last executing test programs: 3m6.941107163s ago: executing program 2 (id=4632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x80) 3m6.890557429s ago: executing program 2 (id=4633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3m6.88629815s ago: executing program 2 (id=4635): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) 3m6.803326726s ago: executing program 2 (id=4637): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 3m6.803005662s ago: executing program 2 (id=4640): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m6.724192052s ago: executing program 2 (id=4642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 2m50.697245389s ago: executing program 32 (id=4642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) 1m41.476429232s ago: executing program 4 (id=9369): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 1m41.472685792s ago: executing program 4 (id=9372): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 1m40.144539471s ago: executing program 4 (id=9405): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1m40.14297437s ago: executing program 4 (id=9407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m40.087095623s ago: executing program 4 (id=9409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m39.771421488s ago: executing program 4 (id=9423): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) 1m39.704391608s ago: executing program 33 (id=9423): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) 30.169089864s ago: executing program 5 (id=12295): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 30.064126845s ago: executing program 5 (id=12300): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 29.661055921s ago: executing program 5 (id=12310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd25, 0x0, {0x7, r2}}, 0x18}, 0x1, 0xf0}, 0x0) 29.608485074s ago: executing program 5 (id=12313): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES8=r0], 0x50}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) 29.534067983s ago: executing program 5 (id=12316): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 29.521590215s ago: executing program 5 (id=12320): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13.449358498s ago: executing program 34 (id=12320): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.837912729s ago: executing program 6 (id=12997): r0 = socket(0x11, 0xa, 0x405) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) 1.837806878s ago: executing program 6 (id=12998): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 1.780531694s ago: executing program 6 (id=13000): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x200, 0x0, 0x10, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1.779990178s ago: executing program 6 (id=13002): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.652673444s ago: executing program 3 (id=13007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044890}, 0x40000) 1.651767815s ago: executing program 3 (id=13008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.557836845s ago: executing program 3 (id=13009): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 1.557646379s ago: executing program 3 (id=13010): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 1.503845991s ago: executing program 3 (id=13011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000380)={0x7, 0x0, [{0x8a6, 0x0, 0x8000}, {0x8be, 0x0, 0x6}, {0x929, 0x0, 0xd6a9}, {0xbcb, 0x0, 0x80000001}, {0xa5f, 0x0, 0x4}, {0x17b}, {0xa73, 0x0, 0x8}]}) 1.40569989s ago: executing program 3 (id=13014): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) 1.289897893s ago: executing program 0 (id=13018): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x2, 0x7, {}, {}, {0x4, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0680a685a169ba1b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) 1.223216005s ago: executing program 0 (id=13021): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000380)='./file2\x00') 1.217777199s ago: executing program 1 (id=13022): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) 1.140844912s ago: executing program 1 (id=13023): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)={0x34, r0, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x34}}, 0x8040) 1.140639588s ago: executing program 1 (id=13024): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 1.140509239s ago: executing program 1 (id=13025): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4c27, @private=0xa010102}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 984.540966ms ago: executing program 1 (id=13026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 13.383153ms ago: executing program 0 (id=13027): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 13.254541ms ago: executing program 0 (id=13028): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, r1, 0xa07, 0x70bd2e, 0x259fdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040810}, 0x20048840) 10.637956ms ago: executing program 0 (id=13029): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 10.473032ms ago: executing program 6 (id=13030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 8.834497ms ago: executing program 0 (id=13031): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}]}}) 5.691101ms ago: executing program 6 (id=13032): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x200000, 0x2, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000001200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) 0s ago: executing program 1 (id=13033): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x140) kernel console output (not intermixed with test programs): ndpoint 0x8B has invalid maxpacket 64 [ 238.579652][ T53] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.581553][ T53] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 238.581575][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.581592][ T53] usb 10-1: Product: syz [ 238.581605][ T53] usb 10-1: Manufacturer: syz [ 238.581618][ T53] usb 10-1: SerialNumber: syz [ 238.584800][T27720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.915037][T27803] program syz.0.10433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.006525][ T29] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 239.020375][T27720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.169521][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.172947][ T29] usb 6-1: config 0 has no interface number 0 [ 239.175686][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.180060][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 239.183610][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 239.187901][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 239.191625][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 239.195230][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.202190][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.205261][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.209651][ T29] usb 6-1: config 0 descriptor?? [ 239.213380][T27796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.216134][T27796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.224585][ T29] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 239.257035][ T53] usb 10-1: Incompatible driver and firmware versions [ 239.267149][ T53] usb 10-1: USB disconnect, device number 4 [ 239.439809][T27796] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 239.446806][T20229] usb 6-1: USB disconnect, device number 9 [ 239.453314][T20229] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 239.794583][T27840] support for cryptoloop has been removed. Use dm-crypt instead. [ 239.887000][T27848] netlink: 'syz.3.10455': attribute type 2 has an invalid length. [ 239.887721][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10454'. [ 239.890439][T27848] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10455'. [ 240.188161][T27886] [U] V3Fپ"S/4:XTZWTLW= [ 240.191055][T27885] [U] J"E:" [ 240.325841][T27900] ptrace attach of "/syz-executor exec"[27902] was attempted by "/syz-executor exec"[27900] [ 240.404870][T27910] binder: 27909:27910 ioctl 4018620d 0 returned -22 [ 240.409613][T27910] binder: 27909:27910 ioctl c0306201 200000000240 returned -11 [ 240.512607][T27919] IPVS: persistence engine module ip_vs_pe_s not found [ 240.542506][T27922] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 240.612299][T27927] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10488'. [ 241.267779][T27974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10511'. [ 241.444446][T27988] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.576498][T28003] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 241.579842][T28003] overlayfs: missing 'lowerdir' [ 241.610220][ T29] hid_parser_main: 5 callbacks suppressed [ 241.610234][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.614757][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.617217][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.619585][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.622090][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.624517][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.627452][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.629868][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.632331][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.634708][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 241.643566][ T29] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 241.683012][T28010] fido_id[28010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.697119][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10529'. [ 241.701098][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10529'. [ 241.704739][T28015] netlink: 'syz.0.10529': attribute type 15 has an invalid length. [ 241.746542][T28021] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 241.772824][T28023] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 242.113865][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 242.113882][ T40] audit: type=1400 audit(230.854:28468): avc: denied { read } for pid=28046 comm="syz.0.10545" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.124558][ T40] audit: type=1400 audit(230.854:28469): avc: denied { open } for pid=28046 comm="syz.0.10545" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.151487][ T40] audit: type=1400 audit(230.891:28470): avc: denied { read } for pid=28048 comm="syz.3.10546" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.161293][ T40] audit: type=1400 audit(230.891:28471): avc: denied { open } for pid=28048 comm="syz.3.10546" path="net:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.171852][ T40] audit: type=1400 audit(230.891:28472): avc: denied { create } for pid=28048 comm="syz.3.10546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.180475][ T40] audit: type=1400 audit(230.910:28473): avc: denied { bind } for pid=28048 comm="syz.3.10546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.191600][ T40] audit: type=1400 audit(230.910:28474): avc: denied { write } for pid=28048 comm="syz.3.10546" path="socket:[85613]" dev="sockfs" ino=85613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.287213][T28058] digital: digital_start_poll: Unknown protocol [ 242.293670][ T40] audit: type=1400 audit(231.022:28475): avc: denied { open } for pid=28059 comm="syz.5.10551" path="/dev/ptyqe" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 242.305084][ T40] audit: type=1400 audit(231.022:28476): avc: denied { ioctl } for pid=28059 comm="syz.5.10551" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 242.320009][ T40] audit: type=1400 audit(231.022:28477): avc: denied { module_request } for pid=28059 comm="syz.5.10551" kmod="tty-ldisc-26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 242.342054][T28062] rtc_cmos 00:05: Alarms can be up to one day in the future [ 242.774082][T28116] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.777664][T28116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.088920][T28163] trusted_key: encrypted_key: key trusted:syz not found [ 243.189685][T28179] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 243.216694][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 243.223052][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 243.227238][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 243.234246][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 243.237284][ T29] rtc rtc0: __rtc_set_alarm: err=-22 [ 243.350854][T28197] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 243.557018][T28221] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 243.603108][T28229] can0: slcan on ttynull. [ 243.689173][T28227] can0 (unregistered): slcan off ttynull. [ 243.748429][T28238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10636'. [ 243.751507][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10636'. [ 244.261460][T28274] program syz.5.10652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.107034][T28320] program syz.5.10674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.905632][T28391] : entered promiscuous mode [ 246.306332][T28419] QAT: failed to copy from user cfg_data. [ 246.376033][T28429] vlan0: entered promiscuous mode [ 246.378713][T28429] bridge0: entered promiscuous mode [ 246.806922][T28482] pim6reg99999999: entered allmulticast mode [ 247.019126][T28502] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.166884][T28516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10761'. [ 247.470151][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 