last executing test programs: 4.359983917s ago: executing program 4 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 4.30095085s ago: executing program 4 (id=190): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='>') 4.283444372s ago: executing program 0 (id=191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7d) 4.169776801s ago: executing program 0 (id=192): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000400)={0x80, 0x1, 0x0, 0x3, 0x0, 0x80000000}) 3.770854944s ago: executing program 0 (id=195): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 3.191815148s ago: executing program 0 (id=197): openat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x40) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x2a, 0x4e, "e5836e1f39169891120eb9ea53114033a2f5e9373f1c00b8ceaf0dc48a3ac19b9a3d2f6a005cad33c630d6b626af2f8fbca3af3e5d0571a9630e68223948435c2b6cdbc173dce847af68958f5401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "edc5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.902084973s ago: executing program 3 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48485}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 2.310884789s ago: executing program 1 (id=205): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rmdir(0x0) 2.202956952s ago: executing program 4 (id=206): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x2) 2.00545073s ago: executing program 4 (id=207): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xea60}) 1.821532132s ago: executing program 3 (id=209): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000005280)={0x3, 0x6, 0x8, 0x4, 0x5, 0x8000, 0x3, 0x5, r1}, &(0x7f00000052c0)=0x20) 1.707846426s ago: executing program 3 (id=210): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 1.550773172s ago: executing program 1 (id=211): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) setuid(0xee01) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.442971342s ago: executing program 1 (id=212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0xa01, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000020) 1.360366543s ago: executing program 1 (id=213): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x1b600, 0x4, 0x2, 0x1, 0x536, 0x0, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0xd, 0x20001e58, 0x8, 0x800f39e, 0x7ff, 0x1539b804, 0xa, 0x1, 0x4002]}) pread64(r0, 0x0, 0x0, 0x200) 1.255845273s ago: executing program 0 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)='D', 0x1, 0x2c0000f4, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @empty, 0xfffffffd}, 0x1c) 1.220933887s ago: executing program 1 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.192675321s ago: executing program 4 (id=216): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="e76a4ab300", @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.115276963s ago: executing program 0 (id=217): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x4, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 1.113621327s ago: executing program 1 (id=218): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x6, 0x1811, 0x0, 0x0}], 0x1}) 1.054951334s ago: executing program 4 (id=220): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) 1.032576089s ago: executing program 2 (id=221): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) 944.676785ms ago: executing program 3 (id=222): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 721.284509ms ago: executing program 2 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38) 609.064723ms ago: executing program 2 (id=225): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 503.775437ms ago: executing program 2 (id=226): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') 443.398199ms ago: executing program 2 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 332.394202ms ago: executing program 2 (id=228): socket$inet6(0xa, 0x80802, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x21, 0x28, {0x28, 0x4, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 50.262664ms ago: executing program 3 (id=229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 0s ago: executing program 3 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8070b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0) kernel console output (not intermixed with test programs): [ 51.988246][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 51.988263][ T29] audit: type=1400 audit(1782388578.837:122): avc: denied { write } for pid=5539 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.153873][ T29] audit: type=1400 audit(1782388579.007:123): avc: denied { write } for pid=5542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.195902][ T29] audit: type=1400 audit(1782388579.047:124): avc: denied { write } for pid=5553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.364599][ T29] audit: type=1400 audit(1782388579.217:125): avc: denied { write } for pid=5556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.419717][ T29] audit: type=1400 audit(1782388579.267:126): avc: denied { write } for pid=5567 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.594305][ T29] audit: type=1400 audit(1782388579.447:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.651087][ T29] audit: type=1400 audit(1782388579.507:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 59.174756][ T29] audit: type=1400 audit(1782388586.027:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.198534][ T29] audit: type=1400 audit(1782388586.047:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.201691][ T5593] cgroup: Unknown subsys name 'net' [ 59.227441][ T29] audit: type=1400 audit(1782388586.077:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.363568][ T5593] cgroup: Unknown subsys name 'cpuset' [ 59.371559][ T5593] cgroup: Unknown subsys name 'rlimit' [ 59.491071][ T29] audit: type=1400 audit(1782388586.337:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.523662][ T29] audit: type=1400 audit(1782388586.347:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.544448][ T29] audit: type=1400 audit(1782388586.347:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.565084][ T29] audit: type=1400 audit(1782388586.347:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.590152][ T29] audit: type=1400 audit(1782388586.347:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.610950][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.626714][ T29] audit: type=1400 audit(1782388586.347:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.650204][ T29] audit: type=1400 audit(1782388586.477:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.588611][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.464541][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.472945][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.481851][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.489529][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.497397][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.497509][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.505174][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.514526][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.520517][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.533085][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.534173][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.541707][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.555321][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.556833][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.564230][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.570169][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.576744][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.593758][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.594036][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.601888][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.616040][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.624048][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.624060][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.625122][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.647786][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.848831][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.856856][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.864665][ T5607] bridge_slave_0: entered allmulticast mode [ 63.872067][ T5607] bridge_slave_0: entered promiscuous mode [ 63.895095][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.902244][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.909417][ T5607] bridge_slave_1: entered allmulticast mode [ 63.917737][ T5607] bridge_slave_1: entered promiscuous mode [ 63.988529][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.995722][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.003103][ T5605] bridge_slave_0: entered allmulticast mode [ 64.009770][ T5605] bridge_slave_0: entered promiscuous mode [ 64.017003][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.024105][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.031612][ T5609] bridge_slave_0: entered allmulticast mode [ 64.038420][ T5609] bridge_slave_0: entered promiscuous mode [ 64.051819][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.058894][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.066050][ T5608] bridge_slave_0: entered allmulticast mode [ 64.072931][ T5608] bridge_slave_0: entered promiscuous mode [ 64.082799][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.092605][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.099747][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.107548][ T5605] bridge_slave_1: entered allmulticast mode [ 64.114341][ T5605] bridge_slave_1: entered promiscuous mode [ 64.127418][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.134664][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.141895][ T5609] bridge_slave_1: entered allmulticast mode [ 64.148779][ T5609] bridge_slave_1: entered promiscuous mode [ 64.159190][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.166321][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.173486][ T5608] bridge_slave_1: entered allmulticast mode [ 64.180126][ T5608] bridge_slave_1: entered promiscuous mode [ 64.188151][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.234606][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.245654][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.273867][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.284432][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.301331][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.312270][ T5607] team0: Port device team_slave_0 added [ 64.338317][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.348742][ T5607] team0: Port device team_slave_1 added [ 64.373258][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.380459][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.388482][ T5606] bridge_slave_0: entered allmulticast mode [ 64.395331][ T5606] bridge_slave_0: entered promiscuous mode [ 64.416237][ T5605] team0: Port device team_slave_0 added [ 64.423259][ T5609] team0: Port device team_slave_0 added [ 64.430274][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.437497][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.444739][ T5606] bridge_slave_1: entered allmulticast mode [ 64.451822][ T5606] bridge_slave_1: entered promiscuous mode [ 64.464987][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.472042][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.497987][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.511000][ T5605] team0: Port device team_slave_1 added [ 64.518134][ T5609] team0: Port device team_slave_1 added [ 64.532352][ T5608] team0: Port device team_slave_0 added [ 64.538533][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.545557][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.572009][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.606283][ T5608] team0: Port device team_slave_1 added [ 64.612111][ T5621] Bluetooth: hci3: command tx timeout [ 64.638379][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.662452][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.669478][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.695520][ T5621] Bluetooth: hci2: command tx timeout [ 64.695802][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.701253][ T5618] Bluetooth: hci0: command tx timeout [ 64.701319][ T5618] Bluetooth: hci1: command tx timeout [ 64.701429][ T5621] Bluetooth: hci4: command tx timeout [ 64.713802][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.735615][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.761683][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.773991][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.781558][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.807696][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.820060][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.836038][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.843072][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.869097][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.885089][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.892098][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.918034][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.942051][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.949088][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.975533][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.003284][ T5606] team0: Port device team_slave_0 added [ 65.011415][ T5606] team0: Port device team_slave_1 added [ 65.022344][ T5607] hsr_slave_0: entered promiscuous mode [ 65.028480][ T5607] hsr_slave_1: entered promiscuous mode [ 65.082253][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.089263][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.115514][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.137360][ T5608] hsr_slave_0: entered promiscuous mode [ 65.143573][ T5608] hsr_slave_1: entered promiscuous mode [ 65.149434][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 65.155258][ T5608] Cannot create hsr debugfs directory [ 65.164776][ T5605] hsr_slave_0: entered promiscuous mode [ 65.170792][ T5605] hsr_slave_1: entered promiscuous mode [ 65.177003][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 65.182794][ T5605] Cannot create hsr debugfs directory [ 65.195284][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.202324][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.228302][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.249401][ T5609] hsr_slave_0: entered promiscuous mode [ 65.255786][ T5609] hsr_slave_1: entered promiscuous mode [ 65.261966][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 65.267686][ T5609] Cannot create hsr debugfs directory [ 65.391649][ T5606] hsr_slave_0: entered promiscuous mode [ 65.397731][ T5606] hsr_slave_1: entered promiscuous mode [ 65.403856][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.409586][ T5606] Cannot create hsr debugfs directory [ 