): avc: denied { write } for pid=14289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.079694][T14297] vhci_hcd: pdev 268435455 [ 136.091916][T14265] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 136.096141][ C2] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 136.096770][ T43] audit: type=1400 audit(1794245679.301:712): avc: denied { write } for pid=14296 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.100014][ C2] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 136.102516][ C2] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 136.118400][ C2] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 136.121715][ C2] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 136.121816][T14265] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 136.125526][ T64] usb 5-1: USB disconnect, device number 5 [ 136.126481][ T64] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 136.289557][ T43] audit: type=1400 audit(1794245679.491:713): avc: denied { write } for pid=14306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.361365][ T43] audit: type=1400 audit(1794245679.561:714): avc: denied { write } for pid=14313 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.421488][ T43] audit: type=1400 audit(1794245679.621:715): avc: denied { write } for pid=14318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.492743][ T43] audit: type=1400 audit(1794245679.691:716): avc: denied { write } for pid=14326 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.600388][ T43] audit: type=1400 audit(1794245679.801:717): avc: denied { write } for pid=14333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.615363][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.680152][ T43] audit: type=1400 audit(1794245679.881:718): avc: denied { search } for pid=14344 comm="syz.0.3802" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 136.680943][ T43] audit: type=1400 audit(1794245679.881:719): avc: denied { write } for pid=14344 comm="syz.0.3802" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 136.680969][ T43] audit: type=1400 audit(1794245679.881:720): avc: denied { open } for pid=14344 comm="syz.0.3802" path="/914/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 136.878295][T14371] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 136.921598][T14377] sctp: Trying to GSO but underlying device doesn't support it. [ 136.976439][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.106251][T14395] ptp ptp0: max value is 20 [ 137.145823][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 137.147513][ T64] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.156855][ T64] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 137.156905][ T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 137.156926][ T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.156944][ T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 137.156964][ T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.156982][ T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.157015][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.383185][ T64] usb 5-1: GET_CAPABILITIES returned 0 [ 137.383227][ T64] usbtmc 5-1:16.0: can't read capabilities [ 137.479064][T14424] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119d94 [ 137.479083][T14424] flags: 0x57ff00000000004(referenced|node=1|zone=2|lastcpupid=0x7ff) [ 137.479095][T14424] page_type: f2(table) [ 137.479107][T14424] raw: 057ff00000000004 0000000000000000 dead000000000122 0000000000000000 [ 137.479121][T14424] raw: 0000000000000000 0000000000000000 00000001f2000000 0000000000000000 [ 137.479130][T14424] page dumped because: unmovable page [ 137.479138][T14424] page_owner tracks the page as allocated [ 137.479144][T14424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9859, tgid 9858 (syz.0.1762), ts 92220534651 [ 137.479164][T14424] post_alloc_hook+0xfd/0x120 [ 137.479182][T14424] get_page_from_freelist+0x112f/0x3640 [ 137.479197][T14424] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 137.479212][T14424] alloc_pages_mpol+0x201/0x560 [ 137.479224][T14424] alloc_pages_noprof+0x1a/0x160 [ 137.479238][T14424] __pte_alloc_kernel+0x22/0x5c0 [ 137.479252][T14424] __apply_to_page_range+0x10f6/0x1520 [ 137.479265][T14424] __kasan_populate_vmalloc+0x140/0x210 [ 137.479281][T14424] alloc_vmap_area+0x963/0x2bc0 [ 137.479290][T14424] __get_vm_area_node+0x1ed/0x350 [ 137.479301][T14424] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 137.479346][T14424] vmalloc_user_noprof+0x9e/0xe0 [ 137.479366][T14424] vb2_vmalloc_alloc+0x135/0x410 [ 137.479382][T14424] __vb2_queue_alloc+0x8d5/0x1160 [ 137.479392][T14424] vb2_core_reqbufs+0x899/0xf30 [ 137.479402][T14424] vb2_ioctl_reqbufs+0x291/0x450 [ 137.479417][T14424] page_owner free stack trace missing [ 137.593012][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 137.595784][T14352] usbtmc 5-1:16.0: Unable to send data, error -71 [ 137.599970][ T66] usb 5-1: USB disconnect, device number 6 [ 137.656984][ T1181] wlan1: Trigger new scan to find an IBSS to join [ 137.916340][T14419] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 138.015675][T14448] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 138.527831][T14493] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3868'. [ 138.733009][T14511] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 138.950627][T14534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3886'. [ 139.009320][T14542] i2c i2c-0: delete_device: Can't find device in list [ 139.238827][T14568] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 139.243523][T14569] zero sized request [ 139.595103][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3913'. [ 139.635050][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 139.785470][ T30] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.786398][ T30] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 139.786437][ T30] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.786456][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 139.788438][ T30] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.788457][ T30] usb 7-1: Product: syz [ 139.788469][ T30] usb 7-1: Manufacturer: syz [ 139.788481][ T30] usb 7-1: SerialNumber: syz [ 139.790527][ T30] usb 7-1: config 0 descriptor?? [ 139.793427][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 139.793447][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 139.799885][ T30] usb 7-1: selecting invalid altsetting 0 [ 139.847297][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3924'. [ 139.874099][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3926'. [ 139.874176][T14614] xfrm0: entered promiscuous mode [ 139.874186][T14614] xfrm0: entered allmulticast mode [ 139.882556][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3926'. [ 139.897685][T14616] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 140.279029][T14651] bpf: Bad value for 'uid' [ 140.398192][T14581] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 140.408023][T14662] netlink: 'syz.1.3948': attribute type 1 has an invalid length. [ 140.408044][T14662] netlink: 'syz.1.3948': attribute type 2 has an invalid length. [ 140.530578][T14673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.530602][T14673] block device autoloading is deprecated and will be removed. [ 140.549176][T14581] usb 7-1: device firmware changed [ 140.551581][ T5881] usb 7-1: USB disconnect, device number 11 [ 140.573517][ T5883] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0007/input/input11 [ 140.623960][ T5883] hid-generic 0003:1B1E:0C13.0007: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 140.675124][T14678] fido_id[14678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.708353][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3956'. [ 140.708375][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3956'. [ 140.708387][T14682] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 140.708400][T14682] iwpm_hello_cb: Unable to parse nlmsg [ 140.766973][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 140.775453][ T1181] wlan1: Trigger new scan to find an IBSS to join [ 140.808694][T14689] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 140.918671][ T5881] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.919881][ T5881] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 140.919919][ T5881] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.919938][ T5881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 140.922552][ T5881] usb 7-1: string descriptor 0 read error: -22 [ 140.922646][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.924623][ T5881] usb 7-1: config 0 descriptor?? [ 140.930075][ T5881] hub 7-1:0.0: bad descriptor, ignoring hub [ 140.930094][ T5881] hub 7-1:0.0: probe with driver hub failed with error -5 [ 140.932526][ T5881] usb 7-1: selecting invalid altsetting 0 [ 140.995768][T14699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.995855][T14699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.995921][T14699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.048489][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 141.048502][ T43] audit: type=1400 audit(1794245684.251:752): avc: denied { bind } for pid=14706 comm="syz.0.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.255192][ T856] usb 7-1: USB disconnect, device number 12 [ 141.312128][T14725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.370810][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3979'. [ 141.370898][T14729] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3979'. [ 141.532656][ T43] audit: type=1400 audit(1794245684.731:753): avc: denied { read } for pid=14738 comm="syz.1.3983" dev="sockfs" ino=40875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.532857][ T43] audit: type=1400 audit(1794245684.731:754): avc: denied { name_bind 0x1000000 } for pid=14738 comm="syz.1.3983" path="socket:[40875]" dev="sockfs" ino=40875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.572839][T14741] SELinux: security policydb version 15 (MLS) not backwards compatible [ 141.572880][T14741] SELinux: failed to load policy [ 141.620605][T14743] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 141.620634][T14743] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 141.620659][T14743] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 141.620676][T14743] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 141.620688][T14743] page dumped because: unmovable page [ 141.620697][T14743] page_owner tracks the page as allocated [ 141.620704][T14743] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5781, tgid 5781 (syz-executor), ts 47622414261 [ 141.620735][T14743] post_alloc_hook+0xfd/0x120 [ 141.620763][T14743] get_page_from_freelist+0x112f/0x3640 [ 141.620788][T14743] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 141.620813][T14743] alloc_pages_mpol+0x201/0x560 [ 141.620835][T14743] alloc_pages_noprof+0x1a/0x160 [ 141.620860][T14743] __vmalloc_node_range_noprof+0x899/0x1440 [ 141.620881][T14743] vmalloc_user_noprof+0x9e/0xe0 [ 141.620900][T14743] kcov_ioctl+0x4d/0x750 [ 141.620916][T14743] __x64_sys_ioctl+0x18e/0x210 [ 141.620934][T14743] do_syscall_64+0x123/0x7b0 [ 141.620955][T14743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.620972][T14743] page_owner free stack trace missing [ 141.992703][T14753] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 142.108043][T14772] sd 0:0:0:0: PR command failed: 1026 [ 142.108070][T14772] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 142.108100][T14772] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 142.193987][T14779] device-mapper: table: 248:14: integrity: Invalid argument count (-EINVAL) [ 142.194002][T14779] device-mapper: ioctl: error adding target to table [ 143.024938][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 143.024966][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.024981][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.189266][T14807] kAFS: bad VL server IP address [ 143.271527][T14818] bond0: option arp_interval: invalid value () [ 143.271553][T14818] bond0: option arp_interval: allowed values 0 - 2147483647 [ 143.429663][T14819] Process accounting resumed [ 143.587768][T14847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4034'. [ 143.601496][ T43] audit: type=1400 audit(1794245686.801:755): avc: denied { mount } for pid=14848 comm="syz.3.4035" name="/" dev="autofs" ino=43126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.620313][ T43] audit: type=1400 audit(1794245686.821:756): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.642479][ T43] audit: type=1400 audit(1794245686.841:757): avc: denied { watch watch_reads } for pid=14850 comm="syz.2.4038" path="/942/file0" dev="tmpfs" ino=4794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 143.728922][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 143.735201][ T231] wlan1: Trigger new scan to find an IBSS to join [ 144.063099][ T43] audit: type=1400 audit(1794245687.261:758): avc: denied { read } for pid=14879 comm="syz.2.4050" dev="nsfs" ino=4026533178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.065371][ T43] audit: type=1400 audit(1794245687.261:759): avc: denied { open } for pid=14879 comm="syz.2.4050" path="net:[4026533178]" dev="nsfs" ino=4026533178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.137992][ T5784] svc: failed to register nfsdv3 RPC service (errno 5). [ 144.138015][ T5784] failed to unregister udp with rpcbind [ 144.151057][T14882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.151271][T14882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.152498][T14882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.152570][T14882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.656794][ T1181] wlan1: Creating new IBSS network, BSSID 86:8f:a9:72:2d:c4 [ 144.897253][ T43] audit: type=1807 audit(1794245688.101:760): action=appraise UNKNOWN=f res=0 [ 144.897742][ T43] audit: type=1802 audit(1794245688.101:761): pid=14893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.4055" res=0 errno=-22 [ 144.898218][T14892] ima: policy update failed [ 145.412284][ T66] wacom 0003:056A:0043.0008: Unknown device_type for 'syz0'. Assuming pen. [ 145.413459][ T66] wacom 0003:056A:0043.0008: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 145.414170][ T66] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0008/input/input12 [ 145.470319][T14921] fido_id[14921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.551340][T14929] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 146.215960][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 146.215996][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.216018][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.244267][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 146.244284][ T43] audit: type=1400 audit(1794245689.441:770): avc: denied { read } for pid=14998 comm="syz.1.4105" name="nfsv4gracetime" dev="nfsd" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 146.511616][T15007] device-mapper: integrity: The superblock was changed while the device was suspended [ 146.511633][T15007] device-mapper: integrity: Error on superblock check: -22 [ 146.530617][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530652][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530670][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530689][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530708][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530728][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530747][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530766][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530783][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.530817][ T856] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 146.567148][ T856] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 147.002355][ T43] audit: type=1400 audit(1794245690.201:771): avc: denied { create } for pid=15059 comm="syz.2.