247.470162][ T40] audit: type=1400 audit(235.868:28705): avc: denied { create } for pid=28538 comm="syz.1.10772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.480315][ T40] audit: type=1400 audit(235.877:28706): avc: denied { setopt } for pid=28538 comm="syz.1.10772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.487766][ T40] audit: type=1400 audit(235.877:28707): avc: denied { write } for pid=28538 comm="syz.1.10772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.512277][ T40] audit: type=1400 audit(235.905:28708): avc: denied { read write } for pid=28540 comm="syz.1.10773" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 247.521949][ T40] audit: type=1400 audit(235.905:28709): avc: denied { open } for pid=28540 comm="syz.1.10773" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 247.570774][ T40] audit: type=1400 audit(235.952:28710): avc: denied { open } for pid=28544 comm="syz.1.10775" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 247.582880][ T40] audit: type=1400 audit(235.961:28711): avc: denied { ioctl } for pid=28544 comm="syz.1.10775" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 247.680715][ T40] audit: type=1400 audit(236.064:28712): avc: denied { create } for pid=28556 comm="syz.5.10781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.688713][ T40] audit: type=1400 audit(236.064:28713): avc: denied { write } for pid=28556 comm="syz.5.10781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.742496][ T40] audit: type=1400 audit(236.130:28714): avc: denied { perfmon } for pid=28562 comm="syz.1.10784" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.158039][T28594] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 248.161416][T28594] ALSA: mixer_oss: invalid index 1374389 [ 248.199768][ T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 248.392309][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.411173][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.424102][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 248.428317][ T29] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.431892][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.438527][T28583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.442668][ T29] hub 10-1:1.0: bad descriptor, ignoring hub [ 248.445381][ T29] hub 10-1:1.0: probe with driver hub failed with error -5 [ 248.455254][ T29] cdc_wdm 10-1:1.0: skipping garbage [ 248.457799][ T29] cdc_wdm 10-1:1.0: skipping garbage [ 248.461307][ T29] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 248.461322][ T29] cdc_wdm 10-1:1.0: Unknown control protocol [ 248.632787][T28618] syz.1.10811 (28618) used greatest stack depth: 19104 bytes left [ 248.732998][T28631] netlink: 'syz.0.10817': attribute type 10 has an invalid length. [ 248.737009][T28630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.779848][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 248.783061][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 248.785916][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 248.916395][T25851] usb 10-1: USB disconnect, device number 5 [ 249.867874][T28727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10862'. [ 249.872278][T28727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10862'. [ 250.010123][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10871'. [ 250.331669][T28785] program syz.5.10890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.412001][T28795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10895'. [ 250.737238][T28830] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 251.169489][T28876] mkiss: ax0: crc mode is auto. [ 251.363483][T28889] tmpfs: Cannot disable swap on remount [ 252.056587][T28944] program syz.5.10949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.325586][T28968] netlink: 488 bytes leftover after parsing attributes in process `syz.5.10960'. [ 252.328781][T28968] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.10960'. [ 252.523873][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10974'. [ 252.528608][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10974'. [ 252.540307][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10974'. [ 252.543742][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10974'. [ 252.713381][T29020] openvswitch: netlink: Message has 6 unknown bytes. [ 252.827318][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 252.827333][ T40] audit: type=1400 audit(240.872:28926): avc: denied { getopt } for pid=29038 comm="syz.1.10996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.875121][ T40] audit: type=1400 audit(240.928:28927): avc: denied { create } for pid=29046 comm="syz.3.11000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.881731][ T40] audit: type=1400 audit(240.928:28928): avc: denied { ioctl } for pid=29046 comm="syz.3.11000" path="socket:[91368]" dev="sockfs" ino=91368 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.889619][ T40] audit: type=1400 audit(240.928:28929): avc: denied { write } for pid=29046 comm="syz.3.11000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.903505][ T40] audit: type=1400 audit(240.928:28930): avc: denied { nlmsg_write } for pid=29046 comm="syz.3.11000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.005680][ T40] audit: type=1400 audit(241.050:28931): avc: denied { mounton } for pid=29068 comm="syz.3.11010" path="/2776/file0" dev="tmpfs" ino=13972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.085054][ T40] audit: type=1400 audit(241.115:28932): avc: denied { open } for pid=29078 comm="syz.0.11016" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 253.100069][ T40] audit: type=1400 audit(241.134:28933): avc: denied { ioctl } for pid=29078 comm="syz.0.11016" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 253.130980][ T40] audit: type=1400 audit(241.162:28934): avc: denied { read } for pid=29082 comm="syz.5.11018" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.141601][ T40] audit: type=1400 audit(241.162:28935): avc: denied { open } for pid=29082 comm="syz.5.11018" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.161396][T29085] xfrm0 speed is unknown, defaulting to 1000 [ 254.123381][T29201] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.346970][T29225] netlink: 'syz.5.11085': attribute type 2 has an invalid length. [ 254.463182][T29247] tmpfs: Too few inodes for current use [ 254.519779][T29250] bridge0: port 1(ipvlan2) entered blocking state [ 254.522858][T29250] bridge0: port 1(ipvlan2) entered disabled state [ 254.525865][T29250] ipvlan2: entered allmulticast mode [ 254.528254][T29250] bridge0: entered allmulticast mode [ 254.532065][T29250] ipvlan2: left allmulticast mode [ 254.534094][T29250] bridge0: left allmulticast mode [ 255.570337][T29282] overlayfs: workdir and upperdir must be separate subtrees [ 255.620114][T29287] devpts: Bad value for 'max' [ 256.014720][T29343] __nla_validate_parse: 4 callbacks suppressed [ 256.014731][T29343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11130'. [ 256.112644][T29355] CIFS mount error: No usable UNC path provided in device string! [ 256.112644][T29355] [ 256.117341][T29355] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.284035][T29383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11152'. [ 256.364074][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11155'. [ 256.392612][T29395] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.589763][T29417] gfs2: path_lookup on c::: returned error -2 [ 256.793069][T29436] CIFS mount error: No usable UNC path provided in device string! [ 256.793069][T29436] [ 256.798128][T29436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.860063][T29440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11178'. [ 256.984798][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11185'. [ 257.138326][T29474] netlink: 'syz.1.11195': attribute type 1 has an invalid length. [ 257.198583][T29482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11199'. [ 257.366494][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11211'. [ 257.592218][T29526] PKCS8: Unsupported PKCS#8 version [ 258.038347][T29562] sp0: Synchronizing with TNC [ 258.047043][T29561] [U] [ 258.198376][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 258.198392][ T40] audit: type=1400 audit(2000000000.692:29163): avc: denied { read } for pid=29581 comm="syz.1.11248" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.213396][ T40] audit: type=1400 audit(2000000000.692:29164): avc: denied { open } for pid=29581 comm="syz.1.11248" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.223879][ T40] audit: type=1400 audit(2000000000.692:29165): avc: denied { ioctl } for pid=29581 comm="syz.1.11248" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.238097][ T40] audit: type=1401 audit(2000000000.710:29166): op=fscreate invalid_context=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 258.327324][ T40] audit: type=1400 audit(2000000000.813:29167): avc: denied { write } for pid=29595 comm="syz.0.11255" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 258.369074][ T40] audit: type=1400 audit(2000000000.823:29168): avc: denied { read write } for pid=29597 comm="syz.1.11256" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.379585][ T40] audit: type=1400 audit(2000000000.823:29169): avc: denied { open } for pid=29597 comm="syz.1.11256" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.389881][ T40] audit: type=1400 audit(2000000000.823:29170): avc: denied { ioctl } for pid=29597 comm="syz.1.11256" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.490468][T29603] IPVS: Unknown mcast interface: batadv0 [ 258.514136][ T40] audit: type=1400 audit(2000000000.982:29171): avc: denied { create } for pid=29604 comm="syz.3.11259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.525959][ T40] audit: type=1400 audit(2000000000.991:29172): avc: denied { write } for pid=29604 comm="syz.3.11259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.590955][ T6842] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 258.765240][ T6842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.769818][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.774008][ T6842] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.777610][ T6842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.783104][ T6842] usb 6-1: config 0 descriptor?? [ 258.787150][ T6842] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.789450][ T6842] dvb-usb: bulk message failed: -22 (3/0) [ 258.794348][ T6842] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.797821][ T6842] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.800832][ T6842] usb 6-1: media controller created [ 258.803945][ T6842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.813641][ T6842] dvb-usb: bulk message failed: -22 (6/0) [ 258.817297][ T6842] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.824203][ T6842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input37 [ 258.832039][ T6842] dvb-usb: schedule remote query interval to 150 msecs. [ 258.834972][ T6842] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.997160][ T6842] dvb-usb: bulk message failed: -22 (1/0) [ 258.999905][ T6842] dvb-usb: error while querying for an remote control event. [ 259.005859][ T53] usb 6-1: USB disconnect, device number 10 [ 259.023793][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 259.158064][T29614] xt_l2tp: invalid flags combination: 8 [ 259.195933][T29616] sp0: Synchronizing with TNC [ 259.202104][T29615] [U] [ 259.359206][T29628] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 259.359206][T29628] The task syz.5.11268 (29628) triggered the difference, watch for misbehavior. [ 259.554944][T29648] veth0_virt_wifi: default FDB implementation only supports local addresses [ 259.912004][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11294'. [ 259.915965][T29679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11294'. [ 259.920359][T29679] netlink: 'syz.1.11294': attribute type 11 has an invalid length. [ 259.923922][T29679] netlink: 'syz.1.11294': attribute type 7 has an invalid length. [ 259.965374][T29685] bridge_slave_0: invalid flags given to default FDB implementation [ 259.996788][T29689] netlink: 'syz.0.11299': attribute type 1 has an invalid length. [ 259.999914][T29689] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11299'. [ 260.115921][T29701] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 260.343881][T29722] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 260.600407][T29746] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.622943][ T6232] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 260.651557][T29753] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.804077][ T6232] usb 10-1: Using ep0 maxpacket: 32 [ 260.809420][ T6232] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.812629][ T6232] usb 10-1: config 0 has no interface number 0 [ 260.815522][ T6232] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.819298][ T6232] usb 10-1: config 0 interface 85 has no altsetting 0 [ 260.824142][ T6232] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.828222][ T6232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.831524][ T6232] usb 10-1: Product: syz [ 260.833298][ T6232] usb 10-1: Manufacturer: syz [ 260.835256][ T6232] usb 10-1: SerialNumber: syz [ 260.843158][ T6232] usb 10-1: config 0 descriptor?? [ 261.102460][ C0] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 261.106958][ C0] sr 2:0:0:0: [sr0] tag#8 