65.669835][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.684449][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.692265][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.702528][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.710248][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.720608][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.728334][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.737692][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.793418][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.803118][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.814511][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.824887][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.848806][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.857576][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.866177][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.874575][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.894122][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.902149][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.936978][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.946837][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.955552][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.964917][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.973029][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.982322][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.989984][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.999015][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.084490][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.095600][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.104137][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.111768][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.122040][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.129641][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.138353][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.152816][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.162352][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.234471][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.265987][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.275391][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.283506][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.293627][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.304856][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.312206][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.325152][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.332089][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.340436][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.349496][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.358166][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.375931][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.383030][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.420044][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.433070][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.440170][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.472642][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.479744][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.497590][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.550814][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.588756][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.595923][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.621702][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.628857][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.638868][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.691471][ T5621] Bluetooth: hci3: command tx timeout [ 66.719208][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.753872][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.761023][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.771120][ T4925] Bluetooth: hci1: command tx timeout [ 66.777975][ T5618] Bluetooth: hci0: command tx timeout [ 66.778408][ T5612] Bluetooth: hci2: command tx timeout [ 66.784598][ T5621] Bluetooth: hci4: command tx timeout [ 66.809988][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.845502][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.852741][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.902374][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.945716][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.952863][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.975204][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.982358][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.068823][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.195282][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.346349][ T5607] veth0_vlan: entered promiscuous mode [ 67.394122][ T5607] veth1_vlan: entered promiscuous mode [ 67.464910][ T5607] veth0_macvtap: entered promiscuous mode [ 67.476555][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.487689][ T5607] veth1_macvtap: entered promiscuous mode [ 67.563807][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.581820][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.628908][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.665680][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.679699][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.708764][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.736962][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.807099][ T5605] veth0_vlan: entered promiscuous mode [ 67.875024][ T5605] veth1_vlan: entered promiscuous mode [ 67.935271][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.953075][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.978128][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.045656][ T5605] veth0_macvtap: entered promiscuous mode [ 68.065755][ T5605] veth1_macvtap: entered promiscuous mode [ 68.074817][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.085220][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.097375][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.104689][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.107681][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.135628][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 68.135644][ T29] audit: type=1400 audit(1782388594.987:152): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.tZTas5/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.153348][ T5609] veth0_vlan: entered promiscuous mode [ 68.174645][ T29] audit: type=1400 audit(1782388595.017:153): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.198001][ T29] audit: type=1400 audit(1782388595.017:154): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.tZTas5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.230677][ T29] audit: type=1400 audit(1782388595.027:155): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.258781][ T29] audit: type=1400 audit(1782388595.027:156): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.tZTas5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.292214][ T29] audit: type=1400 audit(1782388595.027:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.tZTas5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.319892][ T29] audit: type=1400 audit(1782388595.027:158): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.332944][ T5608] veth0_vlan: entered promiscuous mode [ 68.348014][ T29] audit: type=1400 audit(1782388595.047:159): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.349243][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.373707][ T29] audit: type=1400 audit(1782388595.047:160): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=7102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.388015][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.414401][ T29] audit: type=1400 audit(1782388595.047:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.443491][ T5609] veth1_vlan: entered promiscuous mode [ 68.466012][ T5608] veth1_vlan: entered promiscuous mode [ 68.482781][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.493236][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.516369][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.560013][ T5606] veth0_vlan: entered promiscuous mode [ 68.584759][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.589320][ T5606] veth1_vlan: entered promiscuous mode [ 68.595734][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.685420][ T5609] veth0_macvtap: entered promiscuous mode [ 68.700250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.713396][ T5608] veth0_macvtap: entered promiscuous mode [ 68.719186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.738705][ T5606] veth0_macvtap: entered promiscuous mode [ 68.766379][ T5609] veth1_macvtap: entered promiscuous mode [ 68.775964][ T5621] Bluetooth: hci3: command tx timeout [ 68.789547][ T5608] veth1_macvtap: entered promiscuous mode [ 68.811877][ T5606] veth1_macvtap: entered promiscuous mode [ 68.853078][ T5621] Bluetooth: hci4: command tx timeout [ 68.855819][ T5612] Bluetooth: hci0: command tx timeout [ 68.858788][ T5621] Bluetooth: hci1: command tx timeout [ 68.864472][ T5618] Bluetooth: hci2: command tx timeout [ 68.897364][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.929559][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.954891][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.994448][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.009482][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.041684][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.068106][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.077913][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.088932][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.102043][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.137641][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.169275][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.194136][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.209157][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.218097][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.232860][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.239576][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.249262][ T5808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.257120][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.272403][ T5808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.285479][ T5808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 69.293842][ T5808] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 69.308042][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.308610][ T5808] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 69.326756][ T5808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.335698][ T5808] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.346855][ T5808] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.355975][ T5808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.363131][ T5808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.373056][ T5808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.384400][ T5808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.392362][ T5808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.403302][ T5808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.409936][ T5808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.507068][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.524115][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.533838][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.543642][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.613594][ T355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.634339][ T355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.675466][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.692407][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.765974][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.795476][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.852546][ T355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.884833][ T355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.412354][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.579262][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 70.606229][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.629673][ T5850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24'. [ 70.639438][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.652702][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 70.662825][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.678432][ T5850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24'. [ 70.688364][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.721634][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.746611][ T9] usb 3-1: config 0 descriptor?? [ 70.803782][ T5856] netlink: 92 bytes leftover after parsing attributes in process `syz.0.28'. [ 70.996967][ T5862] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 71.049022][ T5862] veth0_vlan: left promiscuous mode [ 71.063755][ T5864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.065573][ T5862] veth0_vlan: entered promiscuous mode [ 71.138060][ T5862] team0: Device veth0_vlan failed to register rx_handler [ 71.180859][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.224916][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.249870][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.253283][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.268645][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.295050][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.328496][ T5872] process 'syz.4.35' launched '/dev/fd/3' with NULL argv: empty string added [ 71.338075][ T4925] Bluetooth: hci4: command 0x0c1a tx timeout [ 71.344350][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.352505][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.399248][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.413751][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.420865][ T5621] Bluetooth: hci3: command 0x2016 tx timeout [ 71.445427][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.471660][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.475339][ T5876] netpci0: tun_chr_ioctl cmd 1074025672 [ 71.484983][ T5876] netpci0: ignored: set checksum enabled [ 71.507520][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.623248][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 71.645707][ T9] usb 3-1: USB disconnect, device number 2 [ 71.876252][ T5884] fido_id[5884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 72.248701][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.527238][ T5908] netlink: 'syz.2.49': attribute type 14 has an invalid length. [ 72.625304][ T5910] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 72.666521][ T5910] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 73.143866][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 73.143883][ T29] audit: type=1400 audit(1782388599.997:219): avc: denied { write } for pid=5921 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.223702][ T29] audit: type=1400 audit(1782388599.997:220): avc: denied { connect } for pid=5921 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.267137][ T5923] syz.0.55 (5923) used greatest stack depth: 20040 bytes left [ 73.282548][ T29] audit: type=1400 audit(1782388599.997:221): avc: denied { name_connect } for pid=5921 comm="syz.0.55" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.332883][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.337253][ T29] audit: type=1400 audit(1782388600.047:222): avc: denied { shutdown } for pid=5921 comm="syz.0.55" lport=37479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.412090][ T4925] Bluetooth: hci4: command 0x0c1a tx timeout [ 73.418490][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.435695][ T29] audit: type=1400 audit(1782388600.117:223): avc: denied { setopt } for pid=5921 comm="syz.0.55" laddr=fe80::16 lport=37479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.491078][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.497425][ T5621] Bluetooth: hci3: command 0x2016 tx timeout [ 73.658856][ T29] audit: type=1400 audit(1782388600.507:224): avc: denied { read write } for pid=5938 comm="syz.4.62" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.735022][ T29] audit: type=1400 audit(1782388600.507:225): avc: denied { open } for pid=5938 comm="syz.4.62" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.763349][ T29] audit: type=1400 audit(1782388600.517:226): avc: denied { ioctl } for pid=5938 comm="syz.4.62" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.789189][ T29] audit: type=1400 audit(1782388600.597:227): avc: denied { create } for pid=5942 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.830433][ T29] audit: type=1400 audit(1782388600.617:228): avc: denied { write } for pid=5942 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.442049][ T5613] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.633209][ T5613] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 74.661266][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.679032][ T5613] usb 5-1: Product: syz [ 74.695502][ T5613] usb 5-1: Manufacturer: syz [ 74.722487][ T5613] usb 5-1: SerialNumber: syz [ 74.872934][ T5986] xt_hashlimit: size too large, truncated to 1048576 [ 74.907990][ T5989] warning: `syz.1.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.945250][ T5993] Bluetooth: MGMT ver 1.23 [ 75.019681][ T5989] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 75.069049][ T5613] rtl8150 5-1:1.0: couldn't reset the device [ 75.082462][ T5994] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 75.092231][ T5613] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 75.213669][ T5613] usb 5-1: USB disconnect, device number 2 [ 75.223832][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.86'. [ 75.263841][ T6006] netlink: 'syz.1.87': attribute type 20 has an invalid length. [ 75.366360][ T6008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.88'. [ 75.411298][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.494731][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.500806][ T4925] Bluetooth: hci4: command 0x0c1a tx timeout [ 75.571563][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.577758][ T5621] Bluetooth: hci3: command 0x2016 tx timeout [ 75.606674][ T6018] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 75.614029][ T6018] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 76.137702][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 76.170454][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 76.193711][ T6053] loop9: detected capacity change from 0 to 2640 [ 76.230719][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.263478][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.290193][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.324652][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.343581][ T6060] netlink: 96 bytes leftover after parsing attributes in process `syz.4.106'. [ 76.357375][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.380051][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.407388][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.436117][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.462893][ T6063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.107'. [ 76.474209][ T6053] ldm_validate_partition_table(): Disk read failed. [ 76.488954][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.514169][ T6053] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.528884][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 76.545536][ T6053] Dev loop9: unable to read RDB block 0 [ 76.568561][ T6053] loop9: unable to read partition table [ 76.596051][ T6053] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾) failed (rc=-5) [ 76.736790][ T6070] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.137095][ T6087] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 77.179439][ T6087] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 77.190456][ T6092] Illegal XDP return value 4294967274 on prog (id 11) dev N/A, expect packet loss! [ 77.220632][ T6087] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 77.233949][ T5792] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.263218][ T6087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.318553][ T6087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.423852][ T5792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.455095][ T5792] usb 1-1: config 0 has no interface number 0 [ 77.475635][ T5792] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 77.491890][ T57] wlan1: Trigger new scan to find an IBSS to join [ 77.495731][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.532848][ T5792] usb 1-1: Product: syz [ 77.543457][ T5792] usb 1-1: Manufacturer: syz [ 77.556102][ T5792] usb 1-1: SerialNumber: syz [ 77.582894][ T5792] usb 1-1: config 0 descriptor?? [ 77.609058][ T5792] usb 1-1: selecting invalid altsetting 1 [ 77.627314][ T5792] dvb_ttusb_budget: ttusb_init_controller: error [ 77.634009][ T5792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 77.651063][ T5621] Bluetooth: hci3: command 0x2016 tx timeout [ 77.758945][ T5792] DVB: Unable to find symbol stv0299_attach() [ 77.856843][ T5792] DVB: Unable to find symbol tda8083_attach() [ 77.875218][ T5792] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 77.902911][ T5792] usb 1-1: USB disconnect, device number 2 [ 78.550855][ T6121] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 78.575961][ T6121] team0: Port device dummy0 added [ 78.595244][ T6121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.130'. [ 78.612539][ T6121] team0: Port device dummy0 removed [ 78.704266][ T5792] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.713034][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.871535][ T5792] usb 4-1: Using ep0 maxpacket: 16 [ 78.882994][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 78.895508][ T5792] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.918577][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.938215][ T5792] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.949464][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.970818][ T5792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.991066][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.001842][ T5792] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 79.011167][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.021250][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.031949][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.046321][ T5792] usb 4-1: config 0 descriptor?? [ 79.058791][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.069616][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.082360][ T9] usb 3-1: Manufacturer: syz [ 79.099311][ T9] usb 3-1: config 0 descriptor?? [ 79.275955][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 79.275971][ T29] audit: type=1400 audit(1782388606.127:268): avc: denied { read write } for pid=6139 comm="syz.0.138" name="sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.341657][ T29] audit: type=1400 audit(1782388606.127:269): avc: denied { open } for pid=6139 comm="syz.0.138" path="/dev/sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.408142][ T29] audit: type=1400 audit(1782388606.257:270): avc: denied { read write } for pid=6144 comm="syz.0.140" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.445959][ T29] audit: type=1400 audit(1782388606.257:271): avc: denied { open } for pid=6144 comm="syz.0.140" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.446727][ T9] rc_core: IR keymap rc-hauppauge not found [ 79.483533][ T29] audit: type=1400 audit(1782388606.297:272): avc: denied { mount } for pid=6144 comm="syz.0.140" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.490504][ T5792] hid_parser_main: 29 callbacks suppressed [ 79.490522][ T5792] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 79.520449][ T9] Registered IR keymap rc-empty [ 79.527740][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.535605][ T5792] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 79.546280][ T5792] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 79.554407][ T5792] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 79.561925][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.569937][ T5792] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 79.587251][ T5792] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 79.604048][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 79.636346][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 79.688357][ T5792] usb 4-1: USB disconnect, device number 2 [ 79.700253][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.731259][ T5621] Bluetooth: hci3: command 0x2016 tx timeout [ 79.741803][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.773904][ T29] audit: type=1400 audit(1782388606.627:273): avc: denied { bind } for pid=6153 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.794888][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.802440][ T29] audit: type=1400 audit(1782388606.627:274): avc: denied { setopt } for pid=6153 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.824997][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.861023][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.881041][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.898043][ T6158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 79.915045][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.941331][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.961836][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 79.994126][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 80.023805][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 80.031847][ T9] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 80.050652][ T9] usb 3-1: USB disconnect, device number 3 [ 80.247091][ T29] audit: type=1400 audit(1782388607.097:275): avc: denied { write } for pid=6162 comm="syz.1.147" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.285533][ T29] audit: type=1400 audit(1782388607.137:276): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 80.440461][ T29] audit: type=1400 audit(1782388607.287:277): avc: denied { read write } for pid=6169 comm="syz.1.150" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 80.541727][ T12] wlan1: Trigger new scan to find an IBSS to join [ 80.773389][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.157'. [ 81.024850][ T6204] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 81.289909][ T5613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.292394][ T1219] cfg80211: failed to load regulatory.db [ 81.492805][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 81.541611][ T5613] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 81.580403][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.619571][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.641617][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.652610][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.675453][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.696559][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.719913][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.740083][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.752559][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.770961][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.779660][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.793640][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.806814][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.820271][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.833130][ T5613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.846354][ T5613] usb 3-1: config 0 has no interface number 0 [ 81.862029][ T5613] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 81.877800][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.899394][ T5613] usb 3-1: Product: syz [ 81.906383][ T6219] SELinux: failed to load policy [ 81.911790][ T5613] usb 3-1: Manufacturer: syz [ 81.917303][ T5613] usb 3-1: SerialNumber: syz [ 81.984405][ T5613] usb 3-1: config 0 descriptor?? [ 82.003649][ T5613] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 82.214783][ T5613] etas_es58x 3-1:0.2: could not retrieve the product info string [ 82.222971][ T1219] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.415297][ T1219] usb 5-1: Using ep0 maxpacket: 8 [ 82.426354][ T1219] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 82.444901][ T1219] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 82.494812][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.513636][ T5713] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.526046][ T1219] usb 5-1: config 0 descriptor?? [ 82.709472][ T5713] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 82.735232][ T5713] usb 2-1: config 0 has no interface number 0 [ 82.765952][ T5713] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 82.799592][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.834220][ T5713] usb 2-1: Product: syz [ 82.840822][ T5713] usb 2-1: Manufacturer: syz [ 82.856765][ T5713] usb 2-1: SerialNumber: syz [ 82.874098][ T5713] usb 2-1: config 0 descriptor?? [ 82.988018][ T1219] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 82.988057][ T1219] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 82.988075][ T1219] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 82.988108][ T1219] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 82.988127][ T1219] greenasia 0003:0E8F:0012.0004: item fetching failed at offset 4/44 [ 82.992970][ T1219] greenasia 0003:0E8F:0012.0004: parse failed [ 82.993046][ T1219] greenasia 0003:0E8F:0012.0004: probe with driver greenasia failed with error -22 [ 83.047689][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 83.106533][ T5713] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 83.139014][ T5713] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 83.160282][ T5713] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 83.180844][ T5713] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 83.205917][ T5713] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 83.215773][ T9] usb 5-1: USB disconnect, device number 3 [ 83.278525][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 83.289700][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Biggest expected size for rx urb_cmd is 7809 but receive a command of size 57119 [ 83.302639][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.310640][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.319112][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x7EDB. [ 