last executing test programs: 932.561622ms ago: executing program 3 (id=3854): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 932.273753ms ago: executing program 3 (id=3855): connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @long}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 883.414891ms ago: executing program 3 (id=3856): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff000}, 0x28) r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) 883.252905ms ago: executing program 3 (id=3857): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) getpeername(r0, 0x0, &(0x7f0000000040)) 823.671353ms ago: executing program 3 (id=3858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000009980)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) 544.534995ms ago: executing program 0 (id=3862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x88b5}, @void, @eth={@remote, @random="30c0f5c446d6", @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "dd9107", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, 0x2, 0x8, 0x0, 0x0, 0xf, 0x4, 0x3, 0x9f, 0x2, 0x2, 0x4e22, 0x4e24}, 0x2, 0x3}}}}}}}}}, 0x5a) 384.630497ms ago: executing program 0 (id=3868): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r0, 0x0) 271.095578ms ago: executing program 1 (id=3872): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e000004e20000c907861020000"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 270.796418ms ago: executing program 0 (id=3873): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 267.525395ms ago: executing program 2 (id=3874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 222.981715ms ago: executing program 1 (id=3875): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1, 0x5e, 0xfffffff8) 222.695884ms ago: executing program 2 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x32}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x101}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 204.019614ms ago: executing program 1 (id=3877): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x23) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r1, 0x9}, 0x8) 183.726614ms ago: executing program 2 (id=3878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) 180.836072ms ago: executing program 0 (id=3879): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 128.204875ms ago: executing program 1 (id=3880): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 125.625302ms ago: executing program 0 (id=3881): sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x20000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 122.867407ms ago: executing program 1 (id=3882): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 100.723586ms ago: executing program 2 (id=3883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2f, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac}, 0x0, @random=0xf846, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x64}}, 0x0) 47.054234ms ago: executing program 0 (id=3884): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xa, 0x8000) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000001c0)={0x93b, 0xfffffffd, 0x1, 0x2}) 44.253511ms ago: executing program 1 (id=3885): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read(r0, &(0x7f0000000180)=""/179, 0xb3) 38.38627ms ago: executing program 2 (id=3886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) 3.483483ms ago: executing program 3 (id=3887): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xb, 0x100, @val=0x80}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x65fe, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 0s ago: executing program 2 (id=3888): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tributes in process `syz.2.1911'. [ 111.982619][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1911'. [ 112.054968][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'. [ 112.058611][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 112.061926][T10130] netem: incorrect gi model size [ 112.064145][T10130] netem: change failed [ 112.109608][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1923'. [ 112.226965][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1931'. [ 112.625754][ T5986] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.755667][ T831] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.785694][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 112.789237][ T5986] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 112.793147][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.801326][ T5986] pvrusb2: Hardware description: Terratec Grabster AV400 [ 112.804468][ T5986] pvrusb2: ********** [ 112.806369][ T5986] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 112.810682][ T5986] pvrusb2: Important functionality might not be entirely working. [ 112.813926][ T5986] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 112.820826][ T5986] pvrusb2: ********** [ 112.915650][ T831] usb 8-1: Using ep0 maxpacket: 16 [ 112.919679][ T831] usb 8-1: config 0 has no interfaces? [ 112.923098][ T831] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.927186][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.930703][ T831] usb 8-1: SerialNumber: syz [ 112.935051][ T831] usb 8-1: config 0 descriptor?? [ 113.002478][ T2492] pvrusb2: Invalid write control endpoint [ 113.036014][ T2492] pvrusb2: Invalid write control endpoint [ 113.038576][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 113.042157][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 113.044748][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 113.048394][ T2492] pvrusb2: Device being rendered inoperable [ 113.051227][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 113.054756][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 113.058995][ T2492] pvrusb2: Attached sub-driver cx25840 [ 113.061395][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 113.067449][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 113.140408][ T831] usb 8-1: USB disconnect, device number 9 [ 113.206664][T10196] pvrusb2: Killing an I2C write to 1 that is too large (desired=62 limit=61) [ 113.211227][ T5989] usb 5-1: USB disconnect, device number 10 [ 113.748305][T10228] netlink: 'syz.2.1962': attribute type 21 has an invalid length. [ 113.750928][T10228] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1962'. [ 113.754739][T10228] netlink: 'syz.2.1962': attribute type 21 has an invalid length. [ 113.757665][T10228] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1962'. [ 113.907677][T10251] kAFS: unable to lookup cell '(' [ 113.919817][T10251] kAFS: unable to lookup cell '(,cL' [ 113.921318][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 113.925691][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 114.335644][T10296] input: syz0 as /devices/virtual/input/input21 [ 114.688017][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 114.688033][ T40] audit: type=1400 audit(1773648183.595:457): avc: denied { add_name } for pid=10325 comm="syz.0.2008" name="file0" dev="9p" ino=71827909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.695613][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 114.700741][ T40] audit: type=1400 audit(1773648183.595:458): avc: denied { link } for pid=10325 comm="syz.0.2008" name="file0" dev="9p" ino=71827909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.713565][T10323] netlink: 'syz.2.2006': attribute type 32 has an invalid length. [ 114.727534][T10323] bond1: Setting coupled_control to off (0) [ 114.815709][ T5986] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.892822][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.895827][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.899154][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.902061][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 114.905715][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 114.906836][ T9155] bridge0: port 3(syz_tun) entered disabled state [ 114.910387][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.914995][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.920483][ T34] usb 8-1: Product: syz [ 114.921930][ T34] usb 8-1: Manufacturer: syz [ 114.926257][ T9155] syz_tun (unregistering): left allmulticast mode [ 114.929217][ T9155] syz_tun (unregistering): left promiscuous mode [ 114.929891][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 114.932107][ T9155] bridge0: port 3(syz_tun) entered disabled state [ 114.933775][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 114.934921][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 114.942040][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 114.975643][ T5986] usb 6-1: Using ep0 maxpacket: 8 [ 114.979987][ T5986] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 114.983640][ T5986] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.989031][ T5986] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.993321][ T5986] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.998635][ T5986] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.004521][ T5986] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.008704][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.081674][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.133383][ T40] audit: type=1400 audit(1773648184.035:459): avc: denied { read write } for pid=10309 comm="syz.3.2001" name="cdc-wdm0" dev="devtmpfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 115.141199][ T40] audit: type=1400 audit(1773648184.035:460): avc: denied { open } for pid=10309 comm="syz.3.2001" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 115.165070][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.165702][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 115.188824][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 115.188992][ T6021] usb 8-1: USB disconnect, device number 10 [ 115.191871][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 115.196465][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 115.220359][ T5986] usb 6-1: GET_CAPABILITIES returned 0 [ 115.222308][ T5986] usbtmc 6-1:16.0: can't read capabilities [ 115.244990][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.315578][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 115.318812][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 115.322481][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 115.326611][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 115.331657][ T34] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 115.334726][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.337772][ T34] usb 5-1: Product: syz [ 115.339191][ T34] usb 5-1: Manufacturer: syz [ 115.340712][ T34] usb 5-1: SerialNumber: syz [ 115.341005][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.346783][ T34] usb 5-1: config 0 descriptor?? [ 115.354665][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22 [ 115.425675][ T6022] usb 6-1: USB disconnect, device number 10 [ 115.468255][ T46] bridge_slave_1: left allmulticast mode [ 115.470175][ T46] bridge_slave_1: left promiscuous mode [ 115.472236][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.477927][ T46] bridge_slave_0: left allmulticast mode [ 115.480045][ T46] bridge_slave_0: left promiscuous mode [ 115.482492][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.561683][ T5629] usb 5-1: USB disconnect, device number 11 [ 115.562368][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 115.574509][ T46] gretap0 (unregistering): left promiscuous mode [ 115.748265][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.754031][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.759204][ T46] bond0 (unregistering): Released all slaves [ 115.765970][ T46] bond1 (unregistering): Released all slaves [ 115.871092][ T46] tipc: Disabling bearer [ 115.876794][ T46] tipc: Disabling bearer [ 115.879787][ T46] tipc: Left network mode [ 116.012870][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.019414][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.022283][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.025241][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.039810][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.145674][ T46] veth0_to_team: left promiscuous mode [ 116.152105][ T46] hsr_slave_0: left promiscuous mode [ 116.154569][ T46] hsr_slave_1: left promiscuous mode [ 116.159180][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.161669][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.166118][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.169102][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.172272][ T46] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 116.174885][ T46] batman_adv: batadv0: Removing interface: ipvlan2 [ 116.182692][ T46] veth1_macvtap: left promiscuous mode [ 116.184473][ T46] veth0_macvtap: left promiscuous mode [ 116.186981][ T46] veth1_vlan: left promiscuous mode [ 116.188737][ T46] veth0_vlan: left promiscuous mode [ 116.312572][ T46] team0 (unregistering): Port device team_slave_0 removed [ 116.425273][T10351] chnl_net:caif_netlink_parms(): no params data found [ 116.499986][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.502710][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.512720][T10351] bridge_slave_0: entered allmulticast mode [ 116.516870][T10351] bridge_slave_0: entered promiscuous mode [ 116.521580][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.524696][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.530930][T10351] bridge_slave_1: entered allmulticast mode [ 116.533937][T10351] bridge_slave_1: entered promiscuous mode [ 116.570797][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.576715][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.602927][T10351] team0: Port device team_slave_0 added [ 116.607875][T10351] team0: Port device team_slave_1 added [ 116.625083][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.628156][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.629830][ T40] audit: type=1400 audit(1773648185.535:461): avc: denied { remount } for pid=10402 comm="syz.0.2031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.638699][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.648693][ T40] audit: type=1400 audit(1773648185.555:462): avc: denied { setopt } for pid=10404 