last executing test programs: 1.433275812s ago: executing program 0 (id=2317): capset(0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) semop(0x0, &(0x7f0000000400)=[{0x0, 0x23, 0x1800}], 0x1) 1.375667229s ago: executing program 0 (id=2319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x40000, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) syz_clone3(&(0x7f0000000440)={0x8200000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.24662541s ago: executing program 3 (id=2325): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000200e}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) 1.245961029s ago: executing program 3 (id=2328): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000c00)={0x281, 0x1}) 1.156445776s ago: executing program 2 (id=2329): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0x20}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x4, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x8000, 0xfffffff8, 0x6}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 1.086364254s ago: executing program 2 (id=2331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800023ff90000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) 1.086148858s ago: executing program 3 (id=2333): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x528000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 906.222109ms ago: executing program 2 (id=2339): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000f35005001c0012800b00010062726964676500000c0002800600270001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 856.411011ms ago: executing program 2 (id=2340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x7) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 856.181811ms ago: executing program 2 (id=2341): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 805.778055ms ago: executing program 2 (id=2343): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 746.061286ms ago: executing program 1 (id=2347): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800023ff90000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) 492.452836ms ago: executing program 0 (id=2348): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) 435.973723ms ago: executing program 1 (id=2349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x4000a, 0x20002f9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 435.758508ms ago: executing program 0 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b554000400fcea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 295.782599ms ago: executing program 1 (id=2351): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 295.648521ms ago: executing program 1 (id=2352): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000002c0)=[{0xff, 0xfc, 0x0, 0x6, @tick=0x8, {}, {}, @quote={{0xc6, 0x3}, 0x5}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {0x4}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x4, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340)="af6f49a1", 0x0, 0x1, 0x36, 0x0, 0x0}) 295.310633ms ago: executing program 0 (id=2353): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 295.186916ms ago: executing program 1 (id=2354): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 196.152372ms ago: executing program 1 (id=2355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x40000, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) syz_clone3(&(0x7f0000000440)={0x8200000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 195.920233ms ago: executing program 0 (id=2356): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800023ff90000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) 195.439642ms ago: executing program 3 (id=2357): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 131.382µs ago: executing program 3 (id=2358): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=2359): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) kernel console output (not intermixed with test programs): 2 [ 73.580983][ T5939] usb 6-1: config 245 has an invalid descriptor of length 215, skipping remainder of the config [ 73.593979][ T5939] usb 6-1: config 245 has 0 interfaces, different from the descriptor's value: 124 [ 73.597790][ T5939] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.602753][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.130161][ T5939] usb 6-1: string descriptor 0 read error: -71 [ 74.165406][ T5939] usb 6-1: USB disconnect, device number 6 [ 74.398904][ T40] audit: type=1400 audit(1770625629.961:230): avc: denied { write } for pid=6378 comm="syz.2.116" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.410139][ T40] audit: type=1400 audit(1770625629.961:231): avc: denied { open } for pid=6378 comm="syz.2.116" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.419952][ T40] audit: type=1400 audit(1770625629.971:232): avc: denied { read } for pid=6378 comm="syz.2.116" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.428209][ T40] audit: type=1400 audit(1770625629.971:233): avc: denied { open } for pid=6378 comm="syz.2.116" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.653917][ T40] audit: type=1400 audit(1770625630.221:234): avc: denied { create } for pid=6382 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.509166][ T6399] dns_resolver: Unsupported content type (152) [ 75.510871][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 75.510926][ T40] audit: type=1400 audit(1770625631.011:239): avc: denied { connect } for pid=6395 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.527733][ T40] audit: type=1400 audit(1770625631.071:240): avc: denied { bind } for pid=6395 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.537009][ T40] audit: type=1400 audit(1770625631.071:241): avc: denied { accept } for pid=6395 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.548984][ T40] audit: type=1400 audit(1770625631.071:242): avc: denied { read write } for pid=6395 comm="syz.3.121" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.575464][ T40] audit: type=1400 audit(1770625631.071:243): avc: denied { open } for pid=6395 