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 261.715606][T29810] overlayfs: conflicting lowerdir path [ 262.044221][T29825] netlink: 'syz.1.11363': attribute type 11 has an invalid length. [ 262.606596][T29867] tipc: Started in network mode [ 262.608405][T29867] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 262.611477][T29867] tipc: Enabling of bearer rejected, failed to enable media [ 262.692504][T29877] SELinux: policydb table sizes (0,4096) do not match mine (8,7) [ 262.695215][T29877] SELinux: failed to load policy [ 262.755213][T29885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.847565][T29900] __nla_validate_parse: 1 callbacks suppressed [ 262.847577][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11398'. [ 263.129418][T29920] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.11407'. [ 263.133930][T29920] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 263.198572][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 263.380478][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 263.386129][ T29] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 263.389512][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.394647][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.399506][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.405908][ T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 263.409820][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.419704][ T29] usb 5-1: config 0 descriptor?? [ 263.431862][T29934] mkiss: ax0: crc mode is auto. [ 263.443240][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input39 [ 263.590447][ T6232] appletouch 10-1:0.85: Failed to read mode from device. [ 263.601932][ T6232] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 263.603073][ T40] kauditd_printk_skb: 145 callbacks suppressed [ 263.603088][ T40] audit: type=1400 audit(2000000005.743:29318): avc: denied { read } for pid=29937 comm="syz.3.11416" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.609686][ T6232] usb 10-1: USB disconnect, device number 6 [ 263.619198][ T40] audit: type=1400 audit(2000000005.743:29319): avc: denied { open } for pid=29937 comm="syz.3.11416" path="net:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.629562][T29938] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 263.632134][ T40] audit: type=1400 audit(2000000005.743:29320): avc: denied { create } for pid=29937 comm="syz.3.11416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.642888][ T40] audit: type=1400 audit(2000000005.762:29321): avc: denied { write } for pid=29937 comm="syz.3.11416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.659569][ T40] audit: type=1400 audit(2000000005.762:29322): avc: denied { read } for pid=29937 comm="syz.3.11416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.671530][T25851] usb 5-1: USB disconnect, device number 11 [ 263.675602][ T40] audit: type=1400 audit(2000000005.762:29323): avc: denied { read write } for pid=29939 comm="syz.5.11417" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.686442][ T40] audit: type=1400 audit(2000000005.762:29324): avc: denied { open } for pid=29939 comm="syz.5.11417" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.697090][ T40] audit: type=1400 audit(2000000005.780:29325): avc: denied { ioctl } for pid=29939 comm="syz.5.11417" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x565d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.709149][ T40] audit: type=1400 audit(2000000005.799:29326): avc: denied { read } for pid=29907 comm="syz.0.11402" name="event4" dev="devtmpfs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 263.719306][ T40] audit: type=1400 audit(2000000005.799:29327): avc: denied { open } for pid=29907 comm="syz.0.11402" path="/dev/input/event4" dev="devtmpfs" ino=3280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 263.760660][T29949] netlink: 'syz.3.11421': attribute type 1 has an invalid length. [ 263.764119][T29949] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11421'. [ 263.938529][T29964] CUSE: unknown device info "" [ 263.940508][T29964] CUSE: zero length info key specified [ 263.942909][T29966] new mount options do not match the existing superblock, will be ignored [ 263.953756][T29966] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 264.005308][T29972] sp0: Synchronizing with TNC [ 264.298345][T30007] binder: 30005:30007 ioctl c018620b 200000000040 returned -14 [ 264.318028][T30009] pimreg9: entered allmulticast mode [ 264.602624][T30039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.631259][T25851] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 264.706826][T30051] EXT4-fs: Conflicting test_dummy_encryption options [ 264.826778][T30065] input: syz1 as /devices/virtual/input/input40 [ 264.833709][T25851] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.842909][T25851] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.853495][T25851] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.860342][T25851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.865250][T25851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.872359][T25851] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.876386][T25851] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.880275][T25851] usb 6-1: Product: syz [ 264.882061][T25851] usb 6-1: Manufacturer: syz [ 264.899567][T25851] cdc_wdm 6-1:1.0: skipping garbage [ 264.902059][T25851] cdc_wdm 6-1:1.0: skipping garbage [ 264.906335][T25851] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 264.909312][T25851] cdc_wdm 6-1:1.0: Unknown control protocol [ 265.116399][T30101] nbd: must specify at least one socket [ 265.133210][T25851] usb 6-1: USB disconnect, device number 11 [ 265.161124][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11495'. [ 265.332799][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11505'. [ 265.657912][T25851] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 265.723248][ T1343] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 265.841736][T25851] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 265.845127][T25851] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.849172][T25851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 265.854763][T25851] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.858503][T25851] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.862054][T25851] usb 5-1: Product: syz [ 265.863843][T25851] usb 5-1: Manufacturer: syz [ 265.865800][T25851] usb 5-1: SerialNumber: syz [ 265.869675][T25851] usb 5-1: config 0 descriptor?? [ 265.874153][T25851] hub 5-1:0.0: bad descriptor, ignoring hub [ 265.876808][T25851] hub 5-1:0.0: probe with driver hub failed with error -5 [ 265.882897][T25851] usb 5-1: selecting invalid altsetting 0 [ 265.915187][ T1343] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 265.923863][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.928231][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.932930][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.937424][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.941379][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.947530][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.950874][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.954400][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.959282][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.963228][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.967208][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.971995][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.975642][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.979681][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.984368][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 265.988358][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.992973][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.997425][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 266.001660][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.005446][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.009672][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 266.013726][ T1343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.016137][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11522'. [ 266.017627][ T1343] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.026030][ T1343] usb 10-1: config 0 interface 0 has no altsetting 0 [ 266.029981][ T1343] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 266.034014][ T1343] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 266.035460][T30165] xfrm0 speed is unknown, defaulting to 1000 [ 266.037753][ T1343] usb 10-1: Product: syz [ 266.042372][ T1343] usb 10-1: Manufacturer: syz [ 266.044487][ T1343] usb 10-1: SerialNumber: syz [ 266.049921][ T1343] usb 10-1: config 0 descriptor?? [ 266.057952][ T1343] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 266.204941][ T1343] usb 5-1: USB disconnect, device number 12 [ 266.225768][T30175] tipc: Invalid UDP bearer configuration [ 266.227176][T30175] tipc: Enabling of bearer rejected, failed to enable media [ 266.289177][ T34] usb 10-1: USB disconnect, device number 7 [ 266.310814][ T34] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 267.499840][T30305] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 267.499840][T30305] program syz.0.11588 not setting count and/or reply_len properly [ 267.616237][T30313] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11593'. [ 267.834227][T30331] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 267.852130][T30333] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11601'. [ 267.894690][T30339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11603'. [ 267.898817][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11603'. [ 267.902468][T30339] netlink: 'syz.1.11603': attribute type 18 has an invalid length. [ 268.024791][T30354] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 268.029169][T30354] overlayfs: missing 'lowerdir' [ 268.122908][T30368] autofs: Bad value for 'fd' [ 268.205763][T30379] hugetlbfs: Bad value '$' for mount option 'size' [ 268.205763][T30379] [ 268.296774][T30396] __nla_validate_parse: 1 callbacks suppressed [ 268.296790][T30396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11631'. [ 268.346446][T30400] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 268.414448][T30409] kAFS: unable to lookup cell '' [ 268.416893][T30409] kAFS: unable to lookup cell '(,c' [ 268.475638][T30413] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 268.545526][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11643'. [ 268.549584][T30422] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11643'. [ 268.574771][T30426] usb usb8: usbfs: process 30426 (syz.0.11645) did not claim interface 0 before use [ 268.594926][T30428] xfrm0 speed is unknown, defaulting to 1000 [ 268.640111][T30435] ata1.00: invalid multi_count 128 ignored [ 268.825784][T30459] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 268.825784][T30459] program syz.0.11660 not setting count and/or reply_len properly [ 268.957379][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 268.957396][ T40] audit: type=1400 audit(2000000010.747:29544): avc: denied { create } for pid=30469 comm="syz.5.11664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.959791][T30470] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11664'. [ 268.960242][ T40] audit: type=1400 audit(2000000010.747:29545): avc: denied { write } for pid=30469 comm="syz.5.11664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.980346][ T40] audit: type=1400 audit(2000000010.747:29546): avc: denied { nlmsg_write } for pid=30469 comm="syz.5.11664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.989534][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11665'. [ 269.016256][T30472] hsr_slave_1 (unregistering): left promiscuous mode [ 269.031915][ T40] audit: type=1400 audit(2000000010.822:29547): avc: denied { create } for pid=30475 comm="syz.5.11667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.040811][ T40] audit: type=1400 audit(2000000010.831:29548): avc: denied { write } for pid=30475 comm="syz.5.11667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.050161][ T40] audit: type=1400 audit(2000000010.831:29549): avc: denied { read } for pid=30475 comm="syz.5.11667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.134181][ T40] audit: type=1400 audit(2000000010.916:29550): avc: denied { create } for pid=30488 comm="syz.0.11673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.141261][ T40] audit: type=1400 audit(2000000010.916:29551): avc: denied { connect } for pid=30488 comm="syz.0.11673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.148080][ T40] audit: type=1400 audit(2000000010.916:29552): avc: denied { write } for pid=30488 comm="syz.0.11673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.184433][ T40] audit: type=1400 audit(2000000010.962:29553): avc: denied { create } for pid=30492 comm="syz.0.11675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 269.313080][T30506] netlink: 'syz.1.11681': attribute type 10 has an invalid length. [ 269.329094][T30506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.336425][T30506] batadv0: entered allmulticast mode [ 269.339159][T30506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.454070][T30514] can0: slcan on ttynull. [ 269.550828][T30513] can0 (unregistered): slcan off ttynull. [ 269.810770][T30541] usb usb8: usbfs: process 30541 (syz.1.11697) did not claim