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.649315][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.654391][ T40] audit: type=1400 audit(1773648185.555:463): avc: denied { connect } for pid=10404 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.657949][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.676792][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.683693][ T40] audit: type=1400 audit(1773648185.585:464): avc: denied { write } for pid=10404 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.707569][T10351] hsr_slave_0: entered promiscuous mode [ 116.710761][T10351] hsr_slave_1: entered promiscuous mode [ 116.723493][T10409] binder: BC_ACQUIRE_RESULT not supported [ 116.727551][T10409] binder: 10408:10409 ioctl c0306201 2000000001c0 returned -22 [ 117.270297][T10351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.276110][ T6002] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.280741][T10351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.287007][T10351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.292065][T10351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.333025][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.342849][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.348517][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.350968][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.357864][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.361038][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.400496][T10483] __nla_validate_parse: 4 callbacks suppressed [ 117.400507][T10483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'. [ 117.427516][ T6002] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 117.431964][ T6002] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 117.436307][ T6002] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.440201][ T6002] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.443188][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.446185][ T6002] usb 5-1: Product: syz [ 117.447586][ T6002] usb 5-1: Manufacturer: syz [ 117.449139][ T6002] usb 5-1: SerialNumber: syz [ 117.452333][ T6002] usb 5-1: config 0 descriptor?? [ 117.460608][ T6002] usb 5-1: selecting invalid altsetting 0 [ 117.489645][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.506547][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2055'. [ 117.517253][T10351] veth0_vlan: entered promiscuous mode [ 117.522179][T10351] veth1_vlan: entered promiscuous mode [ 117.536539][ T59] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 117.537739][T10351] veth0_macvtap: entered promiscuous mode [ 117.543470][T10351] veth1_macvtap: entered promiscuous mode [ 117.551458][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.559196][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.566836][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.574316][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.578926][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.582618][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.626781][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.630274][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.652074][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.658897][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.679276][ T40] audit: type=1400 audit(1773648186.585:465): avc: denied { mounton } for pid=10351 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.693613][ T40] audit: type=1400 audit(1773648186.595:466): avc: denied { mounton } for pid=10351 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 117.694824][ T5986] usb 5-1: USB disconnect, device number 12 [ 117.710781][ T59] usb 8-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 117.715760][ T59] usb 8-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 117.723615][ T59] usb 8-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 117.729860][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.733698][ T59] usb 8-1: Product: syz [ 117.737119][ T59] usb 8-1: Manufacturer: syz [ 117.739299][ T59] usb 8-1: SerialNumber: syz [ 117.948418][ T5989] usb 8-1: USB disconnect, device number 11 [ 118.088719][T10528] sock: sock_set_timeout: `syz.2.2072' (pid 10528) tries to set negative timeout [ 118.105849][ T5941] Bluetooth: hci1: command tx timeout [ 118.296537][ T6022] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 118.302190][T10545] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.370334][T10551] tipc: Started in network mode [ 118.372148][T10551] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.379606][T10551] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 118.383352][T10551] tipc: Enabled bearer , priority 10 [ 118.446309][ T6022] usb 6-1: Using ep0 maxpacket: 32 [ 118.449975][ T6022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 118.453574][ T6022] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 118.457773][ T6022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 118.463394][ T6022] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 118.466630][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.469270][ T6022] usb 6-1: Product: syz [ 118.470676][ T6022] usb 6-1: Manufacturer: syz [ 118.472509][ T6022] usb 6-1: SerialNumber: syz [ 118.479475][ T6022] usb 6-1: config 0 descriptor?? [ 118.484614][ T6022] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 118.512211][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 118.524383][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 118.541459][T10560] Attempt to restore checkpoint with obsolete wellknown handles [ 118.647311][T10573] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2092'. [ 118.694429][ T50] usb 6-1: USB disconnect, device number 11 [ 118.694526][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 118.775423][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 118.969333][T10601] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 119.226144][ T5989] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 119.377694][ T5986] tipc: Node number set to 1 [ 119.395750][ T5989] usb 7-1: Using ep0 maxpacket: 8 [ 119.398800][ T5989] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.402670][ T5989] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.407330][ T5989] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.411585][ T5989] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.417539][ T5989] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.421400][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.435678][ T6021] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 119.595754][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 119.598871][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.602695][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.606079][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.609252][ T6021] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.613383][ T6021] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.616501][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.641271][ T5989] usb 7-1: GET_CAPABILITIES returned 0 [ 119.644659][ T5989] usbtmc 7-1:16.0: can't read capabilities [ 119.835947][ T6021] usb 5-1: GET_CAPABILITIES returned 0 [ 119.837757][ T6021] usbtmc 5-1:16.0: can't read capabilities [ 119.845279][ T5629] usb 7-1: USB disconnect, device number 4 [ 120.037798][ T5629] usb 5-1: USB disconnect, device number 13 [ 120.059337][T10640] block nbd1: not configured, cannot reconfigure [ 120.103470][T10644] batadv_slave_1: entered promiscuous mode [ 120.113529][T10643] batadv_slave_1: left promiscuous mode [ 120.175706][ T5941] Bluetooth: hci1: command tx timeout [ 120.416708][T10664] sp0: Synchronizing with TNC [ 120.493664][T10672] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2139'. [ 120.635187][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 120.635203][ T40] audit: type=1400 audit(1773648189.535:477): avc: denied { ioctl } for pid=10686 comm="syz.1.2146" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.796172][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 120.811008][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 120.826304][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 120.828828][T10707] use of bytesused == 0 is deprecated and will be removed in the future, [ 120.833377][T10707] use the actual size instead. [ 120.995591][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 121.035620][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 121.155606][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 121.159048][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 121.161694][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.165181][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.168770][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.172984][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 121.176711][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.179624][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.182301][ T10] usb 8-1: Product: syz [ 121.183665][ T10] usb 8-1: Manufacturer: syz [ 121.185186][ T10] usb 8-1: SerialNumber: syz [ 121.189398][ T10] usb 8-1: config 0 descriptor?? [ 121.192823][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.195623][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 121.196654][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.199726][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.209288][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.212113][ T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.214576][ T50] usb 5-1: Product: syz [ 121.216160][ T50] usb 5-1: Manufacturer: syz [ 121.217684][ T50] usb 5-1: SerialNumber: syz [ 121.221637][ T50] usb 5-1: config 0 descriptor?? [ 121.223888][T10701] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 121.447527][T10697] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 121.447559][ T5989] usb 8-1: USB disconnect, device number 12 [ 121.449922][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 121.454229][ T5989] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 121.456893][ T5629] usb 5-1: USB disconnect, device number 14 [ 122.265692][ T5941] Bluetooth: hci1: command tx timeout [ 123.036629][ T40] audit: type=1400 audit(1773648191.935:478): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 124.335957][ T5941] Bluetooth: hci1: command tx timeout [ 130.850331][T10741] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.854013][T10739] erspan0: entered promiscuous mode [ 131.520954][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 131.524360][T10780] ip_vti0: Master is either lo or non-ether device [ 131.629069][ T40] audit: type=1400 audit(1773648200.535:479): avc: denied { mounton } for pid=10796 comm="syz.2.2185" path="/38/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.629509][T10798] overlayfs: workdir and upperdir must reside under the same mount [ 131.672539][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.676127][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.678646][T10797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.717598][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 131.755699][T10813] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 131.805899][ T40] audit: type=1326 audit(1773648200.705:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.816811][ T40] audit: type=1326 audit(1773648200.705:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.829139][ T40] audit: type=1326 audit(1773648200.705:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.846189][ T40] audit: type=1326 audit(1773648200.705:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.853871][ T40] audit: type=1326 audit(1773648200.705:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.863750][ T40] audit: type=1326 audit(1773648200.705:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.871320][ T40] audit: type=1326 audit(1773648200.705:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.878766][ T40] audit: type=1326 audit(1773648200.705:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.886133][ T40] audit: type=1326 audit(1773648200.705:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.0.2189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x7fc00000 [ 131.947092][ T10] hid-generic 0005:4C4A:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 132.133410][T10860] hugetlbfs: syz.0.2211 (10860): Using mlock ulimits for SHM_HUGETLB is obsolete [ 132.385590][ T6008] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 132.465623][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 132.535623][ T6008] usb 8-1: Using ep0 maxpacket: 16 [ 132.539019][ T6008] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 132.541767][ T6008] usb 8-1: config 0 has no interface number 0 [ 132.543868][ T6008] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.547723][ T6008] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.552219][ T6008] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.555208][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.558258][ T6008] usb 8-1: Product: syz [ 132.559744][ T6008] usb 8-1: SerialNumber: syz [ 132.562562][ T6008] usb 8-1: config 0 descriptor?? [ 132.566157][ T5989] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.569084][ T6008] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 132.572649][ T6008] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input24 [ 132.617106][ T10] usb 6-1: config 0 has no interfaces? [ 132.621838][ T10] usb 6-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.3e [ 132.626114][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.629759][ T10] usb 6-1: Product: syz [ 132.631804][ T10] usb 6-1: Manufacturer: syz [ 132.633980][ T10] usb 6-1: SerialNumber: syz [ 132.640063][ T10] usb 6-1: config 0 descriptor?? [ 132.718732][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.723333][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.726681][ T5989] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.729594][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.733780][ T5989] usb 5-1: config 0 descriptor?? [ 132.773951][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.777469][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.779929][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.782361][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.784723][ T6008] usb 8-1: USB disconnect, device number 13 [ 132.786876][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.786893][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 132.795061][ T6008] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 132.850047][ T59] usb 6-1: USB disconnect, device number 12 [ 132.945453][ T5989] usbhid 5-1:0.0: can't add hid device: -71 [ 132.948111][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.952505][ T5989] usb 5-1: USB disconnect, device number 15 [ 133.181419][T10876] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 133.183828][T10876] dvmrp1: ignored: set checksum disabled [ 133.299734][T10878] Failed to get privilege flags for destination (handle=0x2:0x156) [ 133.417833][T10891] kAFS: unable to lookup cell '(,cL' [ 133.420649][T10891] kAFS: unable to lookup cell '(,cL' [ 133.574652][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2230'. [ 133.579091][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 133.582607][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 133.701350][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 133.718473][T10910] vlan2: entered allmulticast mode [ 133.720810][T10910] vlan0: entered allmulticast mode [ 133.723094][T10910] veth0_vlan: entered allmulticast mode [ 133.899255][T10928] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2244'. [ 133.901323][T10930] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2243'. [ 134.014256][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.024227][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.029264][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.031758][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.034210][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.052506][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.054987][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.058371][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.061128][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.063656][ T6021] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 134.075882][ T6021] hid-generic 0006:0004:0009.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 134.080668][T10950] (syz.0.2254,10950,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 134.118889][T10955] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2256'. [ 134.129506][T10951] fido_id[10951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.601142][T10990] dvmrp1: entered allmulticast mode [ 134.607636][T10989] dvmrp1: left allmulticast mode [ 134.701874][T10992] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 134.704469][T10992] netlink: 'syz.1.2274': attribute type 2 has an invalid length. [ 134.707942][T10992] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 134.711239][T10992] netlink: 'syz.1.2274': attribute type 3 has an invalid length. [ 134.714490][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 134.982155][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 135.538180][ T221] wlan1: Trigger new scan to find an IBSS to join [ 135.591101][T11094] input: syz1 as /devices/virtual/input/input25 [ 135.626606][T11096] blkio.reset_stats is deprecated [ 135.665267][T11102] loop4: detected capacity change from 0 to 524287936 [ 135.842044][T11122] macsec1: entered promiscuous mode [ 135.843990][T11122] macsec1: entered allmulticast mode [ 136.067679][T11147] can0: slcan on ttyS3. [ 136.136171][T11147] can0 (unregistered): slcan off ttyS3. [ 136.733918][T11231] __nla_validate_parse: 5 callbacks suppressed [ 136.733936][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 136.794325][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 136.943642][T11271] bridge_slave_1: left allmulticast mode [ 136.946499][T11271] bridge_slave_1: left promiscuous mode [ 136.949091][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.961297][T11271] bridge_slave_0: left allmulticast mode [ 136.963185][T11271] bridge_slave_0: left promiscuous mode [ 136.965190][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.967212][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 136.967221][ T40] audit: type=1400 audit(1773648461.878:526): avc: denied { ioctl } for pid=11272 comm="syz.0.2400" path="socket:[30585]" dev="sockfs" ino=30585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.038795][T11279] loop1: detected capacity change from 0 to 7 [ 137.044121][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.048609][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.052281][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.056301][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.059805][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.062945][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.066075][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.070723][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.074157][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.077428][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.080230][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.084089][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.087990][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.091346][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.094070][ T6204] ldm_validate_partition_table(): Disk read failed. [ 137.096888][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.101351][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.104958][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.109225][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.112919][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.116629][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 137.119881][ T6204] Dev loop1: unable to read RDB block 0 [ 137.122268][ T6204] loop1: unable to read partition table [ 137.124674][ T6204] loop1: partition table beyond EOD, truncated [ 137.140387][T11279] ldm_validate_partition_table(): Disk read failed. [ 137.143242][T11279] Dev loop1: unable to read RDB block 0 [ 137.146310][T11279] loop1: unable to read partition table [ 137.148427][T11279] loop1: partition table beyond EOD, truncated [ 137.150799][T11279] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 137.305427][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 137.308440][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'. [ 137.312291][T11297] netlink: 'syz.2.2411': attribute type 19 has an invalid length. [ 137.317979][T11294] mkiss: ax0: crc mode is auto. [ 137.432050][T11310] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.558919][T11323] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2423'. [ 137.673288][T11334] macvtap1: entered promiscuous mode [ 137.675882][T11334] macvtap1: entered allmulticast mode [ 137.678736][T11334] veth1_vlan: entered allmulticast mode [ 137.698204][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 137.698265][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.704223][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.734771][ T40] audit: type=1400 audit(1773648462.638:527): avc: denied { shutdown } for pid=11337 comm="syz.1.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.857251][ T10] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 137.860091][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.863444][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.869074][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.872983][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.880215][T11348] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 137.884396][T11348] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 137.889019][ T10] usb 8-1: Product: syz [ 137.890967][ T10] usb 8-1: Manufacturer: syz [ 137.893140][ T10] usb 8-1: SerialNumber: syz [ 137.899679][ T10] usb 8-1: config 0 descriptor?? [ 137.904923][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 137.908476][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 137.914295][ T10] usb 8-1: selecting invalid altsetting 0 [ 138.211986][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 138.216492][T11372] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2445'. [ 138.295896][ T40] audit: type=1400 audit(1773648463.208:528): avc: denied { create } for pid=11376 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.304407][ T40] audit: type=1400 audit(1773648463.208:529): avc: denied { getopt } for pid=11376 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.313363][T11378] bpf: Bad value for 'uid' [ 138.436676][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 138.472474][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 138.576509][T11413] netlink: 'syz.2.2464': attribute type 3 has an invalid length. [ 138.580422][ T129] wlan1: Trigger new scan to find an IBSS to join [ 138.805709][T11312] usb 8-1: reset high-speed USB device number 14 using dummy_hcd [ 138.856457][ T40] audit: type=1400 audit(1773648463.768:530): avc: denied { mounton } for pid=11428 comm="syz.1.2472" path="/567/file0" dev="tmpfs" ino=2883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 138.935234][ T40] audit: type=1400 audit(1773648463.838:531): avc: denied { read } for pid=11434 comm="syz.0.2473" path="socket:[35884]" dev="sockfs" ino=35884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.970421][ T40] audit: type=1326 audit(1773648463.878:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.2474" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f307a19c799 code=0x0 [ 138.977544][T11312] usb 8-1: device firmware changed [ 138.984860][ T5986] usb 8-1: USB disconnect, device number 14 [ 139.135591][ T5986] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 139.287701][ T5986] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 139.290397][ T5986] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.293657][ T5986] usb 8-1: config 0 interface 0 has no altsetting 0 [ 139.298200][ T5986] usb 8-1: string descriptor 0 read error: -22 [ 139.300323][ T5986] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.303440][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.307549][ T5986] usb 8-1: config 0 descriptor?? [ 139.310518][ T5986] hub 8-1:0.0: bad descriptor, ignoring hub [ 139.312521][ T5986] hub 8-1:0.0: probe with driver hub failed with error -5 [ 139.316991][ T5986] usb 8-1: selecting invalid altsetting 0 [ 139.496152][ T221] wlan1: Creating new IBSS network, BSSID fe:e0:09:5b:9a:4f [ 139.626413][ T5986] usb 8-1: USB disconnect, device number 15 [ 139.847698][T11443] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2476'. [ 139.986102][ T6022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.071499][T11453] option changes via remount are deprecated (pid=11452 comm=syz.3.2481) [ 140.074247][T11453] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 "" [ 141.079249][ T40] audit: type=1400 audit(1773648465.988:533): avc: denied { shutdown } for pid=11473 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.203411][ T40] audit: type=1400 audit(1773648466.108:534): avc: denied { setopt } for pid=11486 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.210310][ T40] audit: type=1400 audit(1773648466.108:535): avc: denied { read } for pid=11487 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.295614][ T59] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 141.445587][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 141.449311][ T59] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 141.453454][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.466525][ T59] pvrusb2: Hardware description: Terratec Grabster AV400 [ 141.470380][ T59] pvrusb2: ********** [ 141.472515][ T59] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 141.477014][ T59] pvrusb2: Important functionality might not be entirely working. [ 141.479554][ T59] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 141.485587][ T59] pvrusb2: ********** [ 141.669894][ T2492] pvrusb2: Invalid write control endpoint [ 141.715952][ T2492] pvrusb2: Invalid write control endpoint [ 141.718569][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 141.727267][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 141.730663][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 141.734994][ T2492] pvrusb2: Device being rendered inoperable [ 141.740778][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 141.744307][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 141.756632][ T2492] pvrusb2: Attached sub-driver cx25840 [ 141.759095][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 141.763294][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 141.875050][T11469] pvrusb2: Attempted to execute control transfer when device not ok [ 141.879595][ T59] usb 6-1: USB disconnect, device number 13 [ 142.016594][ T6022] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.165583][ T6022] usb 5-1: Using ep0 maxpacket: 32 [ 142.168533][ T6022] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.171142][ T6022] usb 5-1: config 0 has no interface number 0 [ 142.176984][ T6022] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 142.180030][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.182662][ T6022] usb 5-1: Product: syz [ 142.184045][ T6022] usb 5-1: Manufacturer: syz [ 142.185879][ T6022] usb 5-1: SerialNumber: syz [ 142.189497][ T6022] usb 5-1: config 0 descriptor?? [ 142.192945][ T6022] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 142.195966][ T6022] usb 5-1: selecting invalid altsetting 1 [ 142.197861][ T6022] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 142.202042][ T6022] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.205317][T11558] __nla_validate_parse: 4 callbacks suppressed [ 142.205327][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 142.205459][ T6022] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 142.209708][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'. [ 142.217371][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 142.217564][ T6022] usb 5-1: media controller created [ 142.227644][ T6022] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.384923][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 142.419371][ T6022] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 142.422710][ T6022] zl10353_read_register: readreg error (reg=127, ret==-32) [ 