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.004667][ T43] audit: type=1400 audit(1794245690.201:772): avc: denied { getopt } for pid=15059 comm="syz.2.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.087164][T15068] support for the xor transformation has been removed. [ 147.165006][ T43] audit: type=1400 audit(1794245690.371:773): avc: denied { append } for pid=15075 comm="syz.0.4142" name="video7" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 147.266432][T15085] veth0_to_bond: entered promiscuous mode [ 147.266540][T15085] macsec1: entered promiscuous mode [ 147.266639][T15085] macsec1: entered allmulticast mode [ 147.266647][T15085] veth0_to_bond: entered allmulticast mode [ 147.494715][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'. [ 147.691098][ T30] input: syz0 as /devices/virtual/misc/uhid/0003:056B:003F.000A/input/input15 [ 147.705703][ T30] hid-generic 0003:056B:003F.000A: input,hidraw0: USB HID v0.00 Gamepad [syz0] on syz1 [ 147.968107][T15128] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 148.067870][ T1170] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 148.073770][ T5798] Bluetooth: hci4: sending frame failed (-49) [ 148.075394][ T5143] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 148.153642][ T43] audit: type=1400 audit(1794245691.351:774): avc: denied { read write } for pid=15142 comm="syz.2.4172" name="cpu_dma_latency" dev="devtmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 148.153810][ T43] audit: type=1400 audit(1794245691.351:775): avc: denied { open } for pid=15142 comm="syz.2.4172" path="/991/dev/cpu_dma_latency" dev="devtmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 148.294426][T15157] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 148.296211][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 148.348090][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.505026][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 148.518525][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.518550][ T30] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 148.519227][ T30] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 148.519279][ T30] usb 6-1: can't read configurations, error -71 [ 148.583204][T15188] phram: parameter too long [ 148.604241][ T43] audit: type=1400 audit(1794245691.801:776): avc: denied { bind } for pid=15189 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.636388][T15192] usbcore.quirks: string doesn't fit in 127 chars. [ 148.677062][ T43] audit: type=1400 audit(1794245691.881:777): avc: denied { watch watch_reads } for pid=15197 comm="syz.3.4198" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.748197][T15207] WARNING! power/level is deprecated; use power/control instead [ 148.821428][ T43] audit: type=1400 audit(1794245692.021:778): avc: denied { accept } for pid=15210 comm="syz.2.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.878795][ T43] audit: type=1400 audit(1794245692.081:779): avc: denied { read } for pid=15214 comm="syz.3.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.364949][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.535690][ T30] usb 6-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 149.537116][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.538376][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.538389][ T30] usb 6-1: Product: syz [ 149.538396][ T30] usb 6-1: Manufacturer: syz [ 149.541518][ T30] navman 6-1:1.0: navman converter detected [ 149.551157][ T30] usb 6-1: navman converter now attached to ttyUSB0 [ 149.749226][ T30] usb 6-1: USB disconnect, device number 6 [ 149.768246][ T30] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 149.768593][ T30] navman 6-1:1.0: device disconnected [ 149.800399][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4233'. [ 149.903003][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 150.061381][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4247'. [ 150.330309][ T5901] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.000B/input/input16 [ 150.333150][ T5901] hid-generic 0003:1B1E:0C13.000B: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 151.031863][T15374] ima: policy update completed [ 151.252617][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 151.252630][ T43] audit: type=1800 audit(1794245694.451:824): pid=15392 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4287" name="resource0" dev="sysfs" ino=2516 res=0 errno=-22 [ 151.278160][ T43] audit: type=1800 audit(1794245694.481:825): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35095 res=0 errno=-22 [ 151.279849][ T43] audit: type=1800 audit(1794245694.481:826): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35118 res=0 errno=-22 [ 151.383411][ T43] audit: type=1800 audit(1794245694.581:827): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5175 res=0 errno=-22 [ 151.545709][ T43] audit: type=1326 audit(1794245694.751:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.4294" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7a2d9fb19 code=0x0 [ 151.964212][ T43] audit: type=1400 audit(1794245695.161:829): avc: denied { mount } for pid=15421 comm="syz.2.4301" name="/" dev="pstore" ino=6042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 151.995372][ T43] audit: type=1400 audit(1794245695.201:830): avc: denied { read } for pid=5790 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.996282][ T43] audit: type=1400 audit(1794245695.201:831): avc: denied { open } for pid=5790 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.996327][ T43] audit: type=1400 audit(1794245695.201:832): avc: denied { ioctl } for pid=5790 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.022657][ T43] audit: type=1400 audit(1794245695.221:833): avc: denied { mounton } for pid=15423 comm="syz.1.4303" path="/1104/debug" dev="tmpfs" ino=5611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.045101][T15427] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 152.449398][T15444] pimreg0: tun_chr_ioctl cmd 1074025676 [ 152.449418][T15444] pimreg0: owner set to 0 [ 153.054012][T15461] kernel read not supported for file bus/pci/00/00.0 (pid: 15461 comm: syz.1.4318) [ 153.415993][ T856] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 153.568639][ T856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.568665][ T856] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 153.569465][ T856] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 153.569478][ T856] usb 6-1: config 142 descriptor has 1 excess byte, ignoring [ 153.569487][ T856] usb 6-1: config 142 has no interface number 0 [ 153.569503][ T856] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 153.569515][ T856] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 153.569526][ T856] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 153.569537][ T856] usb 6-1: config 142 interface 251 has no altsetting 0 [ 153.571733][ T856] usb 6-1: string descriptor 0 read error: -22 [ 153.571789][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.574517][T15468] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.574567][T15468] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.588605][ T856] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 153.596529][ T856] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 153.723325][T15477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.042255][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4330'. [ 154.315622][T15468] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 154.315650][T15468] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 154.315867][ C3] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 154.566912][T15516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.567097][T15516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.567464][T15516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.588130][ T64] usb 6-1: USB disconnect, device number 7 [ 154.596095][ T64] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 154.596557][ T64] cypress_m8 6-1:142.251: device disconnected [ 154.649226][T15520] overlayfs: invalid origin (0000) [ 155.128390][T15534] ip_tables: iptables: counters copy to user failed while replacing table [ 155.130119][T15534] ip_tables: iptables: counters copy to user failed while replacing table [ 155.375590][T15557] nbd: nbd0 already in use [ 156.027001][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4388'. [ 156.131176][T15634] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 156.586700][ T43] kauditd_printk_skb: 581 callbacks suppressed [ 156.586718][ T43] audit: type=1400 audit(1794245699.791:1415): avc: denied { setopt } for pid=15679 comm="syz.1.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.615089][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.615116][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 156.615130][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.729618][ T43] audit: type=1400 audit(1794245699.931:1416): avc: denied { write } for pid=15694 comm="syz.2.4412" name="usb_gadget" dev="configfs" ino=1874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.734714][ T43] audit: type=1400 audit(1794245699.931:1417): avc: denied { write } for pid=15694 comm="syz.2.4412" name="functions" dev="configfs" ino=48145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.974272][ T43] audit: type=1400 audit(1794245700.171:1418): avc: denied { mount } for pid=15712 comm="syz.1.4420" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.995940][ T43] audit: type=1400 audit(1794245700.201:1419): avc: denied { write } for pid=15715 comm="syz.0.4421" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.998104][ T43] audit: type=1800 audit(1794245700.201:1420): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25504 res=0 errno=-22 [ 157.014498][ T43] audit: type=1400 audit(1794245700.211:1421): avc: denied { write } for pid=15718 comm="syz.1.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.032897][ T43] audit: type=1800 audit(1794245700.241:1422): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25713 res=0 errno=-22 [ 157.037236][ T43] audit: type=1800 audit(1794245700.241:1423): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25504 res=0 errno=-22 [ 157.048997][ T43] audit: type=1800 audit(1794245700.261:1424): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=25377 res=0 errno=-22 [ 157.166476][T15734] Line length is too long: Should be less than 4094 [ 157.727490][T15780] nbd: socks must be embedded in a SOCK_ITEM attr [ 157.728136][T15780] block nbd0: shutting down sockets [ 158.319107][T15838] phram: illegal erasesize or len [ 158.643151][T15873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4494'. [ 158.649653][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.650111][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.886357][T15889] ima: policy update failed [ 159.131843][T15902] vivid-000: disconnect [ 159.132225][T15902] vivid-000: reconnect [ 159.177816][T15908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4510'. [ 159.194937][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 159.354943][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 159.355397][ T30] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.356196][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 159.356219][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.356229][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.356240][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.356251][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.356269][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.364589][T15925] kernel read not supported for file bus/pci/00/00.0 (pid: 15925 comm: syz.2.4519) [ 159.563645][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 159.563671][ T30] usbtmc 6-1:16.0: can't read capabilities [ 159.595259][ T856] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.755750][ T856] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 159.756727][ T856] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 159.756746][ T856] usb 5-1: config 1 has no interface number 0 [ 159.758973][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.758992][ T856] usb 5-1: Product: syz [ 159.759003][ T856] usb 5-1: Manufacturer: syz [ 159.759014][ T856] usb 5-1: SerialNumber: syz [ 159.769932][ T856] usb 5-1: 3:1 : does not exist [ 159.769952][ T856] usb 5-1: 3:2 : does not exist [ 159.770609][ T30] usb 6-1: USB disconnect, device number 8 [ 159.969603][ T30] usb 5-1: USB disconnect, device number 7 [ 160.340212][T15960] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 160.383800][T15962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4537'. [ 160.468138][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 160.567963][T15972] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 160.619646][T15980] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 160.658974][T15982] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.673545][T15981] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.742709][T15990] block nbd1: NBD_DISCONNECT [ 160.743226][T15989] block nbd1: Disconnected due to user request. [ 160.743238][T15989] block nbd1: shutting down sockets [ 160.814074][T15996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4554'. [ 161.170298][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 161.175173][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 161.176256][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 161.177263][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 161.177280][ T30] rtc rtc0: __rtc_set_alarm: err=-22 [ 161.335195][ T856] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 161.495025][ T856] usb 7-1: Using ep0 maxpacket: 32 [ 161.495835][ T856] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 161.499139][ T856] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 