interface 0 before use [ 269.898927][T30547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11701'. [ 270.036413][T30555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 270.039182][T30555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.044430][T30555] vhci_hcd vhci_hcd.0: Device attached [ 270.048015][T30560] vhci_hcd: connection closed [ 270.048526][ T60] vhci_hcd vhci_hcd.1: stop threads [ 270.053006][ T60] vhci_hcd vhci_hcd.1: release socket [ 270.055420][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 270.621809][T30591] tmpfs: Cannot change global quota limit on remount [ 270.709565][T30605] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 270.782544][T30613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11731'. [ 270.791304][T30613] bridge0: port 3(macvlan2) entered blocking state [ 270.793555][T30613] bridge0: port 3(macvlan2) entered disabled state [ 270.793658][T30613] macvlan2: entered allmulticast mode [ 270.807302][T30613] macvlan2: left allmulticast mode [ 270.838055][T30619] netlink: 348 bytes leftover after parsing attributes in process `syz.1.11734'. [ 271.055605][ T1343] Process accounting resumed [ 271.074657][T30644] Process accounting resumed [ 271.209910][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11754'. [ 271.298084][T30672] netlink: 'syz.0.11760': attribute type 62 has an invalid length. [ 271.591612][ T1343] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.681865][T25851] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 271.751437][ T1343] usb 5-1: Using ep0 maxpacket: 16 [ 271.756877][ T1343] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 271.760862][ T1343] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 271.764363][ T1343] usb 5-1: Product: syz [ 271.765758][ T1343] usb 5-1: Manufacturer: syz [ 271.767272][ T1343] usb 5-1: SerialNumber: syz [ 271.770341][ T1343] usb 5-1: config 0 descriptor?? [ 271.839890][T25851] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 271.844490][T25851] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 271.848587][T25851] usb 10-1: config 1 interface 0 has no altsetting 0 [ 271.852985][T25851] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.856585][T25851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.859794][T25851] usb 10-1: Product: syz [ 271.861381][T25851] usb 10-1: Manufacturer: syz [ 271.863121][T25851] usb 10-1: SerialNumber: syz [ 271.867512][T30688] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 271.871057][T30688] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 271.990413][ T1343] usb 5-1: USB disconnect, device number 13 [ 272.098334][T25851] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 272.106396][T25851] usb 10-1: USB disconnect, device number 8 [ 272.695516][T30713] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 272.698900][T30713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.863219][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 273.058617][ T34] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 273.062630][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 273.066664][ T34] usb 5-1: Product: syz [ 273.068653][ T34] usb 5-1: Manufacturer: syz [ 273.070721][ T34] usb 5-1: SerialNumber: syz [ 273.075268][ T34] usb 5-1: config 0 descriptor?? [ 273.083605][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 273.087088][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 273.093278][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.097142][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 273.102982][ T34] usb 5-1: media controller created [ 273.111164][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.296535][T30709] cxusb: i2c rd: len=4096 is too big! [ 273.296535][T30709] [ 273.299531][ T34] cxusb: set interface failed [ 273.301538][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 273.342630][ T34] DVB: Unable to find symbol mt352_attach() [ 273.345604][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 273.347537][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 273.350107][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 273.397591][ T34] rc_core: IR keymap rc-dvico-mce not found [ 273.399966][ T34] Registered IR keymap rc-empty [ 273.402292][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 273.407138][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input41 [ 273.418448][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 273.421916][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 273.435232][ T34] usb 5-1: USB disconnect, device number 14 [ 273.478690][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 274.060328][T20229] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 274.232262][T20229] usb 10-1: Using ep0 maxpacket: 8 [ 274.238775][T20229] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.243264][T20229] usb 10-1: config 0 has no interface number 0 [ 274.245889][T20229] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.250619][T20229] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.257477][T20229] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.262247][T20229] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.268673][T20229] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.272666][T20229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.279738][T20229] usb 10-1: config 0 descriptor?? [ 274.286777][T20229] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.294318][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11839'. [ 274.388370][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 274.388386][ T40] audit: type=1400 audit(2000000015.826:29722): avc: denied { read } for pid=30852 comm="syz.0.11843" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.401793][ T40] audit: type=1400 audit(2000000015.826:29723): avc: denied { open } for pid=30852 comm="syz.0.11843" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.410763][ T40] audit: type=1400 audit(2000000015.826:29724): avc: denied { ioctl } for pid=30852 comm="syz.0.11843" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.458376][T30858] : entered promiscuous mode [ 274.508178][T30860] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11846'. [ 274.622130][ T40] audit: type=1400 audit(2000000016.051:29725): avc: denied { create } for pid=30865 comm="syz.1.11849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.629863][ T40] audit: type=1400 audit(2000000016.051:29726): avc: denied { bind } for pid=30865 comm="syz.1.11849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.637074][ T40] audit: type=1400 audit(2000000016.051:29727): avc: denied { setopt } for pid=30865 comm="syz.1.11849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.645151][ T40] audit: type=1400 audit(2000000016.060:29728): avc: denied { append } for pid=30867 comm="syz.3.11850" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.655899][ T40] audit: type=1400 audit(2000000016.079:29729): avc: denied { open } for pid=30869 comm="syz.1.11851" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.664190][ T40] audit: type=1400 audit(2000000016.079:29730): avc: denied { ioctl } for pid=30869 comm="syz.1.11851" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.694875][ T40] audit: type=1400 audit(2000000016.107:29731): avc: denied { allowed } for pid=30873 comm="syz.0.11853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 274.865407][T30898] loop6: detected capacity change from 0 to 524288000 [ 275.122953][ T34] kernel write not supported for file /audio1 (pid: 34 comm: kworker/3:0) [ 275.478356][T30960] tipc: Started in network mode [ 275.480641][T30960] tipc: Node identity ac141424, cluster identity 4711 [ 275.486099][T30960] tipc: New replicast peer: 10.1.1.0 [ 275.488069][T30960] tipc: Enabled bearer , priority 10 [ 276.693255][T25851] tipc: Node number set to 2886997028 [ 276.693824][ T6842] usb 10-1: USB disconnect, device number 9 [ 276.704295][ T6842] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 276.770522][T31010] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 276.814529][T31014] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.11914'. [ 276.814551][T31015] [U] v3f"S/4:XTzWtlW= [ 276.820314][T31015] [U] J"e:" [ 276.972506][T31035] [U]  [ 277.217842][T31068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11940'. [ 277.496917][T31105] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11957'. [ 277.573976][T31115] loop6: detected capacity change from 0 to 7 [ 277.588861][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.592695][ C3] buffer_io_error: 28 callbacks suppressed [ 277.592708][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.601935][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.606001][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.610604][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.614079][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.616960][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.620332][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.623322][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.626343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.630165][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.634209][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.639838][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.643520][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.647162][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.651058][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.654445][T31115] ldm_validate_partition_table(): Disk read failed. [ 277.658513][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.661432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.664719][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.669141][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.672926][T31115] Dev loop6: unable to read RDB block 0 [ 277.676142][T31115] loop6: unable to read partition table [ 277.678766][T31115] loop6: partition table beyond EOD, truncated [ 277.692538][T31115] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 277.898683][T31147] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 277.904314][T31147] overlayfs: overlapping lowerdir path [ 277.978046][T31153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11978'. [ 278.546128][T31190] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 278.804241][T31213] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 279.000146][T31242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12019'. [ 279.011199][T31241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12020'. [ 279.246360][T31266] ptrace attach of "/syz-executor exec"[6185] was attempted by ""[31266] [ 279.448727][T25851] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 279.597351][T31290] block nbd1: not configured, cannot reconfigure [ 279.610944][T25851] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 279.614956][T25851] usb 10-1: config 0 interface 0 has no altsetting 0 [ 279.620963][T25851] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.624595][T25851] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 279.627388][T25851] usb 10-1: Product: syz [ 279.629158][T25851] usb 10-1: Manufacturer: syz [ 279.631429][T25851] usb 10-1: SerialNumber: syz [ 279.641321][T25851] usb 10-1: config 0 descriptor?? [ 279.644368][T31262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 279.650354][T25851] usb 10-1: selecting invalid altsetting 0 [ 279.868955][T25851] usb 10-1: USB disconnect, device number 10 [ 280.193064][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 280.193075][ T40] audit: type=1400 audit(2000000021.261:29916): avc: denied { read } for pid=31300 comm="syz.3.12047" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.206855][ T40] audit: type=1400 audit(2000000021.261:29917): avc: denied { open } for pid=31300 comm="syz.3.12047" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.217448][ T40] audit: type=1400 audit(2000000021.270:29918): avc: denied { ioctl } for pid=31300 comm="syz.3.12047" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.236883][ T40] audit: type=1400 audit(2000000021.299:29919): avc: denied { name_bind } for pid=31302 comm="syz.3.12048" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 280.344285][ T40] audit: type=1400 audit(2000000021.401:29920): avc: denied { map_create } for pid=31309 comm="syz.3.12052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.354165][ T40] audit: type=1400 audit(2000000021.401:29921): avc: denied { bpf } for pid=31309 comm="syz.3.12052" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.363418][ T40] audit: type=1400 audit(2000000021.401:29922): avc: denied { map_read map_write } for pid=31309 comm="syz.3.12052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.371568][ T40] audit: type=1400 audit(2000000021.411:29923): avc: denied { prog_load } for pid=31309 comm="syz.3.12052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.380085][ T40] audit: type=1400 audit(2000000021.411:29924): avc: denied { perfmon } for pid=31309 comm="syz.3.12052" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.448021][T31320] erspan0: entered promiscuous mode [ 280.464811][ T40] audit: type=1400 audit(2000000021.523:29925): avc: denied { create } for pid=31321 comm="syz.3.12057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.543259][T31330] loop5: detected capacity change from 0 to 65536 [ 280.605037][T31330] loop5: detected capacity change from 65536 to 524287995 [ 281.159224][T31385] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 