142.538699][T11583] team0: No ports can be present during mode change [ 142.696160][T11595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2544'. [ 142.714446][T11597] : renamed from vlan0 (while UP) [ 142.900919][T11618] dummy0: entered allmulticast mode [ 142.904314][T11617] dummy0: left allmulticast mode [ 143.098014][T11630] loop5: detected capacity change from 0 to 7 [ 143.139486][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 143.139497][ T40] audit: type=1400 audit(1773648468.048:541): avc: denied { watch watch_reads } for pid=11633 comm="syz.2.2561" path="pipe:[28292]" dev="pipefs" ino=28292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.240842][ T6431] Dev loop5: unable to read RDB block 7 [ 143.242789][ T6431] loop5: unable to read partition table [ 143.243313][ C0] blk_print_req_error: 25 callbacks suppressed [ 143.243327][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 143.244838][ T6431] loop5: partition table beyond EOD, [ 143.247269][ C0] buffer_io_error: 25 callbacks suppressed [ 143.247279][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 143.257079][ T6431] truncated [ 143.387554][T11630] Dev loop5: unable to read RDB block 7 [ 143.389498][T11630] loop5: unable to read partition table [ 143.391476][T11630] loop5: partition table beyond EOD, truncated [ 143.403905][T11630] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 143.463203][T11530] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 143.469549][ T6022] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 143.503389][ T6022] usb 5-1: USB disconnect, device number 16 [ 143.529457][T11654] 9p: Invalid uid '0x00000000ffffffff' [ 143.530945][ T40] audit: type=1400 audit(1773648468.438:542): avc: denied { listen } for pid=11653 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.770162][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 144.037582][ T40] audit: type=1400 audit(1773648468.948:543): avc: denied { read } for pid=11695 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.085346][T11702] openvswitch: netlink: IP tunnel dst address not specified [ 144.120621][T11704] overlayfs: missing 'workdir' [ 144.304475][T11725] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.396643][T11741] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 144.434392][ T40] audit: type=1400 audit(1773648469.338:544): avc: denied { ioctl } for pid=11745 comm="syz.0.2616" path="socket:[36257]" dev="sockfs" ino=36257 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.448242][ T40] audit: type=1400 audit(1773648469.358:545): avc: denied { ioctl } for pid=11745 comm="syz.0.2616" path="socket:[36258]" dev="sockfs" ino=36258 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 144.544540][ T40] audit: type=1400 audit(1773648469.448:546): avc: denied { bpf } for pid=11760 comm="syz.3.2623" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.574035][ T40] audit: type=1400 audit(1773648469.448:547): avc: denied { perfmon } for pid=11760 comm="syz.3.2623" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.582900][ T40] audit: type=1400 audit(1773648469.448:548): avc: denied { ioctl } for pid=11762 comm="syz.2.2624" path="socket:[35591]" dev="sockfs" ino=35591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.181427][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.185283][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.188886][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.194297][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.198402][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.282747][ T40] audit: type=1400 audit(1773648470.188:549): avc: denied { module_request } for pid=11793 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 145.308410][T11793] chnl_net:caif_netlink_parms(): no params data found [ 145.354021][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.358032][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.361424][T11793] bridge_slave_0: entered allmulticast mode [ 145.369062][T11793] bridge_slave_0: entered promiscuous mode [ 145.374294][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.377875][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.381156][T11793] bridge_slave_1: entered allmulticast mode [ 145.385146][T11793] bridge_slave_1: entered promiscuous mode [ 145.412533][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.419940][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.447298][T11793] team0: Port device team_slave_0 added [ 145.452050][T11793] team0: Port device team_slave_1 added [ 145.476362][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.479433][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.490862][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.497323][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.500329][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.512037][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.554781][T11793] hsr_slave_0: entered promiscuous mode [ 145.558123][T11793] hsr_slave_1: entered promiscuous mode [ 145.561126][T11793] debugfs: 'hsr0' already exists in 'hsr' [ 145.563698][T11793] Cannot create hsr debugfs directory [ 145.660943][T11793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739663][T11793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.796136][T11793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.845604][ T5629] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 145.878354][T11793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.879529][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2649'. [ 145.984819][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2652'. [ 145.999124][ T5629] usb 8-1: Using ep0 maxpacket: 8 [ 146.005157][ T5629] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 146.011575][ T5629] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.029227][T11793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.032537][ T5629] pvrusb2: Hardware description: Terratec Grabster AV400 [ 146.034074][T11793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.035078][ T5629] pvrusb2: ********** [ 146.038744][ T5629] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 146.040045][T11793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.043131][ T5629] pvrusb2: Important functionality might not be entirely working. [ 146.050800][T11793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.053029][ T5629] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 146.057220][ T5629] pvrusb2: ********** [ 146.098919][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.109746][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.115781][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.118594][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.126324][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.129855][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.162826][T11793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.166310][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.237762][ T2492] pvrusb2: Invalid write control endpoint [ 146.266769][ T2492] pvrusb2: Invalid write control endpoint [ 146.268673][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 146.270974][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.272637][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 146.276599][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 146.279878][ T2492] pvrusb2: Device being rendered inoperable [ 146.281900][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 146.284205][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 146.288139][ T2492] pvrusb2: Attached sub-driver cx25840 [ 146.290018][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 146.290691][T11793] veth0_vlan: entered promiscuous mode [ 146.293351][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 146.301042][T11793] veth1_vlan: entered promiscuous mode [ 146.316204][T11793] veth0_macvtap: entered promiscuous mode [ 146.327670][T11793] veth1_macvtap: entered promiscuous mode [ 146.335124][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.341808][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.347985][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.351490][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.355287][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.359499][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.403302][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.406861][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.422881][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.427907][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.439653][T11821] pvrusb2: Attempted to execute control transfer when device not ok [ 146.445375][ T50] usb 8-1: USB disconnect, device number 16 [ 146.510990][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2660'. [ 147.082470][T11906] Bluetooth: MGMT ver 1.23 [ 147.107745][ T40] audit: type=1400 audit(1773648472.018:550): avc: denied { create } for pid=11907 comm="syz.1.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 147.143314][T11917] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2687'. [ 147.224187][ T5946] Bluetooth: hci0: command tx timeout [ 147.286661][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'. [ 147.586518][T11955] team0: Device gtp0 is of different type [ 147.675761][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 147.829155][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.833858][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 147.840628][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.845367][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 147.853282][ T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 147.859698][ T9] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 147.863258][ T9] usb 6-1: Product: syz [ 147.865647][ T9] usb 6-1: Manufacturer: syz [ 147.867693][ T9] usb 6-1: SerialNumber: syz [ 147.872413][ T9] usb 6-1: config 0 descriptor?? [ 147.875344][T11946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.925705][ T9] rc_core: IR keymap rc-imon-rsc not found [ 147.928189][ T9] Registered IR keymap rc-empty [ 147.932644][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 147.939585][ T9] input: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 148.087360][ T50] usb 6-1: USB disconnect, device number 14 [ 149.064370][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'. [ 149.068966][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'. [ 149.183843][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 149.183854][ T40] audit: type=1400 audit(1773648474.088:553): avc: denied { setattr } for pid=12108 comm="syz.2.2778" name="[kvm-gmem]" dev="guest_memfd" ino=38304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.295634][ T5946] Bluetooth: hci0: command tx timeout [ 149.304509][T12121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2782'. [ 149.385983][ T40] audit: type=1400 audit(1773648474.288:554): avc: denied { watch } for pid=12128 comm="syz.2.2786" path="/sys/power/sync_on_suspend" dev="sysfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.396616][ T40] audit: type=1400 audit(1773648474.288:555): avc: denied { watch_sb watch_reads } for pid=12128 comm="syz.2.2786" path="/sys/power/sync_on_suspend" dev="sysfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 149.516659][ T6022] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 149.665577][ T6022] usb 6-1: Using ep0 maxpacket: 8 [ 149.669665][ T6022] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 149.672966][ T6022] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.677213][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.681160][ T6022] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 149.684499][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 149.688864][ T6022] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.693143][ T6022] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.696345][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.702200][ T6022] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 149.711751][ T40] audit: type=1326 audit(1773648474.618:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2795" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2f379c799 code=0x0 [ 150.125715][T12176] loop5: detected capacity change from 0 to 7 [ 150.129880][ T6204] Dev loop5: unable to read RDB block 7 [ 150.131800][ T6204] loop5: AHDI p1 [ 150.133165][ T6204] loop5: partition table partially beyond EOD, truncated [ 150.145476][T12176] Dev loop5: unable to read RDB block 7 [ 150.147863][T12176] loop5: AHDI p1 [ 150.149259][T12176] loop5: partition table partially beyond EOD, truncated [ 150.326138][ T5989] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 150.487270][ T5989] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.491253][ T5989] usb 5-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 150.496401][ T5989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.500414][ T5989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 150.505097][ T5989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50742, setting to 1024 [ 150.512424][ T5989] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.516870][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.520316][ T5989] usb 5-1: Product: syz [ 150.522224][ T5989] usb 5-1: Manufacturer: syz [ 150.533453][T12171] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.538597][ T5989] cdc_wdm 5-1:1.0: skipping garbage [ 150.540965][ T5989] cdc_wdm 5-1:1.0: skipping garbage [ 150.558959][ T5989] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 150.561662][ T5989] cdc_wdm 5-1:1.0: Unknown control protocol [ 150.574015][T12192] erspan0: entered promiscuous mode [ 150.734941][ T40] audit: type=1400 audit(1773648475.638:557): avc: denied { remount } for pid=12209 