161.499160][ T856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.499176][ T856] usb 7-1: config 0 has no interface number 0 [ 161.499232][ T856] usb 7-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.499254][ T856] usb 7-1: config 0 interface 196 has no altsetting 0 [ 161.501190][ T856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.501208][ T856] usb 7-1: Product: syz [ 161.501221][ T856] usb 7-1: Manufacturer: syz [ 161.501234][ T856] usb 7-1: SerialNumber: syz [ 161.505534][ T856] usb 7-1: config 0 descriptor?? [ 161.726561][ T856] ipheth 7-1:0.196: Unable to find endpoints [ 161.732184][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 161.732201][ T43] audit: type=1800 audit(1794245704.931:1502): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=154338 res=0 errno=-22 [ 161.732247][ T43] audit: type=1800 audit(1794245704.931:1503): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=154339 res=0 errno=-22 [ 161.732283][ T43] audit: type=1800 audit(1794245704.931:1504): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=154318 res=0 errno=-22 [ 161.732754][ T856] usb 7-1: USB disconnect, device number 13 [ 161.734459][ T43] audit: type=1800 audit(1794245704.931:1505): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=154340 res=0 errno=-22 [ 161.862699][T16047] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 161.863842][ T43] audit: type=1800 audit(1794245705.061:1506): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154425 res=0 errno=-22 [ 161.887357][ T1357] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 162.035023][ T1357] usb 6-1: Using ep0 maxpacket: 16 [ 162.035804][ T1357] usb 6-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 162.036761][ T1357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 162.038578][ T1357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.038597][ T1357] usb 6-1: Product: syz [ 162.038608][ T1357] usb 6-1: Manufacturer: syz [ 162.038619][ T1357] usb 6-1: SerialNumber: syz [ 162.040841][ T1357] usb 6-1: config 0 descriptor?? [ 162.042613][ T43] audit: type=1800 audit(1794245705.241:1507): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154452 res=0 errno=-22 [ 162.042655][ T43] audit: type=1800 audit(1794245705.241:1508): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=154484 res=0 errno=-22 [ 162.042911][ T1357] hub 6-1:0.0: bad descriptor, ignoring hub [ 162.042930][ T1357] hub 6-1:0.0: probe with driver hub failed with error -5 [ 162.043408][ T43] audit: type=1800 audit(1794245705.241:1509): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=154459 res=0 errno=-22 [ 162.044234][ T43] audit: type=1800 audit(1794245705.241:1510): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=154460 res=0 errno=-22 [ 162.044945][ T1357] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.101812][ T43] audit: type=1800 audit(1794245705.301:1511): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=154481 res=0 errno=-22 [ 162.137519][ T64] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 162.190875][T16053] bonding: unable to delete non-existent b%?áÅŸñ"2`'Yà [ 162.205221][ T856] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 162.234000][T16054] ima: policy update failed [ 162.286580][ T64] usb 5-1: not running at top speed; connect to a high speed hub [ 162.286612][ T64] usb 5-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 162.288294][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.291636][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.291658][ T64] usb 5-1: Product: syz [ 162.291670][ T64] usb 5-1: Manufacturer: syz [ 162.291682][ T64] usb 5-1: SerialNumber: syz [ 162.306734][ T64] oti6858 5-1:1.0: oti6858 converter detected [ 162.312503][ T64] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 162.365960][ T856] usb 7-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00 [ 162.366912][ T856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.366935][ T856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.370154][ T856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.370167][ T856] usb 7-1: Product: syz [ 162.370174][ T856] usb 7-1: Manufacturer: syz [ 162.370181][ T856] usb 7-1: SerialNumber: syz [ 162.380302][ T856] symbolserial 7-1:1.0: symbol converter detected [ 162.402188][ T856] usb 7-1: symbol converter now attached to ttyUSB1 [ 162.617983][ T30] usb 7-1: USB disconnect, device number 14 [ 162.625775][ T30] symbol ttyUSB1: symbol converter now disconnected from ttyUSB1 [ 162.626009][ T30] symbolserial 7-1:1.0: device disconnected [ 162.726035][ T1041] usb 5-1: USB disconnect, device number 8 [ 162.729856][ T1041] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 162.730183][ T1041] oti6858 5-1:1.0: device disconnected [ 163.305303][T16039] sound midiC3D0: rawmidi drain error (avail = 3987, buffer_size = 4096) [ 163.633658][ T64] usb 6-1: USB disconnect, device number 9 [ 164.046974][T16133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.049080][T16133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.084856][T16135] erspan0: entered promiscuous mode [ 164.149624][T16142] tipc: New replicast peer: 255.255.255.255 [ 164.150369][T16142] tipc: Enabled bearer , priority 2 [ 164.183518][T16146] ip6tnl1: entered allmulticast mode [ 164.277014][T16162] jffs2: notice: (16162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (1 dead, 0 orphan) found. [ 164.330286][T16165] ªªªªª»: renamed from vlan0 (while UP) [ 164.376721][T16172] ptp ptp0: only physical clock in use now [ 164.477740][T16185] bonding: b% is being created... [ 164.482989][T16185] bonding: b% creation failed [ 164.522016][T16188] loop5: detected capacity change from 0 to 7 [ 164.522504][T16188] buffer_io_error: 10 callbacks suppressed [ 164.522518][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522547][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522574][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522597][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522636][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522671][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522694][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522707][T16188] ldm_validate_partition_table(): Disk read failed. [ 164.522728][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522752][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522775][T16188] Buffer I/O error on dev loop5, logical block 0, async page read [ 164.522801][T16188] Dev loop5: unable to read RDB block 0 [ 164.522850][T16188] loop5: unable to read partition table [ 164.523007][T16188] loop5: partition table beyond EOD, truncated [ 164.523023][T16188] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 164.645667][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.645897][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.655174][ T856] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 164.656058][T16200] erspan0: entered promiscuous mode [ 164.685414][ T5882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.807508][ T856] usb 6-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 164.808500][ T856] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.808537][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 164.808557][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.808575][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 164.808594][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 164.808613][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 