83.330084][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.338073][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.346576][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.357553][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.365541][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.373561][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.384529][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.392520][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.401802][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.412778][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.420773][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.429313][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.440281][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.448269][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.456731][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.467702][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.475696][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.483854][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 83.494815][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 83.502789][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 83.514357][ T355] wlan1: Trigger new scan to find an IBSS to join [ 83.516650][ T5271] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 83.557004][ T5613] usb 2-1: USB disconnect, device number 2 [ 83.577839][ T5613] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 83.586753][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 83.595634][ T5613] keyspan 2-1:0.133: device disconnected [ 83.690961][ T2170] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.725630][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 83.734857][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 83.744041][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 83.753214][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 83.762386][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 83.771592][ C0] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 83.782159][ T9] usb 3-1: USB disconnect, device number 4 [ 83.789083][ T9] etas_es58x 3-1:0.2: Disconnecting syz syz [ 83.803061][ T5271] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 83.866616][ T2170] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.911012][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.938240][ T2170] usb 4-1: Product: syz [ 83.953810][ T2170] usb 4-1: Manufacturer: syz [ 83.968124][ T2170] usb 4-1: SerialNumber: syz [ 83.993183][ T2170] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 84.084618][ T5613] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.200992][ T5713] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.283930][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 84.283946][ T29] audit: type=1400 audit(1782388611.137:308): avc: denied { write } for pid=6294 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.380935][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 84.393219][ T5713] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.424380][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.441396][ T5713] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 84.463542][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.492831][ T355] wlan1: Creating new IBSS network, BSSID 42:c9:a7:07:94:e8 [ 84.508809][ T5713] usb 5-1: config 0 descriptor?? [ 84.547829][ T9] usb 4-1: USB disconnect, device number 3 [ 84.813486][ T29] audit: type=1400 audit(1782388611.667:309): avc: denied { write } for pid=6296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.846072][ T5621] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 84.960042][ T5713] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 84.968434][ T29] audit: type=1400 audit(1782388611.817:310): avc: denied { write } for pid=6314 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.182745][ T5613] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 85.209519][ T5613] ath9k_htc: Failed to initialize the device [ 85.232939][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 85.288421][ T29] audit: type=1400 audit(1782388612.137:311): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.313683][ T1219] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.367838][ T5713] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -71 [ 85.370609][ T29] audit: type=1400 audit(1782388612.167:312): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.433709][ T29] audit: type=1400 audit(1782388612.167:313): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.471263][ T5713] usb 5-1: USB disconnect, device number 4 [ 85.492482][ T1219] usb 1-1: Using ep0 maxpacket: 16 [ 85.502500][ T1219] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.525460][ T1219] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.557445][ T1219] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.576238][ T1219] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 85.600859][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.634144][ T1219] usb 1-1: config 0 descriptor?? [ 85.693490][ T29] audit: type=1400 audit(1782388612.547:314): avc: denied { ioctl } for pid=6336 comm="syz.1.202" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11432 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.798948][ T29] audit: type=1400 audit(1782388612.647:315): avc: denied { write } for pid=6322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.044784][ T29] audit: type=1400 audit(1782388612.897:316): avc: denied { write } for pid=6347 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.080192][ T1219] hid (null): unknown global tag 0xd [ 86.092583][ T1219] hid (null): unknown global tag 0xe [ 86.111782][ T1219] hid (null): unknown global tag 0xe [ 86.118271][ T1219] hid (null): unknown global tag 0xc [ 86.128350][ T1219] hid (null): global environment stack underflow [ 86.312826][ T1219] usb 1-1: USB disconnect, device number 3 [ 86.699097][ T29] audit: type=1400 audit(1782388613.547:317): avc: denied { create } for pid=6363 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.915953][ T6369] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 87.331011][ T1219] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.411583][ T5713] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.492279][ T1219] usb 1-1: Using ep0 maxpacket: 16 [ 87.513442][ T1219] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 87.523488][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.535259][ T1219] usb 1-1: Product: syz [ 87.539624][ T1219] usb 1-1: Manufacturer: syz [ 87.547921][ T1219] usb 1-1: SerialNumber: syz [ 87.590939][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 87.605665][ T5713] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 87.625741][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.642741][ T5713] usb 2-1: Product: syz [ 87.650365][ T5713] usb 2-1: Manufacturer: syz [ 87.658694][ T5713] usb 2-1: SerialNumber: syz [ 87.671272][ T5713] usb 2-1: config 0 descriptor?? [ 87.778669][ T1219] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 87.805913][ T1219] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.823960][ T1219] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 87.846008][ T1219] usb 1-1: media controller created [ 87.883164][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.907066][ T5713] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 003 [ 88.171082][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.180096][ T1219] zl10353_read_register: readreg error (reg=127, ret==-110) [ 88.210436][ T6383] ------------[ cut here ]------------ [ 88.216960][ T6383] usb 1-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 88.226208][ T6383] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.1.218/6383 [ 88.236779][ T6383] Modules linked in: [ 88.241118][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 88.251057][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.261539][ T6383] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 88.267556][ T6383] Code: 48 89 54 24 40 e8 23 7b a6 fa 4c 89 e7 e8 5b 1b dc fe 48 89 c6 48 8d 3d 61 ac 85 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 7a a6 fa 89 ee bf ff 00 00 00 [ 88.287474][ T6383] RSP: 0018:ffffc90005887918 EFLAGS: 00010283 [ 88.293909][ T6383] RAX: ffffffff8c8443a0 RBX: ffff888034d15400 RCX: 0000000080000480 [ 88.302293][ T6383] RDX: ffff888075c89880 RSI: ffffffff8c8443a0 RDI: ffffffff90e8b0b0 [ 88.310553][ T6383] RBP: ffff88807708e058 R08: 00000000000000c0 R09: 0000000000000000 [ 88.319638][ T6383] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807708e0b0 [ 88.328594][ T6383] R13: ffff888022683ec0 R14: ffff888022683ec6 R15: ffff888022683ec7 [ 88.337339][ T6383] FS: 00007f8b511b16c0(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 [ 88.347268][ T6383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.350956][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 88.353918][ T6383] CR2: 0000001b33217ff8 CR3: 000000002aa6d000 CR4: 00000000003526f0 [ 88.353946][ T6383] Call Trace: [ 88.369973][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 88.370317][ T6383] [ 88.384379][ T6383] ? __init_swait_queue_head+0xca/0x150 [ 88.386001][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.389940][ T6383] usb_start_wait_urb+0x10e/0x580 [ 88.389974][ T6383] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 88.414207][ T6383] ? trace_kmalloc+0xeb/0x110 [ 88.418908][ T6383] ? __asan_memset+0x23/0x50 [ 88.424064][ T6383] usb_control_msg+0x328/0x4b0 [ 88.428880][ T6383] ? __pfx_usb_control_msg+0x10/0x10 [ 88.434217][ T6383] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 88.440931][ T6383] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 88.441026][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 88.447537][ T6383] gl861_ctrl_msg+0x1a5/0x4a0 [ 88.447574][ T6383] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 88.447603][ T6383] gl861_i2c_master_xfer+0x545/0x690 [ 88.471849][ T6383] ? mark_held_locks+0x40/0x70 [ 88.475815][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.476621][ T6383] __i2c_transfer+0x5d9/0x1740 [ 88.476651][ T6383] ? __pfx___i2c_transfer+0x10/0x10 [ 88.494614][ T6383] i2c_transfer+0x15f/0x380 [ 88.499132][ T6383] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 88.503216][ T9] usb 3-1: config 0 descriptor?? [ 88.504119][ T6383] i2cdev_ioctl+0x19d/0x830 [ 88.513542][ T6383] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.519404][ T6383] ? selinux_file_ioctl+0x13b/0x290 [ 88.526190][ T6383] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.531324][ T6383] __x64_sys_ioctl+0x18e/0x210 [ 88.536108][ T6383] do_syscall_64+0x115/0x870 [ 88.540716][ T6383] ? clear_bhb_loop+0x40/0x90 [ 88.545458][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.551402][ T6383] RIP: 0033:0x7f8b5039ce59 [ 88.555820][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.575556][ T6383] RSP: 002b:00007f8b511b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.583993][ T6383] RAX: ffffffffffffffda RBX: 00007f8b50615fa0 RCX: 00007f8b5039ce59 [ 88.591999][ T6383] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 88.599971][ T6383] RBP: 00007f8b50432e6f R08: 0000000000000000 R09: 0000000000000000 [ 88.607978][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.615988][ T6383] R13: 00007f8b50616038 R14: 00007f8b50615fa0 R15: 00007ffd309dde18 [ 88.624849][ T6383] [ 88.627877][ T6383] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.635156][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 88.644352][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.654409][ T6383] Call Trace: [ 88.657686][ T6383] [ 88.660614][ T6383] dump_stack_lvl+0x100/0x190 [ 88.665300][ T6383] vpanic+0x552/0x970 [ 88.669281][ T6383] ? __pfx_vpanic+0x10/0x10 [ 88.673787][ T6383] panic+0xd1/0xe0 [ 88.677505][ T6383] ? __pfx_panic+0x10/0x10 [ 88.681928][ T6383] check_panic_on_warn.cold+0x19/0x34 [ 88.687301][ T6383] ? usb_submit_urb+0x15ff/0x19b0 [ 88.692328][ T6383] __warn.cold+0x191/0x318 [ 88.696751][ T6383] __report_bug+0x30f/0x440 [ 88.701256][ T6383] ? usb_submit_urb+0x15ff/0x19b0 [ 88.706286][ T6383] ? __pfx___report_bug+0x10/0x10 [ 88.711309][ T6383] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.717130][ T6383] ? lockdep_hardirqs_on+0x78/0x100 [ 88.722339][ T6383] ? kasan_save_stack+0x3f/0x50 [ 88.727182][ T6383] report_bug_entry+0xe1/0x290 [ 88.731931][ T6383] ? usb_submit_urb+0x160d/0x19b0 [ 88.736963][ T6383] handle_bug+0x1cd/0x2a0 [ 88.741296][ T6383] exc_invalid_op+0x17/0x50 [ 88.745795][ T6383] asm_exc_invalid_op+0x1a/0x20 [ 88.750627][ T6383] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 88.756244][ T6383] Code: 48 89 54 24 40 e8 23 7b a6 fa 4c 89 e7 e8 5b 1b dc fe 48 89 c6 48 8d 3d 61 ac 85 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 7a a6 fa 89 ee bf ff 00 00 00 [ 88.775842][ T6383] RSP: 0018:ffffc90005887918 EFLAGS: 00010283 [ 88.781890][ T6383] RAX: ffffffff8c8443a0 RBX: ffff888034d15400 RCX: 0000000080000480 [ 88.789844][ T6383] RDX: ffff888075c89880 RSI: ffffffff8c8443a0 RDI: ffffffff90e8b0b0 [ 88.797796][ T6383] RBP: ffff88807708e058 R08: 00000000000000c0 R09: 0000000000000000 [ 88.805749][ T6383] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807708e0b0 [ 88.813726][ T6383] R13: ffff888022683ec0 R14: ffff888022683ec6 R15: ffff888022683ec7 [ 88.821697][ T6383] ? usb_submit_urb+0x15f5/0x19b0 [ 88.826729][ T6383] ? __init_swait_queue_head+0xca/0x150 [ 88.832264][ T6383] usb_start_wait_urb+0x10e/0x580 [ 88.837288][ T6383] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 88.842819][ T6383] ? trace_kmalloc+0xeb/0x110 [ 88.847487][ T6383] ? __asan_memset+0x23/0x50 [ 88.852063][ T6383] usb_control_msg+0x328/0x4b0 [ 88.856814][ T6383] ? __pfx_usb_control_msg+0x10/0x10 [ 88.862082][ T6383] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 88.868744][ T6383] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 88.875333][ T6383] gl861_ctrl_msg+0x1a5/0x4a0 [ 88.880001][ T6383] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 88.885188][ T6383] gl861_i2c_master_xfer+0x545/0x690 [ 88.890458][ T6383] ? mark_held_locks+0x40/0x70 [ 88.895211][ T6383] __i2c_transfer+0x5d9/0x1740 [ 88.899961][ T6383] ? __pfx___i2c_transfer+0x10/0x10 [ 88.905142][ T6383] i2c_transfer+0x15f/0x380 [ 88.909627][ T6383] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 88.914551][ T6383] i2cdev_ioctl+0x19d/0x830 [ 88.919036][ T6383] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.924053][ T6383] ? selinux_file_ioctl+0x13b/0x290 [ 88.929242][ T6383] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.934249][ T6383] __x64_sys_ioctl+0x18e/0x210 [ 88.939003][ T6383] do_syscall_64+0x115/0x870 [ 88.943586][ T6383] ? clear_bhb_loop+0x40/0x90 [ 88.948249][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.954123][ T6383] RIP: 0033:0x7f8b5039ce59 [ 88.958518][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.978105][ T6383] RSP: 002b:00007f8b511b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.986502][ T6383] RAX: ffffffffffffffda RBX: 00007f8b50615fa0 RCX: 00007f8b5039ce59 [ 88.994455][ T6383] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 89.002407][ T6383] RBP: 00007f8b50432e6f R08: 0000000000000000 R09: 0000000000000000 [ 89.010356][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.018318][ T6383] R13: 00007f8b50616038 R14: 00007f8b50615fa0 R15: 00007ffd309dde18 [ 89.026278][ T6383] [ 89.029481][ T6383] Kernel Offset: disabled [ 89.033787][ T6383] Rebooting in 86400 seconds..