281.896520][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 282.077123][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.084455][ T34] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 282.088534][ T34] usb 6-1: can't read configurations, error -71 [ 282.150625][T31456] xfrm0 speed is unknown, defaulting to 1000 [ 282.705229][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12142'. [ 282.710935][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12142'. [ 282.809932][T31519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12149'. [ 282.813074][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12149'. [ 282.816374][T31519] netlink: 'syz.5.12149': attribute type 19 has an invalid length. [ 282.941616][T31536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 282.993779][T31544] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 283.035257][T31550] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12164'. [ 283.144679][T31563] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 283.145199][T31564] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 1 [ 283.151993][T31565] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 2 [ 283.152642][T31566] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 3 [ 283.321362][T31582] overlayfs: workdir and upperdir must reside under the same mount [ 283.501866][T31591] block nbd1: server does not support multiple connections per device. [ 283.506047][T31591] block nbd1: shutting down sockets [ 283.644089][T31610] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 283.761963][T31625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12196'. [ 284.955210][T31682] sctp: Trying to GSO but underlying device doesn't support it. [ 285.069827][T31686] bond5: invalid ARP target 0.0.0.0 specified for addition [ 285.076138][T31686] bond5: option arp_ip_target: invalid value (0) [ 285.079580][T31686] bond5 (unregistering): Released all slaves [ 285.217399][T31703] veth1_to_batadv: entered promiscuous mode [ 285.447644][T31720] rtc_cmos 00:05: Alarms can be up to one day in the future [ 285.502171][T31726] misc userio: Can't change port type on an already running userio instance [ 285.539980][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 285.544372][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 285.547588][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 285.551539][ T29] rtc_cmos 00:05: Alarms can be up to one day in the future [ 285.558272][ T29] rtc rtc0: __rtc_set_alarm: err=-22 [ 285.582638][ T40] kauditd_printk_skb: 230 callbacks suppressed [ 285.582650][ T40] audit: type=1400 audit(2000000026.303:30156): avc: denied { module_request } for pid=31734 comm="syz.0.12245" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 285.586440][T31732] bond8: ARP target 9.0.0.0 is already present [ 285.595377][T31732] bond8: option arp_ip_target: invalid value (9) [ 285.604677][T31732] bond8 (unregistering): Released all slaves [ 285.630616][ T40] audit: type=1400 audit(2000000026.350:30157): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=45740 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 285.713116][ T40] audit: type=1400 audit(2000000026.425:30158): avc: denied { read write } for pid=6182 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.723996][ T40] audit: type=1400 audit(2000000026.425:30159): avc: denied { open } for pid=6182 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.733604][ T40] audit: type=1400 audit(2000000026.425:30160): avc: denied { ioctl } for pid=6182 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.746987][ T40] audit: type=1400 audit(2000000026.453:30161): avc: denied { create } for pid=31740 comm="syz.1.12247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.756873][ T40] audit: type=1400 audit(2000000026.453:30162): avc: denied { setopt } for pid=31740 comm="syz.1.12247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.797333][ T40] audit: type=1400 audit(2000000026.499:30163): avc: denied { execmem } for pid=31744 comm="syz.5.12249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 285.806441][ T40] audit: type=1400 audit(2000000026.499:30164): avc: denied { create } for pid=31744 comm="syz.5.12249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.815768][ T40] audit: type=1400 audit(2000000026.509:30165): avc: denied { setopt } for pid=31744 comm="syz.5.12249" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.910407][T31759] Failed to get privilege flags for destination (handle=0x2:0x156) [ 286.152312][T31780] input: syz1 as /devices/virtual/input/input43 [ 286.161753][T31780] input: failed to attach handler leds to device input43, error: -6 [ 286.310056][T31795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12271'. [ 286.858448][T31821] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12284'. [ 287.223489][T31843] block nbd1: NBD_DISCONNECT [ 287.254680][T31850] loop5: detected capacity change from 0 to 7 [ 287.383053][T31859] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 287.426229][T17339] Dev loop5: unable to read RDB block 7 [ 287.428181][T17339] loop5: unable to read partition table [ 287.430125][T17339] loop5: partition table beyond EOD, truncated [ 287.613175][T31850] Dev loop5: unable to read RDB block 7 [ 287.617897][T31850] loop5: unable to read partition table [ 287.626077][T31850] loop5: partition table beyond EOD, truncated [ 287.630210][T31850] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 287.679893][T31881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12300'. [ 287.685477][T31881] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12300'. [ 288.182537][T20229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 288.342885][T20229] usb 5-1: Using ep0 maxpacket: 8 [ 288.346855][T20229] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 288.353596][T20229] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.357537][T20229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.361821][T20229] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.374672][T20229] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.380661][T20229] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.383643][T20229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.398178][T31939] netlink: 165 bytes leftover after parsing attributes in process `syz.3.12333'. [ 288.430132][T31941] 5gQ[: renamed from lo [ 288.567506][ T6842] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.608398][T20229] usb 5-1: GET_CAPABILITIES returned 0 [ 288.610682][T20229] usbtmc 5-1:16.0: can't read capabilities [ 288.738395][ T6842] usb 6-1: Using ep0 maxpacket: 8 [ 288.744542][ T6842] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 288.748425][ T6842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.752135][ T6842] usb 6-1: Product: syz [ 288.753899][ T6842] usb 6-1: Manufacturer: syz [ 288.755854][ T6842] usb 6-1: SerialNumber: syz [ 288.760515][ T6842] usb 6-1: config 0 descriptor?? [ 288.829242][T31912] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 288.834922][T20229] usb 5-1: USB disconnect, device number 15 [ 288.982741][ T6842] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 288.987438][ T6842] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 288.996054][ T6842] usb 6-1: USB disconnect, device number 14 [ 290.949903][ T40] kauditd_printk_skb: 180 callbacks suppressed [ 290.949919][ T40] audit: type=1400 audit(2000000031.317:30346): avc: denied { append } for pid=31981 comm="syz.0.12354" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 290.963795][ T40] audit: type=1400 audit(2000000031.326:30347): avc: denied { name_bind } for pid=31983 comm="syz.1.12355" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 290.971786][ T40] audit: type=1400 audit(2000000031.326:30348): avc: denied { node_bind } for pid=31983 comm="syz.1.12355" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 290.988116][ T40] audit: type=1400 audit(2000000031.363:30349): avc: denied { create } for pid=31987 comm="syz.1.12357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.994628][ T40] audit: type=1400 audit(2000000031.363:30350): avc: denied { bind } for pid=31987 comm="syz.1.12357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.001267][ T40] audit: type=1400 audit(2000000031.363:30351): avc: denied { node_bind } for pid=31987 comm="syz.1.12357" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 291.009308][ T40] audit: type=1400 audit(2000000031.363:30352): avc: denied { name_bind } for pid=31987 comm="syz.1.12357" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 291.017845][ T40] audit: type=1400 audit(2000000031.382:30353): avc: denied { recv } for pid=5839 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45740 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 291.029176][ T40] audit: type=1400 audit(2000000031.401:30354): avc: denied { create } for pid=31989 comm="syz.0.12359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.035646][ T40] audit: type=1400 audit(2000000031.401:30355): avc: denied { write } for pid=31989 comm="syz.0.12359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.773324][T32021] tipc: New replicast peer: 255.255.255.255 [ 291.778517][T32021] tipc: Enabled bearer , priority 10 [ 291.942567][T32035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12379'. [ 291.947139][T32035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12379'. [ 291.963754][T32037] batadv_slave_1: entered promiscuous mode [ 291.967557][T32036] batadv_slave_1: left promiscuous mode [ 292.178106][T32058] tipc: New replicast peer: 255.255.255.255 [ 292.184549][T32058] tipc: Enabled bearer , priority 10 [ 292.298345][T32066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12393'. [ 292.301055][T32066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12393'. [ 292.339480][T32068] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 293.017867][T32105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12409'. [ 293.402198][T32121] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12417'. [ 293.406146][T32121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12417'. [ 293.448235][T32123] bridge_slave_0: default FDB implementation only supports local addresses [ 293.591113][T32136] netlink: 'syz.1.12422': attribute type 3 has an invalid length. [ 293.594431][T32136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12422'. [ 293.642864][T32141] can0: slcan on ttyS3. [ 293.721894][T32141] can0 (unregistered): slcan off ttyS3. [ 293.799089][T32147] 9p: Invalid uid '0x00000000ffffffff' [ 294.076213][T32170] dvmrp1: entered allmulticast mode [ 294.082735][T32169] dvmrp1: left allmulticast mode [ 294.121728][T32173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12439'. [ 294.124917][T32173] netem: unknown loss type 0 [ 294.126791][T32173] netem: change failed [ 294.396592][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12446'. [ 294.577362][T32198] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 294.586334][T32199] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 1 [ 294.588477][T32200] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 2 [ 294.594582][T32201] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 3 [ 294.730656][T32207] TCP: TCP_TX_DELAY enabled [ 294.915710][T32213] netlink: 'syz.0.12457': attribute type 8 has an invalid length. [ 294.980580][T32217] batadv_slave_1: entered promiscuous mode [ 294.986475][T32216] batadv_slave_1: left promiscuous mode [ 295.028595][ T6245] hid_parser_main: 22 callbacks suppressed [ 295.028614][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.034654][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.039047][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.042444][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.045963][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.049323][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.052626][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.056011][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.059910][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.063202][ T6245] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 295.072713][ T6245] hid-generic 0006:0004:0009.0009: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 295.127665][T32220] fido_id[32220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.487025][T32251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12473'. [ 295.491152][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12473'. [ 295.677869][T32269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12480'. [ 295.810491][T32277] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 295.954646][ T34] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 296.129007][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.133770][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 296.157843][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.161707][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.170351][ T34] usb 5-1: config 0 descriptor?? [ 296.172625][T32271] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.267106][T32292] netlink: 'syz.1.12491': attribute type 1 has an invalid length. [ 296.269986][T32292] netlink: 'syz.1.12491': attribute type 2 has an invalid length. [ 296.272670][T32292] netlink: 'syz.1.12491': attribute type 1 has an invalid length. [ 296.276656][T32292] netlink: 'syz.1.12491': attribute type 3 has an invalid length. [ 296.279409][T32292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12491'. [ 