164.808630][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 164.808648][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 164.808667][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 164.808685][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 164.808704][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 164.808723][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 164.808742][ T856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.808759][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.808777][ T856] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 164.813187][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.813207][ T856] usb 6-1: Product: syz [ 164.813219][ T856] usb 6-1: Manufacturer: syz [ 164.813231][ T856] usb 6-1: SerialNumber: syz [ 164.825175][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825317][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825490][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825575][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825720][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825862][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.825995][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.826075][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.826214][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.826340][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.826419][T16174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.830489][ T856] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 164.834708][ T856] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 164.855495][ T856] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 164.857470][ T856] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.863704][ T856] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 164.954642][T16220] block2mtd: too many arguments [ 164.997722][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 165.155092][ T856] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.176502][ T856] usb 6-1: USB disconnect, device number 10 [ 165.204100][ T856] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 165.212906][ T856] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 165.216788][ T856] keyspan 6-1:1.0: device disconnected [ 165.420376][T16252] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 165.440680][T16253] futex_wake_op: syz.0.4672 tries to shift op by 144; fix this program [ 165.440954][T16253] futex_wake_op: syz.0.4672 tries to shift op by 144; fix this program [ 165.450838][T16255] netlink: 'syz.3.4671': attribute type 3 has an invalid length. [ 165.450857][T16255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4671'. [ 165.560399][T16263] cramfs: checking physical address 0x0000000101740000 for linear cramfs image [ 165.560570][T16263] cramfs: wrong magic [ 165.582602][T16263] cramfs: wrong magic [ 165.596557][T16269] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 165.731375][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4690'. [ 165.731398][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4690'. [ 165.745823][ T856] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.794668][T16298] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 165.839229][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4697'. [ 165.844318][T16304] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 165.961915][T16319] netlink: 'syz.1.4706': attribute type 11 has an invalid length. [ 166.059631][T16332] jffs2: notice: (16332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (1 dead, 0 orphan) found. [ 166.396571][T16369] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 166.396591][T16369] syzkaller1: ignored: set checksum enabled [ 166.526481][T16376] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 167.090412][ T43] kauditd_printk_skb: 99 callbacks suppressed [ 167.090430][ T43] audit: type=1400 audit(1794245711.291:1611): avc: denied { mounton } for pid=16394 comm="syz.3.4742" path="/proc/2490/task/2491/fd" dev="proc" ino=50266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 167.097856][ T43] audit: type=1800 audit(1794245711.301:1612): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4745" name="multicast_startup_query_count" dev="sysfs" ino=91627 res=0 errno=-22 [ 167.100795][T16407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4746'. [ 167.100848][T16407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4746'. [ 167.376490][ T43] audit: type=1400 audit(1794245711.581:1613): avc: denied { ioctl } for pid=16422 comm="syz.1.4754" path="socket:[50283]" dev="sockfs" ino=50283 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.534958][ T1041] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 167.622909][ T43] audit: type=1800 audit(1794245711.821:1614): pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4759" name="new_device" dev="sysfs" ino=46165 res=0 errno=-13 [ 167.626296][ T43] audit: type=1800 audit(1794245711.831:1615): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155931 res=0 errno=-22 [ 167.628347][ T43] audit: type=1800 audit(1794245711.831:1616): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=155932 res=0 errno=-22 [ 167.633361][T16434] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 167.695020][ T1041] usb 7-1: Using ep0 maxpacket: 8 [ 167.696574][ T1041] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.697539][ T1041] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 167.697577][ T1041] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.697595][ T1041] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.697613][ T1041] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.697630][ T1041] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.697661][ T1041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.701786][ T43] audit: type=1800 audit(1794245711.901:1617): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155945 res=0 errno=-22 [ 167.706294][ T43] audit: type=1800 audit(1794245711.911:1618): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155974 res=0 errno=-22 [ 167.706836][ T43] audit: type=1800 audit(1794245711.911:1619): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155952 res=0 errno=-22 [ 167.707771][ T43] audit: type=1800 audit(1794245711.911:1620): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155953 res=0 errno=-22 [ 167.909889][ T1041] usb 7-1: GET_CAPABILITIES returned 0 [ 167.909966][ T1041] usbtmc 7-1:16.0: can't read capabilities [ 168.112421][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.112463][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.113078][ T5882] usb 7-1: USB disconnect, device number 15 [ 168.195308][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.346753][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 168.349172][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.349208][ T5883] usb 5-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 168.355229][ T5883] usb 5-1: string descriptor 0 read error: -22 [ 168.355328][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.362396][ T5883] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 168.362429][ T5883] dw2102: su3000_power_ctrl: 1, initialized 0 [ 168.362442][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 168.388040][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.389670][ T5883] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 168.389712][ T5883] usb 5-1: media controller