comm="syz.2.2824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.751613][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.754511][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.757714][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.760659][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.763611][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.766540][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.775052][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.778023][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.781545][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.784354][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.787661][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.790564][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.793631][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.796576][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.799507][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.802420][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.805331][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.808234][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.811174][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 150.814078][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 150.936979][ T6022] usb 5-1: USB disconnect, device number 17 [ 151.003079][T12231] netem: change failed [ 151.375663][ T5946] Bluetooth: hci0: command tx timeout [ 151.634136][T12265] loop4: detected capacity change from 0 to 524287936 [ 151.762508][T12273] TCP: TCP_TX_DELAY enabled [ 151.915636][ T5940] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 151.999444][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2857'. [ 152.084123][ T5940] usb 8-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 152.087906][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 152.092488][ T5940] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.095839][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.098653][ T5940] usb 8-1: Product: syz [ 152.100073][ T5940] usb 8-1: Manufacturer: syz [ 152.101704][ T5940] usb 8-1: SerialNumber: syz [ 152.105631][ T5940] usb 8-1: config 0 descriptor?? [ 152.121198][T12269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 152.125980][ T5940] usb 8-1: selecting invalid altsetting 0 [ 152.264623][ T5989] usb 6-1: USB disconnect, device number 15 [ 152.339866][T12269] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 152.344735][ T6008] usb 8-1: USB disconnect, device number 17 [ 152.548289][T12326] Failed to get privilege flags for destination (handle=0x2:0x156) [ 153.073382][T12346] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2887'. [ 153.185397][T12361] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 153.250627][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'. [ 153.455984][ T5946] Bluetooth: hci0: command tx timeout [ 153.823692][T12390] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.831028][T12390] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 153.908548][ T40] audit: type=1400 audit(1773648478.818:558): avc: denied { connect } for pid=12393 comm="syz.0.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.076757][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 154.080166][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 154.106389][ T40] audit: type=1400 audit(1773648479.008:559): avc: denied { create } for pid=12416 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.112950][ T40] audit: type=1400 audit(1773648479.018:560): avc: denied { connect } for pid=12416 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.134667][ T40] audit: type=1400 audit(1773648479.038:561): avc: denied { name_connect } for pid=12417 comm="syz.0.2921" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 154.160392][ T40] audit: type=1400 audit(1773648479.068:562): avc: denied { read } for pid=12416 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.211323][ T40] audit: type=1400 audit(1773648479.118:563): avc: denied { write } for pid=12416 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.453646][T12436] netlink: 'syz.0.2928': attribute type 3 has an invalid length. [ 154.456311][T12436] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2928'. [ 154.735598][ T59] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 154.892892][ T59] usb 6-1: unable to get BOS descriptor or descriptor too short [ 154.896252][ T59] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 154.898924][ T59] usb 6-1: can't read configurations, error -71 [ 154.973635][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 154.976918][T12445] netlink: 'syz.0.2939': attribute type 30 has an invalid length. [ 154.987990][ T221] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.991255][ T221] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.995820][ T221] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.998844][ T221] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.001050][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 155.005131][T12445] netlink: 'syz.0.2939': attribute type 30 has an invalid length. [ 155.491443][T12457] loop6: detected capacity change from 0 to 524287999 [ 155.494893][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.500142][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.503517][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.507885][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.511307][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.514609][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.517899][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.521006][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.523514][ T6204] ldm_validate_partition_table(): Disk read failed. [ 155.526202][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.528895][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.531411][ T6204] Dev loop6: unable to read RDB block 0 [ 155.533875][ T6204] loop6: unable to read partition table [ 155.538395][T12457] ldm_validate_partition_table(): Disk read failed. [ 155.541549][T12457] Dev loop6: unable to read RDB block 0 [ 155.545630][T12457] loop6: unable to read partition table [ 155.547638][T12457] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 155.973812][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.237780][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2962'. [ 156.495840][ T5940] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 156.648417][ T5940] usb 6-1: config 0 has no interfaces? [ 156.650901][ T5940] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 156.654228][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.660132][ T5940] usb 6-1: config 0 descriptor?? [ 156.867755][ T5940] usb 6-1: USB disconnect, device number 18 [ 156.943670][T12529] loop6: detected capacity change from 0 to 524287999 [ 156.948990][ T6204] ldm_validate_partition_table(): Disk read failed. [ 156.951250][ T6204] Dev loop6: unable to read RDB block 0 [ 156.953158][ T6204] loop6: unable to read partition table [ 156.959099][T12529] ldm_validate_partition_table(): Disk read failed. [ 156.961317][T12529] Dev loop6: unable to read RDB block 0 [ 156.963184][T12529] loop6: unable to read partition table [ 156.967383][T12529] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 157.109803][ T40] audit: type=1400 audit(1773648482.018:564): avc: denied { attach_queue } for pid=12532 comm="syz.2.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.137455][ T6204] ldm_validate_partition_table(): Disk read failed. [ 157.140358][ T6204] Dev loop6: unable to read RDB block 0 [ 157.142610][ T6204] loop6: unable to read partition table [ 157.146726][T12529] ldm_validate_partition_table(): Disk read failed. [ 157.149434][T12529] Dev loop6: unable to read RDB block 0 [ 157.151838][T12529] loop6: unable to read partition table [ 157.158568][T12529] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 157.240746][ T40] audit: type=1400 audit(1773648482.148:565): avc: denied { write } for pid=12543 comm="syz.2.2978" name="file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.654168][T12589] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.724496][T12597] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 157.731902][T12597] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 157.742887][T12599] vivid-000: ================= START STATUS ================= [ 157.749675][T12599] vivid-000: Test Pattern: 75% Colorbar [ 157.752581][T12599] vivid-000: Fill Percentage of Frame: 100 [ 157.760761][T12599] vivid-000: Horizontal Movement: Move Left Fast [ 157.763946][T12599] vivid-000: Vertical Movement: No Movement [ 157.767445][T12599] vivid-000: OSD Text Mode: All [ 157.769673][T12599] vivid-000: Show Border: false [ 157.772456][T12599] vivid-000: Show Square: false [ 157.774644][T12599] vivid-000: Sensor Flipped Horizontally: false [ 157.777692][T12599] vivid-000: Sensor Flipped Vertically: false [ 157.780545][T12599] vivid-000: Insert SAV Code in Image: false [ 157.783312][T12599] vivid-000: Insert EAV Code in Image: false [ 157.787092][T12599] vivid-000: Insert Video Guard Band: false [ 157.789815][T12599] vivid-000: Reduced Framerate: false [ 157.791725][T12599] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 157.795324][T12599] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 157.805432][T12599] vivid-000: Enable Capture Cropping: true grabbed [ 157.811604][T12599] vivid-000: Enable Capture Composing: true grabbed [ 157.813873][T12599] vivid-000: Enable Capture Scaler: true grabbed [ 157.816422][T12599] vivid-000: Timestamp Source: End of Frame [ 157.818463][T12599] vivid-000: Colorspace: SMPTE 170M [ 157.820218][T12599] vivid-000: Transfer Function: Default [ 157.822098][T12599] vivid-000: Y'CbCr Encoding: Default [ 157.823903][T12599] vivid-000: HSV Encoding: Hue 0-179 [ 157.826382][T12599] vivid-000: Quantization: Default [ 157.828216][T12599] vivid-000: Apply Alpha To Red Only: false [ 157.830249][T12599] vivid-000: Standard Aspect Ratio: 4x3 [ 157.832344][T12599] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 157.836503][T12599] vivid-000: DV Timings: 640x480p59 inactive [ 157.839301][T12599] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 157.842595][T12599] vivid-000: Maximum EDID Blocks: 2 [ 157.844982][T12599] vivid-000: Limited RGB Range (16-235): false [ 157.848237][T12599] vivid-000: Rx RGB Quantization Range: Automatic [ 157.851136][T12599] vivid-000: Power Present: 0x00000001 [ 157.853672][T12599] tpg source WxH: 720x576 (Y'CbCr) [ 157.856928][T12599] tpg field: 4 [ 157.858454][T12599] tpg crop: (0,0)/720x576 [ 157.860675][T12599] tpg compose: (0,0)/720x576 [ 157.862704][T12599] tpg colorspace: 1 [ 157.864339][T12599] tpg transfer function: 0/1 [ 157.866730][T12599] tpg Y'CbCr encoding: 0/1 [ 157.869272][T12599] tpg quantization: 0/2 [ 157.871112][T12599] tpg RGB range: 0/2 [ 157.872948][T12599] vivid-000: ================== END STATUS ================== [ 157.932719][ T40] audit: type=1400 audit(1773648482.838:566): avc: denied { setopt } for pid=12617 comm="syz.3.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 157.977099][T12623] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 158.104794][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3021'. [ 158.216350][ T59] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 158.338024][T12657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3030'. [ 158.387063][ T59] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.390424][ T59] usb 6-1: config 0 has no interface number 0 [ 158.394674][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 158.399796][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 158.404351][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.413658][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.424830][ T59] usb 6-1: config 0 descriptor?? [ 158.429411][T12624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.440543][ T59] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 158.443345][T12667] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 158.522077][T12677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.656223][ T831] usb 6-1: USB disconnect, device number 19 [ 158.743297][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 158.854789][T12711] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 159.031403][T12723] input: syz1 as /devices/virtual/input/input29 [ 159.033709][T12723] input: failed to attach handler leds to device input29, error: -6 [ 159.217803][T12737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3064'. [ 159.495873][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 159.637915][T12759] vcan0: tx address claim with dlc 0 [ 159.645760][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 159.648723][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.652719][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.657098][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.660510][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.665123][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.668251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.879909][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 159.881803][ T10] usbtmc 5-1:16.0: can't read capabilities [ 160.082965][ T6021] usb 5-1: USB disconnect, device number 18 [ 160.245086][ T40] audit: type=1400 audit(1773648485.148:567): avc: denied { read } for pid=12776 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.296403][ T40] audit: type=1400 audit(1773648485.208:568): avc: denied { setopt } for pid=12776 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.764918][ T40] audit: type=1400 audit(1773648485.668:569): avc: denied { listen } for pid=12799 comm="syz.1.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.775403][ T40] audit: type=1400 audit(1773648485.678:570): avc: denied { accept } for pid=12799 comm="syz.1.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.097065][ T40] audit: type=1400 audit(1773648486.008:571): avc: denied { block_suspend } for pid=12836 comm="syz.1.3107" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.215812][ T5986] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 161.219680][ T40] audit: type=1400 audit(1773648486.128:572): avc: denied { bind } for pid=12846 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.377295][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.380600][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.383746][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 161.387740][ T5986] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.390706][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.396845][T12824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.402879][ T5986] hub 5-1:1.0: bad descriptor, ignoring hub [ 161.404908][ T5986] hub 5-1:1.0: probe with driver hub failed with error -5 [ 161.407567][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 161.409609][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 161.412979][ T5986] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.414988][ T5986] cdc_wdm 5-1:1.0: Unknown control protocol [ 161.465902][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3120'. [ 162.159997][T12904] netlink: 'syz.3.3139': attribute type 4 has an invalid length. [ 162.162602][T12904] netlink: 'syz.3.3139': attribute type 8 has an invalid length. [ 162.165280][T12904] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3139'. [ 162.216346][ T40] audit: type=1400 audit(1773648487.128:573): avc: denied { kexec_image_load } for pid=12911 comm="syz.2.