296.348947][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 296.348965][ T40] audit: type=1400 audit(2000000036.368:30527): avc: denied { read } for pid=32298 comm="syz.1.12495" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 296.362107][ T40] audit: type=1400 audit(2000000036.368:30528): avc: denied { open } for pid=32298 comm="syz.1.12495" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 296.369677][ T40] audit: type=1400 audit(2000000036.387:30529): avc: denied { ioctl } for pid=32298 comm="syz.1.12495" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 296.405559][ T34] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 296.600191][ T40] audit: type=1400 audit(2000000036.611:30530): avc: denied { create } for pid=32305 comm="syz.3.12498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.609193][ T40] audit: type=1400 audit(2000000036.611:30531): avc: denied { ioctl } for pid=32307 comm="syz.1.12499" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=103335 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 296.630074][ T40] audit: type=1400 audit(2000000036.639:30532): avc: denied { write } for pid=32270 comm="syz.0.12481" name="iowarrior0" dev="devtmpfs" ino=3372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.633660][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 296.650270][ T6842] usb 5-1: USB disconnect, device number 16 [ 296.666578][ T40] audit: type=1400 audit(2000000036.667:30533): avc: denied { create } for pid=32309 comm="syz.1.12501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.679467][ T40] audit: type=1400 audit(2000000036.677:30534): avc: denied { connect } for pid=32309 comm="syz.1.12501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.688791][ T40] audit: type=1400 audit(2000000036.686:30535): avc: denied { ioctl } for pid=32309 comm="syz.1.12501" path="socket:[105704]" dev="sockfs" ino=105704 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.699889][ T40] audit: type=1400 audit(2000000036.705:30536): avc: denied { write } for pid=32309 comm="syz.1.12501" path="socket:[105704]" dev="sockfs" ino=105704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.802621][T32321] netlink: 'syz.3.12505': attribute type 21 has an invalid length. [ 296.805756][T32321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.809105][T32321] IPv6: NLM_F_CREATE should be set when creating new route [ 296.811985][T32321] IPv6: NLM_F_CREATE should be set when creating new route [ 296.814552][T32321] IPv6: NLM_F_CREATE should be set when creating new route [ 296.818722][T32321] netlink: 'syz.3.12505': attribute type 21 has an invalid length. [ 296.822271][T32321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.100254][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12513'. [ 297.318264][T32362] erspan0: entered promiscuous mode [ 297.427084][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12530'. [ 297.609768][T32390] evm: overlay not supported [ 298.131607][T32441] option changes via remount are deprecated (pid=32439 comm=syz.3.12562) [ 298.134417][T32441] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 "" [ 298.338647][ T1343] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 298.499038][ T1343] usb 6-1: Using ep0 maxpacket: 8 [ 298.505546][ T1343] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 298.508069][ T1343] usb 6-1: config 0 has no interface number 0 [ 298.515734][ T1343] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.520525][ T1343] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 298.525443][ T1343] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 298.530431][ T1343] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 298.535552][ T1343] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.545358][ T1343] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 298.549293][ T1343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.553972][ T1343] usb 6-1: Product: syz [ 298.555872][ T1343] usb 6-1: Manufacturer: syz [ 298.558159][ T1343] usb 6-1: SerialNumber: syz [ 298.563946][ T1343] usb 6-1: config 0 descriptor?? [ 298.636727][T32461] netem: change failed [ 298.790290][ T1343] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 298.951827][T32478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12578'. [ 298.955047][T32478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12578'. [ 299.009181][ T6245] usb 6-1: USB disconnect, device number 15 [ 299.247313][ T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.439825][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 299.443723][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 299.447640][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.463511][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 299.466577][ T29] pvrusb2: ********** [ 299.467989][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 299.471575][ T29] pvrusb2: Important functionality might not be entirely working. [ 299.478334][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 299.482323][ T29] pvrusb2: ********** [ 299.674790][ T2489] pvrusb2: Invalid write control endpoint [ 299.726383][ T2489] pvrusb2: Invalid write control endpoint [ 299.731244][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.736451][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.741476][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.745959][ T2489] pvrusb2: Device being rendered inoperable [ 299.753698][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 299.757782][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.767200][ T2489] pvrusb2: Attached sub-driver cx25840 [ 299.770277][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.775128][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.889749][ T29] usb 5-1: USB disconnect, device number 17 [ 300.652442][T32511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12594'. [ 300.712648][T32515] blkio.reset_stats is deprecated [ 301.065613][ T60] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 301.169603][T32558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12616'. [ 301.602809][T32592] pim6reg: entered allmulticast mode [ 301.608294][T32592] pim6reg: left allmulticast mode [ 301.876344][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 301.876360][ T40] audit: type=1400 audit(2000000041.541:30710): avc: denied { prog_load } for pid=32599 comm="syz.1.12634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.888050][ T40] audit: type=1400 audit(2000000041.541:30711): avc: denied { bpf } for pid=32599 comm="syz.1.12634" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.897014][ T40] audit: type=1400 audit(2000000041.559:30712): avc: denied { read write } for pid=6182 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.907529][ T40] audit: type=1400 audit(2000000041.559:30713): avc: denied { open } for pid=6182 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.917858][ T40] audit: type=1400 audit(2000000041.559:30714): avc: denied { ioctl } for pid=6182 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.929598][ T40] audit: type=1400 audit(2000000041.578:30715): avc: denied { read } for pid=32601 comm="syz.1.12635" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.938261][ T40] audit: type=1400 audit(2000000041.578:30716): avc: denied { open } for pid=32601 comm="syz.1.12635" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.947688][ T40] audit: type=1400 audit(2000000041.578:30717): avc: denied { ioctl } for pid=32601 comm="syz.1.12635" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.958673][ T40] audit: type=1400 audit(2000000041.606:30718): avc: denied { perfmon } for pid=32603 comm="syz.1.12636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.967743][ T40] audit: type=1400 audit(2000000041.606:30719): avc: denied { prog_run } for pid=32603 comm="syz.1.12636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 302.037192][T32608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12638'. [ 302.111614][T32610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.120244][T32610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.235304][T32610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.239893][T32610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.354482][T32610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.359000][T32610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.458759][T32610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.462891][T32610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.559644][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.562803][ T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.570646][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.574339][ T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.581730][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.584834][ T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.596257][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.599177][ T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.044032][T32642] loop1: detected capacity change from 0 to 7 [ 303.051660][ C2] blk_print_req_error: 11 callbacks suppressed [ 303.051671][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.057618][ C2] buffer_io_error: 11 callbacks suppressed [ 303.057631][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.057892][T32644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12654'. [ 303.060913][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.069769][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.073525][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.076976][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.080219][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.083878][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.088138][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.091314][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.094117][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.097803][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.100567][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.103911][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.106714][T17339] ldm_validate_partition_table(): Disk read failed. [ 303.109755][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.113007][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.115727][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.118795][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.121662][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 303.125105][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.128000][T17339] Dev loop1: unable to read RDB block 0 [ 303.130813][T17339] loop1: unable to read partition table [ 303.132812][T17339] loop1: partition table beyond EOD, truncated [ 303.143314][T32642] ldm_validate_partition_table(): Disk read failed. [ 303.146194][T32642] Dev loop1: unable to read RDB block 0 [ 303.148714][T32642] loop1: unable to read partition table [ 303.151336][T32642] loop1: partition table beyond EOD, truncated [ 303.153722][T32642] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 303.239320][T32651] vcan0: tx address claim with dlc 0 [ 303.309748][T32659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12661'. [ 303.313418][T32659] netem: incorrect gi model size [ 303.315595][T32659] netem: change failed [ 303.665158][T32678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.668189][T32678] IPv6: NLM_F_CREATE should be set when creating new route [ 303.671203][T32678] IPv6: NLM_F_CREATE should be set when creating new route [ 303.684085][T32678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.834751][T32688] kvm: kvm [32687]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 304.048400][ T5287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.058248][ T5287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.063213][ T5287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.071980][ T5287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.075701][ T5287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.105258][T32698] xfrm0 speed is unknown, defaulting to 1000 [ 304.259329][T32714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12682'. [ 304.263605][T32714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12682'. [ 304.282404][T32698] chnl_net:caif_netlink_parms(): no params data found [ 304.309293][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12683'. [ 304.325638][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12683'. [ 304.393441][T32723] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 304.403846][T32698] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.406904][T32698] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.409989][T32698] bridge_slave_0: entered allmulticast mode [ 304.418352][T32698] bridge_slave_0: entered promiscuous mode [ 304.435705][T32698] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.438746][T32698] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.441999][T32698] bridge_slave_1: entered allmulticast mode [ 304.445966][T32698] bridge_slave_1: entered promiscuous mode [ 304.493873][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.555116][T32698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.559857][T32698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.565601][T32737] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 304.652019][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.687955][T32698] team0: Port device team_slave_0 added [ 304.702024][T32698] team0: Port device team_slave_1 added [ 304.725805][T32698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.728252][T32698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.742494][T32698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.755361][T32698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.758376][T32698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.770811][T32698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.795314][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.801537][T32750] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12694'. [ 304.858375][T32698] hsr_slave_0: entered promiscuous mode [ 304.861249][T32698] hsr_slave_1: entered promiscuous mode [ 304.863860][T32698] debugfs: 'hsr0' already exists in 'hsr' [ 304.866391][T32698] Cannot create hsr debugfs directory [ 304.892911][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.129912][ T60] bridge_slave_1: left allmulticast mode [ 305.132388][ T60] bridge_slave_1: left promiscuous mode [ 305.134900][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.156882][ T60] bridge_slave_0: left allmulticast mode [ 305.159789][ T60] bridge_slave_0: left promiscuous mode [ 305.162416][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.411302][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.418214][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.423853][ T60] bond0 (unregistering): Released all slaves [ 305.431206][T32698] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.447575][T32698] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.452420][T32698] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.459736][T32698] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.493143][ T333] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 305.523803][ T60] : left promiscuous mode [ 305.572016][T32698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.583757][T32698] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.591211][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.593699][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.604976][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.607946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.801401][T32698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.930005][ T60] hsr_slave_0: left promiscuous mode [ 305.939061][ T60] hsr_slave_1: left promiscuous mode [ 305.942698][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.945178][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.948516][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.955891][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.964929][ T60] veth1_to_batadv: left promiscuous mode [ 305.966660][ T60] veth1_macvtap: left promiscuous mode [ 305.968688][ T60] veth0_macvtap: left promiscuous mode [ 305.971462][ T60] veth1_vlan: left promiscuous mode [ 305.974271][ T60] veth0_vlan: left promiscuous mode [ 306.115338][ T394] netlink: 'syz.1.12730': attribute type 13 has an invalid length. [ 306.225529][ T60] team0 (unregistering): Port device team_slave_1 removed [ 306.231982][ T396] input: syz1 as /devices/virtual/input/input46 [ 306.253849][ T60] team0 (unregistering): Port device team_slave_0 removed [ 306.292590][ T63] Bluetooth: hci4: command tx timeout [ 306.390003][ T394] syz_tun: refused to change device tx_queue_len [ 306.464575][T32698] veth0_vlan: entered promiscuous mode [ 306.469824][T32698] veth1_vlan: entered promiscuous mode [ 306.482538][ T411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 306.511592][T32698] veth0_macvtap: entered promiscuous mode [ 306.519774][T32698] veth1_macvtap: entered promiscuous mode [ 306.528893][T32698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.538124][T32698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.552147][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.556247][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.566552][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.583124][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.706494][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.710502][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.760020][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.762798][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.038176][ T456] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 307.250858][ T40] kauditd_printk_skb: 296 callbacks suppressed [ 307.250872][ T40] audit: type=1400 audit(2000000302.569:31016): avc: denied { unmount } for pid=6186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.308364][ T40] audit: type=1400 audit(2000000302.606:31017): avc: denied { watch } for pid=481 comm="syz.3.12763" path="/3234" dev="tmpfs" ino=16288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 307.335590][ T40] audit: type=1400 audit(2000000302.643:31018): avc: denied { read append } for pid=485 comm="syz.1.12765" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.345487][ T40] audit: type=1400 audit(2000000302.643:31019): avc: denied { open } for pid=485 comm="syz.1.12765" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.359138][ T40] audit: type=1400 audit(2000000302.653:31020): avc: denied { watch watch_reads } for pid=483 comm="syz.6.12764" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.368726][ T40] audit: type=1400 audit(2000000302.653:31021): avc: denied { read } for pid=486 comm="syz.0.12766" dev="nsfs" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.378597][ T40] audit: type=1400 audit(2000000302.653:31022): avc: denied { open } for pid=486 comm="syz.0.12766" path="net:[4026533438]" dev="nsfs" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.389882][ T40] audit: type=1400 audit(2000000302.653:31023): avc: denied { ioctl } for pid=485 comm="syz.1.12765" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.405819][ T40] audit: type=1400 audit(2000000302.681:31024): avc: denied { read } for pid=489 comm="syz.3.12767" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.408443][ T492] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 307.415834][ T40] audit: type=1400 audit(2000000302.681:31025): avc: denied { open } for pid=489 comm="syz.3.12767" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.606420][ T511] __nla_validate_parse: 1 callbacks suppressed [ 307.606438][ T511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12777'. [ 307.637816][ T515] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12778'. [ 307.677844][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12780'. [ 308.090436][ T565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12802'. [ 308.419991][ T600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.507626][ T63] Bluetooth: hci4: command tx timeout [ 308.970354][ T637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12833'. [ 309.011261][ T643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12836'. [ 309.015328][ T643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12836'. [ 309.222022][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12842'. [ 309.225967][ T657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12842'. [ 309.229424][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12842'. [ 309.382307][ T665] openvswitch: netlink: IP tunnel dst address not specified [ 309.392776][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 309.563805][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 309.570645][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 309.574192][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 309.578174][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.583345][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.588696][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.593656][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.598959][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 309.604802][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 309.608473][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 309.610979][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 309.614757][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.619654][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.623617][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.627311][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.632244][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 309.637855][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 309.641700][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 309.644438][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 309.652302][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.657164][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.662040][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.666276][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.670024][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 309.675278][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 309.679964][ T29] usb 6-1: string descriptor 0 read error: -22 [ 309.682374][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.685384][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.695389][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.913296][ T6245] usb 6-1: USB disconnect, device number 16 [ 310.076033][ T700] loop5: detected capacity change from 0 to 7 [ 310.081966][ C0] blk_print_req_error: 26 callbacks suppressed [ 310.082008][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.088914][ C0] buffer_io_error: 25 callbacks suppressed [ 310.088928][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.095224][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.099431][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.103215][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.107388][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.110962][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.114101][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.117126][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.121093][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.124554][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.128611][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.135084][ T655] adutux: No device or device unplugged -19 [ 310.135279][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.144219][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.148379][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.151995][T17339] ldm_validate_partition_table(): Disk read failed. [ 310.155102][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.159336][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.163173][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.167478][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.171197][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 310.175095][T17339] Dev loop5: unable to read RDB block 0 [ 310.178436][T17339] loop5: unable to read partition table [ 310.181041][T17339] loop5: partition table beyond EOD, truncated [ 310.185684][ T700] ldm_validate_partition_table(): Disk read failed. [ 310.189241][ T700] Dev loop5: unable to read RDB block 0 [ 310.191704][ T700] loop5: unable to read partition table [ 310.193731][ T700] loop5: partition table beyond EOD, truncated [ 310.196025][ T700] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 310.482423][ T717] input: syz0 as /devices/virtual/input/input47 [ 310.539296][ T719] macsec1: entered promiscuous mode [ 310.541235][ T719] macsec1: entered allmulticast mode [ 310.739744][ T63] Bluetooth: hci4: command tx timeout [ 310.892945][ T738] netlink: 'syz.6.12875': attribute type 3 has an invalid length. [ 310.896176][ T738] netlink: 'syz.6.12875': attribute type 1 has an invalid length. [ 310.899489][ T738] NCSI netlink: No device for ifindex 813332851 [ 311.466762][ T6842] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 311.561869][ T794] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.638566][ T6842] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 311.643728][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.647489][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.657470][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.661829][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.665819][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.671794][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.675795][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.679412][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.683431][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.686470][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.689361][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.693843][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.697078][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.700874][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.707430][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.711285][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.715890][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.720608][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.725108][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.729372][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.735013][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.739169][ T6842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.743508][ T6842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.748636][ T6842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.753367][ T6842] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 311.758024][ T6842] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 311.761694][ T6842] usb 6-1: Product: syz [ 311.763573][ T6842] usb 6-1: Manufacturer: syz [ 311.766495][ T6842] usb 6-1: SerialNumber: syz [ 311.771020][ T6842] usb 6-1: config 0 descriptor?? [ 311.780408][ T6842] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 312.055929][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 312.061130][ T6842] usb 6-1: USB disconnect, device number 17 [ 312.068929][ T6842] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 312.154546][ T834] ipvlan2: entered allmulticast mode [ 312.156859][ T834] batadv_slave_1: entered allmulticast mode [ 312.161039][ T834] batman_adv: batadv0: Adding interface: ipvlan2 [ 312.164990][ T834] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.175494][ T834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.180027][ T834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.184662][ T834] batman_adv: batadv0: Interface activated: ipvlan2 [ 312.608508][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 312.608525][ T40] audit: type=1400 audit(2000000307.582:31218): avc: denied { watch } for pid=867 comm="syz.0.12939" path="/3472/file0" dev="tmpfs" ino=17512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.858666][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.920417][ T40] audit: type=1400 audit(2000000307.872:31219): avc: denied { execute } for pid=878 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 312.930465][ T40] audit: type=1400 audit(2000000307.882:31220): avc: denied { execute_no_trans } for pid=878 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 312.947760][ T40] audit: type=1400 audit(2000000307.900:31221): avc: denied { read } for pid=879 comm="syz.1.12946" dev="nsfs" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 312.957438][ T40] audit: type=1400 audit(2000000307.900:31222): avc: denied { open } for pid=879 comm="syz.1.12946" path="net:[4026533157]" dev="nsfs" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 312.959512][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.967622][ T40] audit: type=1400 audit(2000000307.900:31223): avc: denied { create } for pid=879 comm="syz.1.12946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.967664][ T40] audit: type=1400 audit(2000000307.900:31224): avc: denied { create } for pid=880 comm="syz.0.12945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.967699][ T40] audit: type=1400 audit(2000000307.900:31225): avc: denied { bind } for pid=879 comm="syz.1.12946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.998433][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.998534][ T40] audit: type=1400 audit(2000000307.900:31226): avc: denied { listen } for pid=879 comm="syz.1.12946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.002756][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.009985][ T40] audit: type=1400 audit(2000000307.900:31227): avc: denied { setopt } for pid=880 comm="syz.0.12945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.017505][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.024641][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.028233][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.058163][ T883] xfrm0 speed is unknown, defaulting to 1000 [ 313.100016][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.203737][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.215218][ T883] chnl_net:caif_netlink_parms(): no params data found [ 313.285544][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.294437][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.299350][ T883] bridge_slave_0: entered allmulticast mode [ 313.302191][ T883] bridge_slave_0: entered promiscuous mode [ 313.305530][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.307945][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.310316][ T883] bridge_slave_1: entered allmulticast mode [ 313.313148][ T883] bridge_slave_1: entered promiscuous mode [ 313.327961][ T883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.352897][ T883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.378328][ T883] team0: Port device team_slave_0 added [ 313.382303][ T883] team0: Port device team_slave_1 added [ 313.402579][ T883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.404976][ T883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.413378][ T883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.430497][ T883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.433032][ T883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.441915][ T883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.450624][ T13] bridge_slave_1: left allmulticast mode [ 313.452563][ T13] bridge_slave_1: left promiscuous mode [ 313.454456][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.460409][ T13] bridge_slave_0: left allmulticast mode [ 313.462248][ T13] bridge_slave_0: left promiscuous mode [ 313.464177][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.670669][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.675095][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.678927][ T13] bond0 (unregistering): Released all slaves [ 313.716036][ T883] hsr_slave_0: entered promiscuous mode [ 313.719462][ T883] hsr_slave_1: entered promiscuous mode [ 313.722998][ T883] debugfs: 'hsr0' already exists in 'hsr' [ 313.725626][ T883] Cannot create hsr debugfs directory [ 313.981746][ T913] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 314.077831][ T928] __nla_validate_parse: 4 callbacks suppressed [ 314.077842][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12961'. [ 314.085038][ T13] hsr_slave_0: left promiscuous mode [ 314.087696][ T13] hsr_slave_1: left promiscuous mode [ 314.090101][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.092591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.095492][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.100204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.103213][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 314.105463][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 314.112236][ T13] veth1_macvtap: left promiscuous mode [ 314.114071][ T13] veth0_macvtap: left promiscuous mode [ 314.115907][ T13] veth1_vlan: left promiscuous mode [ 314.117675][ T13] veth0_vlan: left promiscuous mode [ 314.143509][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12963'. [ 314.275694][ T13] team0 (unregistering): Port device team_slave_1 removed [ 314.283098][ T13] team0 (unregistering): Port device team_slave_0 removed [ 314.312806][ T932] overlayfs: invalid origin (0000) [ 314.458081][ T943] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 314.470562][ T943] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 314.830811][ T883] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.836378][ T883] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.840871][ T883] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.846942][ T883] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.907925][ T883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.922614][ T883] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.930460][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.933635][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.945310][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.948486][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.084219][ T883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.159595][ T1024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12987'. [ 315.176370][ T5287] Bluetooth: hci0: command tx timeout [ 315.255620][ T883] veth0_vlan: entered promiscuous mode [ 315.266086][ T883] veth1_vlan: entered promiscuous mode [ 315.297624][ T883] veth0_macvtap: entered promiscuous mode [ 315.302003][ T883] veth1_macvtap: entered promiscuous mode [ 315.318323][ T883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.327611][ T883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.334855][ T449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.337964][ T449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.341817][ T449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.344846][ T449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.391477][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.394628][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.417432][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.419993][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.520221][ T1050] kAFS: unable to lookup cell '(' [ 315.528978][ T1050] kAFS: unable to lookup cell '(,cL' [ 315.777578][ T1079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13008'. [ 315.780803][ T1079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13008'. [ 316.004510][ T1099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13015'. [ 316.008343][ T1099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13015'. [ 316.406372][ T6232] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 316.445361][ T1135] dummy0: entered allmulticast mode [ 316.462547][ T1134] dummy0: left allmulticast mode [ 316.581544][ T1149] 9p: Unknown uid 00000000004294967295 [ 316.619305][ T1151] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 316.625400][ T1151] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 317.411773][ T5287] Bluetooth: hci0: command tx timeout [ 317.414159][ T6232] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 317.418148][ T6232] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 317.421430][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.425400][ T6232] Tainted: [L]=SOFTLOCKUP [ 317.426829][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.430417][ T6232] Workqueue: events l2cap_info_timeout [ 317.432397][ T6232] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 317.434426][ T6232] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 317.440919][ T6232] RSP: 0018:ffffc9000560f9f0 EFLAGS: 00010282 [ 317.442895][ T6232] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 317.445452][ T6232] RDX: 0000000000000000 RSI: ffffffff8957b881 RDI: dffffc000000004c [ 317.448003][ T6232] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 317.450588][ T6232] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957b881 [ 317.453096][ T6232] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 317.455879][ T6232] FS: 0000000000000000(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 317.458785][ T6232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.460966][ T6232] CR2: 00007f7f367e92f8 CR3: 0000000037af3000 CR4: 0000000000352ef0 [ 317.463874][ T6232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.466427][ T6232] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 317.468929][ T6232] Call Trace: [ 317.470037][ T6232] [ 317.471079][ T6232] __kasan_check_byte+0x13/0x50 [ 317.472983][ T6232] lock_acquire+0x148/0x380 [ 317.474936][ T6232] ? __pfx___cancel_work+0x10/0x10 [ 317.476872][ T6232] lock_sock_nested+0x41/0xf0 [ 317.478407][ T6232] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 317.480115][ T6232] l2cap_sock_ready_cb+0x43/0x1a0 [ 317.481825][ T6232] l2cap_conn_start+0x123/0xb40 [ 317.483458][ T6232] ? __pfx_l2cap_conn_start+0x10/0x10 [ 317.485241][ T6232] ? __pfx___mutex_lock+0x10/0x10 [ 317.487142][ T6232] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.488937][ T6232] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.490840][ T6232] l2cap_info_timeout+0x81/0xa0 [ 317.492579][ T6232] process_one_work+0xa23/0x19a0 [ 317.494294][ T6232] ? __pfx_process_one_work+0x10/0x10 [ 317.496072][ T6232] ? __pfx_l2cap_info_timeout+0x10/0x10 [ 317.497825][ T6232] worker_thread+0x5ef/0xe50 [ 317.499310][ T6232] ? __pfx_worker_thread+0x10/0x10 [ 317.501048][ T6232] ? kthread+0x13a/0x450 [ 317.502559][ T6232] ? __pfx_worker_thread+0x10/0x10 [ 317.504342][ T6232] kthread+0x370/0x450 [ 317.505724][ T6232] ? __pfx_kthread+0x10/0x10 [ 317.507243][ T6232] ret_from_fork+0x754/0xd80 [ 317.508772][ T6232] ? __pfx_ret_from_fork+0x10/0x10 [ 317.510447][ T6232] ? __switch_to+0x7b4/0x1120 [ 317.512030][ T6232] ? __pfx_kthread+0x10/0x10 [ 317.513564][ T6232] ret_from_fork_asm+0x1a/0x30 [ 317.515137][ T6232] [ 317.516170][ T6232] Modules linked in: [ 317.517833][ T6232] ---[ end trace 0000000000000000 ]--- [ 317.526654][ T6232] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 317.528851][ T6232] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 317.535035][ T6232] RSP: 0018:ffffc9000560f9f0 EFLAGS: 00010282 [ 317.537054][ T6232] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 317.539765][ T6232] RDX: 0000000000000000 RSI: ffffffff8957b881 RDI: dffffc000000004c [ 317.542569][ T6232] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 317.545148][ T6232] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957b881 [ 317.548222][ T6232] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 317.550821][ T6232] FS: 0000000000000000(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 317.553812][ T6232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.556036][ T6232] CR2: 00007f7f367e92f8 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 317.558967][ T6232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.561898][ T6232] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 317.564582][ T6232] Kernel panic - not syncing: Fatal exception [ 317.567270][ T6232] Kernel Offset: disabled [ 317.568551][ T6232] Rebooting in 86400 seconds..