created [ 168.389731][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389744][ T5883] dw2102: i2c transfer failed. [ 168.389755][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389766][ T5883] dw2102: i2c transfer failed. [ 168.389775][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389786][ T5883] dw2102: i2c transfer failed. [ 168.389796][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389806][ T5883] dw2102: i2c transfer failed. [ 168.389816][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389826][ T5883] dw2102: i2c transfer failed. [ 168.389836][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 168.389846][ T5883] dw2102: i2c transfer failed. [ 168.389853][ T5883] dvb-usb: MAC address: 02:02:02:02:02:02 [ 168.406408][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.425176][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 168.425192][ T5883] dw2102: command 0x0e transfer failed. [ 168.425199][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 168.425208][ T5883] dw2102: command 0x0e transfer failed. [ 168.537741][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.735627][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 168.735642][ T5883] dw2102: command 0x0e transfer failed. [ 168.735646][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 168.735652][ T5883] dw2102: command 0x0e transfer failed. [ 168.735656][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 168.735662][ T5883] dw2102: command 0x51 transfer failed. [ 168.774287][ T5883] DVB: Unable to find symbol ds3000_attach() [ 168.774297][ T5883] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 168.824437][T16504] program syz.1.4790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.836537][ T5883] rc_core: IR keymap rc-su3000 not found [ 168.836549][ T5883] Registered IR keymap rc-empty [ 168.837249][ T5883] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 168.838309][ T5883] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input17 [ 168.845623][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 168.845634][ T5883] dw2102: su3000_power_ctrl: 0, initialized 1 [ 168.845641][ T5883] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 168.849660][ T5883] usb 5-1: USB disconnect, device number 9 [ 168.914278][ T5883] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 169.137980][T16528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4800'. [ 169.224639][T16538] sctp: [Deprecated]: syz.0.4804 (pid 16538) Use of int in max_burst socket option deprecated. [ 169.224639][T16538] Use struct sctp_assoc_value instead [ 169.739865][T16554] xt_hashlimit: size too large, truncated to 1048576 [ 170.095709][T16571] kvm: kvm [16570]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x4000003d) [ 170.196475][T16585] misc userio: No port type given on /dev/userio [ 170.267066][T16593] iommufd_mock iommufd_mock0: Adding to iommu group 10 syzkaller syzkaller login: [ 170.695433][ T5883] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 170.763142][T16645] kAFS: bad VL server IP address [ 170.849482][ T5883] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 170.849505][ T5883] usb 5-1: too many configurations: 181, using maximum allowed: 8 [ 170.850105][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.850120][ T5883] usb 5-1: can't read configurations, error -71 [ 170.936468][T16655] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 171.436520][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4874'. [ 171.621362][ T64] nintendo 0005:057E:2017.000C: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 172.530150][ T43] kauditd_printk_skb: 70 callbacks suppressed [ 172.530163][ T43] audit: type=1800 audit(1794245716.731:1691): pid=16717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4887" name="disksize" dev="sysfs" ino=22207 res=0 errno=-22 [ 172.532618][T16717] zram0: detected capacity change from 0 to 8 [ 172.563624][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4888'. [ 172.591373][ T43] audit: type=1400 audit(1794245716.791:1692): avc: denied { create } for pid=16720 comm="syz.2.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.591869][ T43] audit: type=1400 audit(1794245716.791:1693): avc: denied { connect } for pid=16720 comm="syz.2.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.593474][ T43] audit: type=1400 audit(1794245716.791:1694): avc: denied { write } for pid=16720 comm="syz.2.4889" path="socket:[50472]" dev="sockfs" ino=50472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.860252][T16742] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4899'. [ 173.267540][T16775] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 173.359516][ T43] audit: type=1800 audit(1794245717.561:1695): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4917" name="namespace" dev="sysfs" ino=6521 res=0 errno=-22 [ 173.634363][T16806] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 173.705164][ T43] audit: type=1400 audit(1794245717.911:1696): avc: denied { setopt } for pid=16811 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.014942][ T66] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.175008][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 174.175817][ T66] usb 6-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 174.176899][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.179858][ T66] usb 6-1: config 0 descriptor?? [ 174.182695][ T43] audit: type=1800 audit(1794245718.381:1697): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156676 res=0 errno=-22 [ 174.186266][ T43] audit: type=1800 audit(1794245718.391:1698): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=156705 res=0 errno=-22 [ 174.187099][ T43] audit: type=1800 audit(1794245718.391:1699): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=156683 res=0 errno=-22 [ 174.187964][ T43] audit: type=1800 audit(1794245718.391:1700): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=156684 res=0 errno=-22 [ 174.189776][ T66] as10x_usb: device has been detected [ 174.190480][ T66] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.198321][ T66] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.230320][ T66] as10x_usb: error during firmware upload part1 [ 174.230874][ T66] Registered device nBox DVB-T Dongle [ 174.389923][ T5943] usb 6-1: USB disconnect, device number 11 [ 174.413877][ T5943] Unregistered device nBox DVB-T Dongle [ 174.415162][ T5943] as10x_usb: device has been disconnected [ 174.717466][ T1181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 175.213642][T16848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.217501][T16848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.735176][ T64] nintendo 0005:057E:2017.000C: Failed to get joycon info; ret=-110 [ 175.735200][ T64] nintendo 0005:057E:2017.000C: Failed to retrieve controller info; ret=-110 [ 175.735214][ T64] nintendo 0005:057E:2017.000C: Failed to initialize controller; ret=-110 [ 175.761388][ T64] nintendo 0005:057E:2017.000C: probe - fail = -110 [ 175.761458][ T64] nintendo 0005:057E:2017.000C: probe with driver nintendo failed with error -110 [ 175.764409][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4954'. [ 175.878026][T16870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.077326][T16894] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4969'. [ 176.078862][T16894] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4969'. [ 176.225090][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.329605][T16915] netlink: 