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 162.383908][ T40] audit: type=1400 audit(1773648487.288:574): avc: denied { append } for pid=12932 comm="syz.2.3153" name="file0" dev="9p" ino=71827909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.395898][ T40] audit: type=1400 audit(1773648487.288:575): avc: denied { open } for pid=12932 comm="syz.2.3153" path="/245/file0/file0" dev="9p" ino=71827909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.165846][ T5986] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 163.205762][ T6022] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 163.316152][ T5986] usb 6-1: Using ep0 maxpacket: 8 [ 163.319094][ T5986] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 163.322295][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.332392][ T5986] pvrusb2: Hardware description: Terratec Grabster AV400 [ 163.335059][ T5986] pvrusb2: ********** [ 163.336919][ T5986] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 163.340249][ T5986] pvrusb2: Important functionality might not be entirely working. [ 163.342799][ T5986] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 163.346726][ T5986] pvrusb2: ********** [ 163.355620][ T6022] usb 8-1: Using ep0 maxpacket: 8 [ 163.359089][ T6022] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.362200][ T6022] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.365573][ T6022] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.368800][ T6022] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.373037][ T6022] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.376038][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.533647][ T2492] pvrusb2: Invalid write control endpoint [ 163.559704][ T2492] pvrusb2: Invalid write control endpoint [ 163.562857][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.564092][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 163.566725][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.570118][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 163.573247][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.581780][ T2492] pvrusb2: Device being rendered inoperable [ 163.592720][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 163.596432][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 163.599030][ T6022] usb 8-1: GET_CAPABILITIES returned 0 [ 163.602008][ T6022] usbtmc 8-1:16.0: can't read capabilities [ 163.603254][ T2492] pvrusb2: Attached sub-driver cx25840 [ 163.608072][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.612723][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.735686][ T59] usb 6-1: USB disconnect, device number 20 [ 163.952557][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3186'. [ 163.996144][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3186'. [ 164.245290][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 164.249955][T13020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3190'. [ 164.441133][T13038] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 164.496767][T13046] block nbd2: NBD_DISCONNECT [ 164.570396][T13052] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 164.937196][T13083] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 164.969851][T12824] cdc_wdm 5-1:1.0: Error autopm - -16 [ 164.970116][ T5940] usb 5-1: USB disconnect, device number 19 [ 165.010271][T12991] cdc_wdm 5-1:1.0: Error autopm - -16 [ 165.022957][ T5986] usb 8-1: USB disconnect, device number 18 [ 165.220877][T13106] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 165.524772][T13127] tipc: Started in network mode [ 165.531169][T13127] tipc: Node identity ac14140f, cluster identity 4711 [ 165.534745][T13127] tipc: New replicast peer: 255.255.255.255 [ 165.538904][T13127] tipc: Enabled bearer , priority 10 [ 165.565633][ T5629] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 165.725735][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 165.734392][ T5629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.739219][ T5629] usb 5-1: config 1 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.744302][ T5629] usb 5-1: config 1 interface 0 has no altsetting 0 [ 165.758244][ T5629] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40 [ 165.762427][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.766659][ T5629] usb 5-1: Product: syz [ 165.768391][ T5629] usb 5-1: Manufacturer: syz [ 165.770273][ T5629] usb 5-1: SerialNumber: syz [ 165.989649][ T5629] usbhid 5-1:1.0: can't add hid device: -71 [ 165.991982][ T5629] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 165.998020][ T5629] usb 5-1: USB disconnect, device number 20 [ 166.445625][ T5629] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 166.480345][ T40] audit: type=1400 audit(1773648491.388:576): avc: denied { accept } for pid=13196 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 166.555898][ T1471] tipc: Node number set to 2886997007 [ 166.571616][T13203] batadv_slave_1: entered promiscuous mode [ 166.574614][T13202] batadv_slave_1: left promiscuous mode [ 166.602047][T13205] vcan0: tx address claim with dest, not broadcast [ 166.605592][ T5629] usb 8-1: Using ep0 maxpacket: 8 [ 166.609073][ T5629] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.618455][ T5629] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.621665][ T5629] usb 8-1: config 0 interface 0 has no altsetting 0 [ 166.623811][ T5629] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.635564][ T5629] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.646505][ T5629] usb 8-1: config 0 descriptor?? [ 166.765040][T13216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.842972][T13220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.845389][T13220] IPv6: NLM_F_CREATE should be set when creating new route [ 166.847099][T13216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.861093][ T40] audit: type=1400 audit(1773648491.768:577): avc: denied { wake_alarm } for pid=13189 comm="syz.3.3266" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.935654][ T5629] usbhid 8-1:0.0: can't add hid device: -71 [ 166.937717][ T5629] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 166.945683][ T5629] usb 8-1: USB disconnect, device number 19 [ 166.968691][T13216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.059292][T13216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.118305][T13245] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.124708][ T40] audit: type=1400 audit(1773648492.028:578): avc: denied { getopt } for pid=13246 comm="syz.3.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.169432][ T221] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.180486][ T221] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.190214][ T221] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.199524][ T40] audit: type=1400 audit(1773648492.108:579): avc: denied { ioctl } for pid=13252 comm="syz.0.3294" path="socket:[41980]" dev="sockfs" ino=41980 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.215828][ T221] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.279838][ T40] audit: type=1400 audit(1773648492.188:580): avc: denied { mount } for pid=13260 comm="syz.2.3298" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.289794][T13266] 9p: Unknown uid 00000000004294967295 [ 167.295646][ T40] audit: type=1400 audit(1773648492.188:581): avc: denied { unmount } for pid=13260 comm="syz.2.3298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.304464][ T40] audit: type=1400 audit(1773648492.198:582): avc: denied { create } for pid=13265 comm="syz.1.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.313194][ T40] audit: type=1400 audit(1773648492.198:583): avc: denied { getopt } for pid=13265 comm="syz.1.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.344653][T13269] kvm: kvm [13267]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 167.617803][T13297] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3315'. [ 167.747676][T13318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3325'. [ 167.773818][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 167.864141][T13329] loop1: detected capacity change from 0 to 7 [ 167.871093][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.874237][ C1] buffer_io_error: 89 callbacks suppressed [ 167.874246][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.879182][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.882359][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.884958][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.888788][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.892033][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.895123][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.897866][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.901008][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.903852][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.907021][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.910142][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.913241][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.915851][ T6204] ldm_validate_partition_table(): Disk read failed. [ 167.918090][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.922254][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.925036][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.929075][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.933558][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.936774][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 167.939523][ T6204] Dev loop1: unable to read RDB block 0 [ 167.942663][ T6204] loop1: unable to read partition table [ 167.945230][ T6204] loop1: partition table beyond EOD, truncated [ 167.957930][T13329] ldm_validate_partition_table(): Disk read failed. [ 167.968142][T13329] Dev loop1: unable to read RDB block 0 [ 167.971482][T13329] loop1: unable to read partition table [ 167.974320][T13329] loop1: partition table beyond EOD, truncated [ 167.977370][T13329] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 168.019435][ T40] audit: type=1400 audit(1773648492.928:584): avc: denied { read } for pid=13341 comm="syz.2.3336" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.037529][ T40] audit: type=1400 audit(1773648492.928:585): avc: denied { open } for pid=13341 comm="syz.2.3336" path="net:[4026532897]" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.122008][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 168.314986][T13385] misc userio: Begin command sent, but we're already running [ 168.346455][T13387] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 168.673911][T13424] netlink: 'syz.2.3374': attribute type 13 has an invalid length. [ 168.677795][T13424] syz_tun: refused to change device tx_queue_len [ 168.741667][T13432] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 168.772521][T13434] Falling back ldisc for ttyS3. [ 169.629342][T13508] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 169.632163][T13508] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3414'. [ 169.636649][T13508] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 169.639534][T13508] netlink: 'syz.0.3414': attribute type 8 has an invalid length. [ 169.643040][T13508] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3414'. [ 169.647282][T13508] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3414'. [ 169.684476][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3416'. [ 169.807008][T13520] netlink: set zone limit has 4 unknown bytes [ 170.404816][ T5941] Bluetooth: min 6 > max 0 [ 170.735599][ T5941] Bluetooth: hci0: command 0x2016 tx timeout [ 170.758679][T13612] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3463'. [ 171.782614][ T5946] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 171.782657][ T5946] Bluetooth: hci3: Malformed LE Event: 0x0d [ 172.415675][ T5946] Bluetooth: hci3: command tx timeout [ 172.525787][ T6021] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 172.675841][ T6021] usb 5-1: Using ep0 maxpacket: 32 [ 172.679193][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.683789][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.688180][ T6021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.693438][ T6021] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 172.697628][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.704375][ T6021] usb 5-1: config 0 descriptor?? [ 172.815637][ T5946] Bluetooth: hci0: command 0x2016 tx timeout [ 173.073098][T13674] syzkaller1: entered promiscuous mode [ 173.075280][T13674] syzkaller1: entered allmulticast mode [ 173.131333][ T6021] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input31 [ 173.176491][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 173.176503][ T40] audit: type=1400 audit(1773648498.088:590): avc: denied { accept } for pid=13676 comm="syz.3.3494" lport=55346 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.188219][ T40] audit: type=1400 audit(1773648498.088:591): avc: denied { getopt } for pid=13676 comm="syz.3.3494" lport=55346 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.201297][ T6021] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input32 [ 173.223594][ T6021] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 173.377764][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.865582][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 174.023280][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 174.026830][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 174.029393][ T34] usb 8-1: can't read configurations, error -71 [ 174.169141][ C0] kye 0003:0458:5011.0004: usb_submit_urb(ctrl) failed: -1 [ 174.425805][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.429303][T13712] veth0: entered promiscuous mode [ 174.432281][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 174.518447][ T4012] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 174.563982][ T40] audit: type=1400 audit(1773648499.468:592): avc: denied { name_bind } for pid=13713 comm="syz.3.3510" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 174.581038][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.584311][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.588092][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.591806][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.668129][ T4012] usb 6-1: Using ep0 maxpacket: 16 [ 174.671127][ T4012] usb 6-1: config 0 has no interfaces? [ 174.674425][ T4012] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 174.677837][ T4012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.680485][ T4012] usb 6-1: Product: syz [ 174.681883][ T4012] usb 6-1: Manufacturer: syz [ 174.683410][ T4012] usb 6-1: SerialNumber: syz [ 174.692289][ T4012] usb 6-1: config 0 descriptor?? [ 174.903424][ T4012] usb 6-1: USB disconnect, device number 21 [ 174.943635][ T40] audit: type=1400 audit(1773648499.848:593): avc: denied { mounton } for pid=13730 comm="syz.3.3517" path="/934/file0" dev="tmpfs" ino=4761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.970264][ T10] usb 5-1: USB disconnect, device number 21 [ 174.978065][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.453025][ T40] audit: type=1800 audit(1773648500.358:594): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3522" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 175.470873][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.626700][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 175.653532][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 175.662035][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 175.664406][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 175.669377][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3534'. [ 175.672418][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3534'. [ 175.697621][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 175.710149][ T34] IPVS: starting estimator thread 0... [ 175.716064][T13771] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 175.719558][T13771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.806233][T13772] IPVS: using max 43 ests per chain, 103200 per kthread [ 176.107281][ T40] audit: type=1800 audit(1773648501.018:595): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3552" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 176.154007][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 176.157878][T13811] netlink: 'syz.3.3554': attribute type 30 has an invalid length. [ 176.165605][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 176.216937][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 176.468993][ T40] audit: type=1400 audit(1773648501.378:596): avc: denied { bind } for pid=13831 comm="syz.3.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.480282][ T40] audit: type=1800 audit(1773648501.388:597): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3564" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 177.288203][T13880] netlink: 'syz.2.3585': attribute type 5 has an invalid length. [ 177.292376][T13880] netlink: 'syz.2.3585': attribute type 5 has an invalid length. [ 177.705672][ T40] audit: type=1326 audit(1773648502.608:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.0.3594" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c3f9c799 code=0x0 [ 178.586568][ T34] net_ratelimit: 12 callbacks suppressed [ 178.586580][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.794392][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.798710][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.801743][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.804843][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.808497][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.812183][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.817749][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.820569][T13956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.605003][ T40] audit: type=1400 audit(1773648504.508:599): avc: denied { listen } for pid=13975 comm="syz.1.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.616327][ T831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.654056][T13980] netlink: 'syz.2.3630': attribute type 26 has an invalid length. [ 179.694474][T13982] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 179.696971][ T5941] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 179.697269][ T5941] Bluetooth: hci0: command 0x2016 tx timeout [ 179.829667][ T40] audit: type=1400 audit(1773648504.738:600): avc: denied { create } for pid=13999 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.837195][ T40] audit: type=1400 audit(1773648504.738:601): avc: denied { listen } for pid=13999 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.843678][ T40] audit: type=1400 audit(1773648504.738:602): avc: denied { accept } for pid=13999 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.374812][T14046] syzkaller1: entered promiscuous mode [ 180.380107][T14046] syzkaller1: entered allmulticast mode [ 180.635653][T14061] bond0: entered promiscuous mode [ 180.638946][T14061] bond_slave_0: entered promiscuous mode [ 180.641595][T14061] bond_slave_1: entered promiscuous mode [ 180.644254][T14061] bond0: left promiscuous mode [ 180.646088][T14061] bond_slave_0: left promiscuous mode [ 180.647981][T14061] bond_slave_1: left promiscuous mode [ 180.708998][ T40] audit: type=1400 audit(1773648505.618:603): avc: denied { create } for pid=14066 comm="syz.0.3667" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.722309][ T40] audit: type=1400 audit(1773648505.628:604): avc: denied { read } for pid=14066 comm="syz.0.3667" path="/204/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.733671][ T40] audit: type=1400 audit(1773648505.628:605): avc: denied { lock } for pid=14066 comm="syz.0.3667" path="/204/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.884410][T14082] __nla_validate_parse: 9 callbacks suppressed [ 180.884423][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'. [ 181.024906][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 181.035671][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 181.060442][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 181.064822][T14096] netlink: 75 bytes leftover after parsing attributes in process `syz.2.3681'. [ 181.234055][T14118] netlink: 'syz.0.3692': attribute type 7 has an invalid length. [ 181.237519][T14118] netlink: 'syz.0.3692': attribute type 8 has an invalid length. [ 181.240272][T14118] netlink: 'syz.0.3692': attribute type 7 has an invalid length. [ 181.243174][T14118] netlink: 208804 bytes leftover after parsing attributes in process `syz.0.3692'. [ 181.825811][ T50] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 181.977200][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.981150][ T50] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.985739][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.989697][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.994507][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 182.001092][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.005006][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.008757][ T50] usb 5-1: Product: syz [ 182.010644][ T50] usb 5-1: Manufacturer: syz [ 182.020766][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 182.023213][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 182.027543][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 182.029852][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 182.271505][ C3] wdm_int_callback: 645 callbacks suppressed [ 182.271523][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 182.271892][ T50] usb 5-1: USB disconnect, device number 22 [ 182.274596][ C3] wdm_int_callback: 645 callbacks suppressed [ 182.274613][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 182.285396][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 183.439626][T14173] erspan0: entered promiscuous mode [ 183.541211][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3719'. [ 183.588389][ T40] audit: type=1400 audit(1773648508.498:606): avc: denied { watch_sb } for pid=14182 comm="syz.0.3721" path="/226" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.680353][ T40] audit: type=1400 audit(1773648508.588:607): avc: denied { ioctl } for pid=14186 comm="syz.1.3723" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 183.779511][ T34] net_ratelimit: 8 callbacks suppressed [ 183.779528][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.895471][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 183.898560][T14198] netlink: 'syz.0.3728': attribute type 21 has an invalid length. [ 183.953782][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 183.957802][T14202] netlink: 'syz.0.3730': attribute type 30 has an invalid length. [ 184.005336][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 184.008919][T14203] netlink: 'syz.0.3730': attribute type 30 has an invalid length. [ 184.098267][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.335660][ T50] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 184.422653][ T40] audit: type=1400 audit(1773648509.328:608): avc: denied { write } for pid=14222 comm="syz.2.3738" lport=44618 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 184.495742][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 184.498812][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.502408][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.505747][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 184.508353][ T50] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.511729][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.515872][ T50] usb 6-1: config 0 descriptor?? [ 184.595604][ T34] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.710957][ T40] audit: type=1400 audit(1773648509.618:609): avc: denied { write } for pid=14232 comm="syz.2.3745" name="cpuset.effective_cpus" dev="9p" ino=71827869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.747709][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.751538][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.755211][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.758627][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.764691][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.767727][ T34] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.770466][ T34] usb 5-1: Manufacturer: syz [ 184.773880][ T34] usb 5-1: config 0 descriptor?? [ 184.815919][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.906285][T14237] geneve2: entered promiscuous mode [ 184.908709][T14237] geneve2: entered allmulticast mode [ 184.926084][ T50] hid_parser_main: 7 callbacks suppressed [ 184.926098][ T50] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 184.930318][ T50] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 184.932884][ T50] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 184.935707][ T50] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 184.937983][ T50] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 184.940560][ T50] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 185.132803][ T831] usb 6-1: USB disconnect, device number 22 [ 185.189573][ T34] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 185.195455][ T34] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 185.448142][ T10] usb 5-1: USB disconnect, device number 23 [ 185.858507][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 185.861091][ T5948] Bluetooth: hci3: command 0x0406 tx timeout [ 185.863372][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.003974][T14264] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 186.195671][ T50] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 186.336548][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.356432][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 186.360897][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.365307][ T50] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.370872][ T50] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 186.373921][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.377011][ T50] usb 6-1: Product: syz [ 186.378872][ T50] usb 6-1: Manufacturer: syz [ 186.380929][ T50] usb 6-1: SerialNumber: syz [ 186.385330][ T50] usb 6-1: config 0 descriptor?? [ 186.487714][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3767'. [ 186.595667][ T50] usb 6-1: USB disconnect, device number 23 [ 186.896333][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.006994][ T40] audit: type=1400 audit(1773648511.918:610): avc: denied { setattr } for pid=14291 comm="syz.0.3771" name="file0" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.015025][ T40] audit: type=1400 audit(1773648511.918:611): avc: denied { write } for pid=14291 comm="syz.0.3771" name="file0" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.022981][ T40] audit: type=1400 audit(1773648511.928:612): avc: denied { open } for pid=14291 comm="syz.0.3771" path="/239/file0" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.057837][ T40] audit: type=1400 audit(1773648511.968:613): avc: denied { mount } for pid=14293 comm="syz.0.3772" name="/" dev="autofs" ino=48731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 187.069826][T14296] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3773'. [ 187.076145][ T40] audit: type=1400 audit(1773648511.988:614): avc: denied { unmount } for pid=11793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 187.136141][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.183291][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 187.444704][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 187.451136][ T5941] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 187.489453][T14321] hsr_slave_1 (unregistering): left promiscuous mode [ 187.490818][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.495069][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.499516][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.542802][ T40] audit: type=1400 audit(1773648512.448:615): avc: denied { remount } for pid=14330 comm="syz.2.3790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 187.655735][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 187.659183][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 187.663202][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 187.667319][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 188.258791][T14366] binder: 14365:14366 ioctl c0306201 2000000001c0 returned -14 [ 188.524183][T14376] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3811'. [ 188.798729][T14392] netlink: 3900 bytes leftover after parsing attributes in process `syz.2.3818'. [ 188.869215][T14394] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 188.875356][T14394] SELinux: failed to load policy [ 188.899620][ T59] net_ratelimit: 3 callbacks suppressed [ 188.899637][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.977950][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.482967][T14409] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 190.003228][ T40] audit: type=1400 audit(1773648514.908:616): avc: denied { ioctl } for pid=14417 comm="syz.3.3829" path="socket:[49795]" dev="sockfs" ino=49795 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.015878][ T831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.036793][T14420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.041365][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.175683][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.311601][ T5946] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 190.597450][ T40] audit: type=1400 audit(1773648515.498:617): avc: denied { write } for pid=14458 comm="syz.1.3846" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.610456][ T40] audit: type=1400 audit(1773648515.508:618): avc: denied { set_context_mgr } for pid=14458 comm="syz.1.