'syz.0.4980': attribute type 4 has an invalid length. [ 176.405919][ T5883] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 176.476754][ T5882] asus 0005:0B05:8502.000D: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 176.518888][T16931] fido_id[16931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.567314][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 176.568080][ T5883] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.569195][ T5883] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 176.569234][ T5883] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.569251][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.569270][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.569289][ T5883] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.569320][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.598172][T16936] ALSA: mixer_oss: invalid OSS volume '' [ 176.598190][T16936] ALSA: mixer_oss: invalid OSS volume '@' [ 176.598199][T16936] ALSA: mixer_oss: invalid OSS volume '|' [ 176.598912][T16936] ALSA: mixer_oss: invalid OSS volume '' [ 176.708933][T16942] kernel read not supported for file bus/pci/00/00.0 (pid: 16942 comm: syz.0.4992) [ 176.796391][ T5883] usb 7-1: GET_CAPABILITIES returned 0 [ 176.796430][ T5883] usbtmc 7-1:16.0: can't read capabilities [ 176.835264][T16951] misc userio: Can't change port type on an already running userio instance [ 176.996746][ T1041] usb 7-1: USB disconnect, device number 16 [ 177.353905][ T64] ------------[ cut here ]------------ [ 177.353915][ T64] ic->journal_sections * ic->journal_section_entries != (ic->n_uncommitted_sections + ic->n_committed_sections) * ic->journal_section_entries + ic->free_sectors [ 177.353925][ T64] WARNING: drivers/md/dm-integrity.c:2885 at integrity_commit.cold+0x6/0x75, CPU#2: kworker/2:1/64 [ 177.364614][ T64] Modules linked in: [ 177.366131][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.369513][ T64] Tainted: [L]=SOFTLOCKUP [ 177.370847][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.373852][ T64] Workqueue: dm-integrity-commit integrity_commit [ 177.375832][ T64] RIP: 0010:integrity_commit.cold+0x6/0x75 [ 177.377717][ T64] Code: ff e9 4d b2 63 07 48 8b 7c 24 58 e8 a1 b3 23 01 e9 e7 fe ff ff 48 8b 7c 24 40 e8 92 b3 23 01 e9 21 ff ff ff e8 78 48 a9 00 90 <0f> 0b 90 41 54 8b 8c 24 d0 00 00 00 89 da 44 89 f6 41 89 d9 45 89 [ 177.383514][ T64] RSP: 0018:ffffc90000d27a68 EFLAGS: 00010093 [ 177.385345][ T64] RAX: 0000000000000000 RBX: 0000000000000050 RCX: 0000000000000001 [ 177.387770][ T64] RDX: ffff8880212bcb00 RSI: ffffffff81653888 RDI: 0000000000000004 [ 177.390150][ T64] RBP: 0000000000000050 R08: 0000000000000050 R09: 0000000000000000 [ 177.392567][ T64] R10: 0000000000000003 R11: 000000000000776b R12: 0000000000000000 [ 177.394893][ T64] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff920001a4f6a [ 177.397676][ T64] FS: 0000000000000000(0000) GS:ffff8880d4671000(0000) knlGS:0000000000000000 [ 177.400222][ T64] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.402348][ T64] CR2: 00007fd7a3d25ff8 CR3: 000000005b7c4000 CR4: 0000000000352ef0 [ 177.404618][ T64] Call Trace: [ 177.405606][ T64] [ 177.406506][ T64] ? check_prev_add+0x354/0xe60 [ 177.408009][ T64] ? __lock_acquire+0xe8b/0x1f40 [ 177.409509][ T64] ? __pfx_integrity_commit+0x10/0x10 [ 177.411183][ T64] ? lock_acquire+0x1d1/0x380 [ 177.412693][ T64] ? process_one_work+0xa2c/0x1b10 [ 177.414321][ T64] ? process_one_work+0x906/0x1b10 [ 177.416086][ T64] ? process_one_work+0x906/0x1b10 [ 177.417632][ T64] process_one_work+0xac7/0x1b10 [ 177.419156][ T64] ? __pfx_process_one_work+0x10/0x10 [ 177.420841][ T64] ? lock_acquire+0x1d1/0x380 [ 177.422361][ T64] ? __pfx_integrity_commit+0x10/0x10 [ 177.423998][ T64] worker_thread+0x5ef/0xe50 [ 177.425497][ T64] ? kthread+0x13a/0x450 [ 177.426917][ T64] ? __pfx_worker_thread+0x10/0x10 [ 177.428484][ T64] kthread+0x373/0x450 [ 177.429739][ T64] ? __pfx_kthread+0x10/0x10 [ 177.431251][ T64] ret_from_fork+0x730/0xd60 [ 177.432658][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 177.434214][ T64] ? __switch_to+0x800/0x10e0 [ 177.435673][ T64] ? __pfx_kthread+0x10/0x10 [ 177.437059][ T64] ret_from_fork_asm+0x1a/0x30 [ 177.438469][ T64] [ 177.439585][ T64] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.441859][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.444953][ T64] Tainted: [L]=SOFTLOCKUP [ 177.446274][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.449176][ T64] Workqueue: dm-integrity-commit integrity_commit [ 177.451084][ T64] Call Trace: [ 177.452084][ T64] [ 177.452961][ T64] dump_stack_lvl+0x100/0x190 [ 177.454314][ T64] vpanic+0x2dc/0x6f8 [ 177.455502][ T64] panic+0xd1/0xe0 [ 177.456628][ T64] ? __pfx_panic+0x10/0x10 [ 177.458006][ T64] check_panic_on_warn.cold+0x19/0x34 [ 177.459635][ T64] ? integrity_commit.cold+0x6/0x75 [ 177.461255][ T64] __warn.cold+0x191/0x321 [ 177.462672][ T64] __report_bug+0x30f/0x440 [ 177.464309][ T64] ? integrity_commit.cold+0x6/0x75 [ 177.466384][ T64] ? __pfx___report_bug+0x10/0x10 [ 177.468366][ T64] ? check_prev_add+0x354/0xe60 [ 177.470171][ T64] ? __lock_acquire+0xe8b/0x1f40 [ 177.472048][ T64] ? integrity_commit.cold+0x6/0x75 [ 177.473965][ T64] report_bug+0xb3/0x220 [ 177.475472][ T64] ? integrity_commit.cold+0x6/0x75 [ 177.477501][ T64] handle_bug+0x16a/0x2a0 [ 177.479306][ T64] exc_invalid_op+0x17/0x50 [ 177.481189][ T64] asm_exc_invalid_op+0x1a/0x20 [ 177.483199][ T64] RIP: 0010:integrity_commit.cold+0x6/0x75 [ 177.485563][ T64] Code: ff e9 4d b2 63 07 48 8b 7c 24 58 e8 a1 b3 23 01 e9 e7 fe ff ff 48 8b 7c 24 40 e8 92 b3 23 01 e9 21 ff ff ff e8 78 48 a9 00 90 <0f> 0b 90 41 54 8b 8c 24 d0 00 00 00 89 da 44 89 f6 41 89 d9 45 89 [ 177.493052][ T64] RSP: 0018:ffffc90000d27a68 EFLAGS: 00010093 [ 177.495352][ T64] RAX: 0000000000000000 RBX: 0000000000000050 RCX: 0000000000000001 [ 177.498373][ T64] RDX: ffff8880212bcb00 RSI: ffffffff81653888 RDI: 0000000000000004 [ 177.500921][ T64] RBP: 0000000000000050 R08: 0000000000000050 R09: 0000000000000000 [ 177.503874][ T64] R10: 0000000000000003 R11: 000000000000776b R12: 0000000000000000 [ 177.506778][ T64] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff920001a4f6a [ 177.509645][ T64] ? integrity_commit.cold+0x5/0x75 [ 177.511410][ T64] ? integrity_commit.cold+0x5/0x75 [ 177.512982][ T64] ? check_prev_add+0x354/0xe60 [ 177.514512][ T64] ? __lock_acquire+0xe8b/0x1f40 [ 177.516326][ T64] ? __pfx_integrity_commit+0x10/0x10 [ 177.518257][ T64] ? lock_acquire+0x1d1/0x380 [ 177.519716][ T64] ? process_one_work+0xa2c/0x1b10 [ 177.521375][ T64] ? process_one_work+0x906/0x1b10 [ 177.523262][ T64] ? process_one_work+0x906/0x1b10 [ 177.524790][ T64] process_one_work+0xac7/0x1b10 [ 177.526335][ T64] ? __pfx_process_one_work+0x10/0x10 [ 177.527956][ T64] ? lock_acquire+0x1d1/0x380 [ 177.529391][ T64] ? __pfx_integrity_commit+0x10/0x10 [ 177.531071][ T64] worker_thread+0x5ef/0xe50 [ 177.532813][ T64] ? kthread+0x13a/0x450 [ 177.534451][ T64] ? __pfx_worker_thread+0x10/0x10 [ 177.536200][ T64] kthread+0x373/0x450 [ 177.537667][ T64] ? __pfx_kthread+0x10/0x10 [ 177.539329][ T64] ret_from_fork+0x730/0xd60 [ 177.540720][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 177.542221][ T64] ? __switch_to+0x800/0x10e0 [ 177.543633][ T64] ? __pfx_kthread+0x10/0x10 [ 177.545176][ T64] ret_from_fork_asm+0x1a/0x30 [ 177.546829][ T64] [ 177.548421][ T64] Kernel Offset: disabled [ 177.549747][ T64] Rebooting in 86400 seconds..