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.065716][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.066091][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 191.070095][ T831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.248048][ T40] audit: type=1800 audit(1773648516.158:619): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3863" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 191.400902][T14506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 191.467297][ T5941] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 191.470691][ T5941] Bluetooth: hci3: Injecting HCI hardware error event [ 191.477288][ T5941] Bluetooth: hci3: hardware error 0x00 [ 191.522967][ T40] audit: type=1400 audit(1773648516.428:620): avc: denied { map } for pid=14514 comm="syz.0.3873" path="socket:[48940]" dev="sockfs" ino=48940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 191.581935][ T40] audit: type=1400 audit(1773648516.488:621): avc: denied { create } for pid=14525 comm="syz.2.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.595670][ T40] audit: type=1400 audit(1773648516.488:622): avc: denied { bind } for pid=14525 comm="syz.2.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.630186][ T40] audit: type=1400 audit(1773648516.538:623): avc: denied { setopt } for pid=14525 comm="syz.2.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.651547][T14535] __nla_validate_parse: 3 callbacks suppressed [ 191.651559][T14535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3881'. [ 191.656051][ T40] audit: type=1400 audit(1773648516.538:624): avc: denied { accept } for pid=14525 comm="syz.2.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.663529][ T40] audit: type=1400 audit(1773648516.538:625): avc: denied { write } for pid=14525 comm="syz.2.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.793792][ C3] ------------[ cut here ]------------ [ 191.796178][ C3] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 191.799418][ C3] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#3: kworker/3:2/831 [ 191.802828][ C3] Modules linked in: [ 191.804734][ C3] CPU: 3 UID: 0 PID: 831 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 191.809258][ C3] Tainted: [L]=SOFTLOCKUP [ 191.810856][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.814189][ C3] Workqueue: rcu_gp process_srcu [ 191.816132][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 191.818402][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 e7 ca 02 f7 48 8d 3d 70 38 e4 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 4b 4e 6f f7 e9 03 [ 191.824627][ C3] RSP: 0018:ffffc900006f8890 EFLAGS: 00010246 [ 191.826700][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 191.829303][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea3a10 [ 191.831916][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 191.834502][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff8880379877e8 [ 191.837161][ C3] R13: ffff888050bf3128 R14: 0000000000000000 R15: dffffc0000000000 [ 191.839781][ C3] FS: 0000000000000000(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000 [ 191.842680][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.844849][ C3] CR2: 0000001b2ff1cff8 CR3: 00000000379f5000 CR4: 0000000000352ef0 [ 191.847611][ C3] Call Trace: [ 191.848897][ C3] [ 191.850065][ C3] rate_control_send_low+0x2a8/0x7e0 [ 191.851797][ C3] rate_control_get_rate+0x1be/0x5c0 [ 191.853566][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 191.855466][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 191.857587][ C3] ? mark_held_locks+0x40/0x70 [ 191.859156][ C3] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 191.861089][ C3] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 191.862892][ C3] ? __lock_acquire+0x4a5/0x2630 [ 191.864533][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 191.866361][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 191.868349][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 191.870158][ C3] __iterate_interfaces+0x2e6/0x650 [ 191.871931][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 191.874089][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 191.876119][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 191.878398][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 191.880120][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 191.882048][ C3] __hrtimer_run_queues+0x50e/0xa70 [ 191.883786][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 191.885659][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 191.887678][ C3] hrtimer_run_softirq+0x17d/0x350 [ 191.889363][ C3] handle_softirqs+0x1eb/0x9e0 [ 191.890947][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 191.892711][ C3] __irq_exit_rcu+0xef/0x150 [ 191.894248][ C3] irq_exit_rcu+0x9/0x30 [ 191.895700][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 191.897574][ C3] [ 191.898582][ C3] [ 191.899568][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.901469][ C3] RIP: 0010:preempt_count_sub+0x4e/0x160 [ 191.903249][ C3] Code: 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 d9 00 00 00 8b 0d 55 f5 47 19 85 c9 75 1b 65 8b 05 ba 71 38 12 89 c2 81 e2 ff ff ff 7f <39> d3 7f 17 81 fb fe 00 00 00 76 6b f7 db 65 01 1d 9d 71 38 12 5b [ 191.909389][ C3] RSP: 0018:ffffc90004e37ab8 EFLAGS: 00000202 [ 191.911372][ C3] RAX: 0000000080000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 191.913956][ C3] RDX: 0000000000000001 RSI: ffffffff8c1b0620 RDI: 0000000000000001 [ 191.916568][ C3] RBP: 000000754e5a87ee R08: 0000000000000000 R09: 0000000000013927 [ 191.919104][ C3] R10: ffff88816dd42f17 R11: 0000000000000000 R12: 0000000000000003 [ 191.921667][ C3] R13: 00000000000032c9 R14: ffffffff9b20e2c0 R15: dffffc0000000000 [ 191.924228][ C3] delay_tsc+0x6a/0xc0 [ 191.925626][ C3] try_check_zero+0x399/0x6d0 [ 191.927217][ C3] process_srcu+0x636/0x1ab0 [ 191.928745][ C3] ? rcu_is_watching+0x12/0xc0 [ 191.930339][ C3] process_one_work+0xa23/0x19a0 [ 191.931983][ C3] ? __pfx_process_one_work+0x10/0x10 [ 191.933769][ C3] ? __pfx_process_srcu+0x10/0x10 [ 191.935467][ C3] worker_thread+0x5ef/0xe50 [ 191.935790][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.937041][ C3] ? __pfx_worker_thread+0x10/0x10 [ 191.941291][ C3] ? kthread+0x13a/0x450 [ 191.942692][ C3] ? __pfx_worker_thread+0x10/0x10 [ 191.944371][ C3] kthread+0x370/0x450 [ 191.945840][ C3] ? __pfx_kthread+0x10/0x10 [ 191.947482][ C3] ret_from_fork+0x754/0xd80 [ 191.949011][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 191.950677][ C3] ? __switch_to+0x7b4/0x1120 [ 191.952239][ C3] ? __pfx_kthread+0x10/0x10 [ 191.953774][ C3] ret_from_fork_asm+0x1a/0x30 [ 191.955346][ C3] [ 191.956450][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.958796][ C3] CPU: 3 UID: 0 PID: 831 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.962236][ C3] Tainted: [L]=SOFTLOCKUP [ 191.963638][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.966881][ C3] Workqueue: rcu_gp process_srcu [ 191.968506][ C3] Call Trace: [ 191.969599][ C3] [ 191.970548][ C3] dump_stack_lvl+0x100/0x190 [ 191.972085][ C3] vpanic+0x552/0x970 [ 191.973410][ C3] ? __pfx_vpanic+0x10/0x10 [ 191.974884][ C3] panic+0xd1/0xe0 [ 191.976114][ C3] ? __pfx_panic+0x10/0x10 [ 191.977603][ C3] ? check_panic_on_warn+0x1f/0x90 [ 191.979304][ C3] check_panic_on_warn.cold+0x19/0x34 [ 191.981041][ C3] ? __rate_control_send_low+0x610/0x760 [ 191.982852][ C3] __warn.cold+0x191/0x348 [ 191.984306][ C3] __report_bug+0x296/0x3d0 [ 191.985795][ C3] ? __rate_control_send_low+0x610/0x760 [ 191.987622][ C3] ? __pfx___report_bug+0x10/0x10 [ 191.989249][ C3] ? stack_trace_save+0x8e/0xc0 [ 191.990831][ C3] ? kasan_save_track+0x14/0x30 [ 191.992412][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 191.994061][ C3] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 191.996016][ C3] ? kmalloc_reserve+0x148/0x350 [ 191.997635][ C3] ? __alloc_skb+0x185/0x710 [ 191.999139][ C3] ? __netdev_alloc_skb+0x7a/0x960 [ 192.000800][ C3] ? __ieee80211_beacon_get_ap+0x391/0x10d0 [ 192.002707][ C3] ? __ieee80211_beacon_get+0x14fa/0x1ee0 [ 192.004554][ C3] report_bug_entry+0xe1/0x290 [ 192.006117][ C3] ? __rate_control_send_low+0x621/0x760 [ 192.007948][ C3] handle_bug+0x1cd/0x2a0 [ 192.009372][ C3] exc_invalid_op+0x17/0x50 [ 192.010865][ C3] asm_exc_invalid_op+0x1a/0x20 [ 192.012481][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 192.014531][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 e7 ca 02 f7 48 8d 3d 70 38 e4 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 4b 4e 6f f7 e9 03 [ 192.020703][ C3] RSP: 0018:ffffc900006f8890 EFLAGS: 00010246 [ 192.022677][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 192.025219][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea3a10 [ 192.027755][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 192.030262][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff8880379877e8 [ 192.032838][ C3] R13: ffff888050bf3128 R14: 0000000000000000 R15: dffffc0000000000 [ 192.035406][ C3] rate_control_send_low+0x2a8/0x7e0 [ 192.037105][ C3] rate_control_get_rate+0x1be/0x5c0 [ 192.038779][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 192.040676][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 192.042701][ C3] ? mark_held_locks+0x40/0x70 [ 192.044250][ C3] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 192.046108][ C3] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 192.047917][ C3] ? __lock_acquire+0x4a5/0x2630 [ 192.049536][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 192.051356][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 192.053403][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 192.055212][ C3] __iterate_interfaces+0x2e6/0x650 [ 192.056908][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 192.058867][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 192.060831][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 192.062883][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 192.064718][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 192.066630][ C3] __hrtimer_run_queues+0x50e/0xa70 [ 192.068326][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 192.070171][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 192.072151][ C3] hrtimer_run_softirq+0x17d/0x350 [ 192.073868][ C3] handle_softirqs+0x1eb/0x9e0 [ 192.075379][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 192.077120][ C3] __irq_exit_rcu+0xef/0x150 [ 192.078634][ C3] irq_exit_rcu+0x9/0x30 [ 192.080030][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 192.081858][ C3] [ 192.082838][ C3] [ 192.083817][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.085775][ C3] RIP: 0010:preempt_count_sub+0x4e/0x160 [ 192.087608][ C3] Code: 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 d9 00 00 00 8b 0d 55 f5 47 19 85 c9 75 1b 65 8b 05 ba 71 38 12 89 c2 81 e2 ff ff ff 7f <39> d3 7f 17 81 fb fe 00 00 00 76 6b f7 db 65 01 1d 9d 71 38 12 5b [ 192.093796][ C3] RSP: 0018:ffffc90004e37ab8 EFLAGS: 00000202 [ 192.095775][ C3] RAX: 0000000080000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 192.098315][ C3] RDX: 0000000000000001 RSI: ffffffff8c1b0620 RDI: 0000000000000001 [ 192.100881][ C3] RBP: 000000754e5a87ee R08: 0000000000000000 R09: 0000000000013927 [ 192.103452][ C3] R10: ffff88816dd42f17 R11: 0000000000000000 R12: 0000000000000003 [ 192.106042][ C3] R13: 00000000000032c9 R14: ffffffff9b20e2c0 R15: dffffc0000000000 [ 192.108605][ C3] delay_tsc+0x6a/0xc0 [ 192.109937][ C3] try_check_zero+0x399/0x6d0 [ 192.111479][ C3] process_srcu+0x636/0x1ab0 [ 192.113001][ C3] ? rcu_is_watching+0x12/0xc0 [ 192.114557][ C3] process_one_work+0xa23/0x19a0 [ 192.116223][ C3] ? __pfx_process_one_work+0x10/0x10 [ 192.118034][ C3] ? __pfx_process_srcu+0x10/0x10 [ 192.119679][ C3] worker_thread+0x5ef/0xe50 [ 192.121202][ C3] ? __pfx_worker_thread+0x10/0x10 [ 192.122870][ C3] ? kthread+0x13a/0x450 [ 192.124252][ C3] ? __pfx_worker_thread+0x10/0x10 [ 192.125936][ C3] kthread+0x370/0x450 [ 192.127355][ C3] ? __pfx_kthread+0x10/0x10 [ 192.128883][ C3] ret_from_fork+0x754/0xd80 [ 192.130413][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 192.132093][ C3] ? __switch_to+0x7b4/0x1120 [ 192.133646][ C3] ? __pfx_kthread+0x10/0x10 [ 192.135176][ C3] ret_from_fork_asm+0x1a/0x30 [ 192.136763][ C3] [ 192.138560][ C3] Kernel Offset: disabled [ 192.139977][ C3] Rebooting in 86400 seconds..