comm="syz.3.121" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.585675][ T40] audit: type=1400 audit(1770625631.071:244): avc: denied { ioctl } for pid=6395 comm="syz.3.121" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.863425][ T40] audit: type=1400 audit(1770625631.431:245): avc: denied { create } for pid=6404 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.877111][ T40] audit: type=1400 audit(1770625631.441:246): avc: denied { bind } for pid=6404 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.918323][ T6407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.922115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.966953][ T40] audit: type=1400 audit(1770625631.531:247): avc: denied { create } for pid=6408 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.982203][ T40] audit: type=1400 audit(1770625631.541:248): avc: denied { setopt } for pid=6408 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.214901][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.215409][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.220441][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.320873][ T5929] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 76.482416][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 76.487231][ T5929] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 76.491500][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.500365][ T5929] usb 6-1: config 0 descriptor?? [ 76.501834][ T6425] mmap: syz.3.130 (6425) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.508151][ T6418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.517466][ T6425] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.861772][ T6427] kAFS: No cell specified [ 76.867191][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.066687][ T5929] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 77.069672][ T5929] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 77.073253][ T5929] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 77.075410][ T5929] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 77.077530][ T5929] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 77.079675][ T5929] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 77.084689][ T5929] bigben 0003:146B:0902.0005: hidraw1: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 77.088157][ T5929] bigben 0003:146B:0902.0005: missing HID_OUTPUT_REPORT 0 [ 77.090386][ T5929] bigben 0003:146B:0902.0005: no output report found [ 77.201948][ T9] usb 6-1: USB disconnect, device number 7 [ 77.469360][ T6442] syz.3.136 uses obsolete (PF_INET,SOCK_PACKET) [ 77.491456][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.494219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.100893][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 78.272485][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.277018][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.283827][ T9] usb 6-1: string descriptor 0 read error: -22 [ 78.286823][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.290856][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.304283][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.308012][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 78.504640][ T5929] usb 6-1: USB disconnect, device number 8 [ 78.990955][ T6019] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.142671][ T6019] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 79.145719][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.152081][ T6019] usb 8-1: config 0 descriptor?? [ 79.290861][ T5939] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 79.450842][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 79.454611][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.458750][ T5939] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.462676][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.468161][ T5939] usb 6-1: config 0 descriptor?? [ 79.473803][ T5939] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 79.491417][ T5937] Bluetooth: hci0: command tx timeout [ 79.563890][ T6019] usb 8-1: Cannot read MAC address [ 79.566683][ T6019] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 79.573700][ T6019] usb 8-1: USB disconnect, device number 6 [ 79.777778][ T6481] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 79.876749][ T6011] usb 6-1: USB disconnect, device number 9 [ 79.950896][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.037141][ T6488] veth2: entered allmulticast mode [ 80.051800][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.100987][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 80.107270][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.128939][ T24] usb 7-1: config 0 has no interface number 0 [ 80.139205][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 80.141676][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.144643][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.144901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.148622][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.155071][ T24] usb 7-1: Product: syz [ 80.156890][ T24] usb 7-1: Manufacturer: syz [ 80.158901][ T24] usb 7-1: SerialNumber: syz [ 80.164034][ T24] usb 7-1: config 0 descriptor?? [ 80.169153][ T24] smsc75xx v1.0.0 [ 80.612077][ T5939] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.763303][ T5939] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 80.773616][ T5939] usb 5-1: config 0 has no interface number 0 [ 80.778455][ T5939] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.933531][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 80.936897][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.986509][ T5939] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.989743][ T5939] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.993684][ T5939] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 80.998736][ T5939] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 81.002099][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 81.004690][ T5939] usb 5-1: Product: syz [ 81.006115][ T5939] usb 5-1: Manufacturer: syz [ 81.007684][ T5939] usb 5-1: SerialNumber: syz [ 81.010626][ T5939] usb 5-1: config 0 descriptor?? [ 81.014582][ T5939] xpad 5-1:0.237: probe with driver xpad failed with error -5 [ 81.113935][ T6510] team0 (unregistering): Port device team_slave_0 removed [ 81.120658][ T6510] team0 (unregistering): Port device team_slave_1 removed [ 81.217116][ T9] usb 5-1: USB disconnect, device number 6 [ 81.336661][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 81.343167][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 81.346290][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.349425][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 81.356567][ T24] usb 7-1: USB disconnect, device number 5 [ 81.977587][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.311180][ T6535] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.168'. [ 82.321294][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 83.185426][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 83.196114][ T40] audit: type=1400 audit(1770625638.621:290): avc: denied { create } for pid=6541 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.254289][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.257168][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.550595][ T40] audit: type=1400 audit(1770625639.111:291): avc: denied { setopt } for pid=6546 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.700460][ T40] audit: type=1400 audit(1770625639.261:292): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.752946][ T40] audit: type=1400 audit(1770625639.311:293): avc: denied { shutdown } for pid=6550 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.762999][ T40] audit: type=1400 audit(1770625639.321:294): avc: denied { getopt } for pid=6550 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.770373][ T40] audit: type=1400 audit(1770625639.331:295): avc: denied { listen } for pid=6550 comm="syz.0.175" lport=44573 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.091499][ T6560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.304867][ T6563] libceph: resolve '.' (ret=-3): failed [ 84.576580][ T40] audit: type=1400 audit(1770625640.141:296): avc: denied { bind } for pid=6574 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.013182][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 85.100930][ T40] audit: type=1400 audit(1770625640.581:297): avc: denied { ioctl } for pid=6580 comm="syz.2.184" path="socket:[11895]" dev="sockfs" ino=11895 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.574876][ T6589] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 85.999331][ T40] audit: type=1400 audit(1770625641.561:298): avc: denied { listen } for pid=6596 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.005601][ T40] audit: type=1400 audit(1770625641.561:299): avc: denied { ioctl } for pid=6596 comm="syz.1.189" path="socket:[11912]" dev="sockfs" ino=11912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.140703][ T6605] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 86.467612][ T59] cfg80211: failed to load regulatory.db [ 87.101084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.161882][ T5929] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 87.176298][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.179285][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.183082][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.186339][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.189660][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.610933][ T6019] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 87.702187][ T5929] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.705317][ T5929] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.708386][ T5929] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.714264][ T5929] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 87.717199][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.720521][ T5929] usb 8-1: Product: syz [ 87.722464][ T5929] usb 8-1: Manufacturer: syz [ 87.724449][ T5929] usb 8-1: SerialNumber: syz [ 87.729586][ T5929] usblp0: Disabling reads from problematic bidirectional printer [ 87.775051][ T6019] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.778890][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.782083][ T6019] usb 5-1: Product: syz [ 87.783514][ T6019] usb 5-1: Manufacturer: syz [ 87.785274][ T6019] usb 5-1: SerialNumber: syz [ 87.789665][ T6019] usb 5-1: config 0 descriptor?? [ 87.935921][ T5929] usblp 8-1:4.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 87.947842][ T5929] usb 8-1: USB disconnect, device number 7 [ 87.953515][ T5929] usblp0: removed [ 87.996039][ T6019] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 88.256548][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 88.256791][ T40] audit: type=1400 audit(1770625643.821:318): avc: denied { write } for pid=6652 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.276439][ T40] audit: type=1400 audit(1770625643.841:319): avc: denied { connect } for pid=6652 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.450891][ T5937] Bluetooth: hci3: command tx timeout [ 88.611206][ T6019] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 88.671801][ T6019] usb 5-1: USB disconnect, device number 7 [ 88.922248][ T40] audit: type=1400 audit(1770625644.441:320): avc: denied { map_create } for pid=6656 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.929992][ T40] audit: type=1400 audit(1770625644.441:321): avc: denied { map_read map_write } for pid=6656 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.937068][ T6659] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 88.939385][ T6659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.942870][ T6659] vhci_hcd vhci_hcd.0: Device attached [ 89.011305][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.014857][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.250488][ T40] audit: type=1400 audit(1770625644.811:322): avc: denied { unmount } for pid=6665 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.280874][ T6037] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 89.360344][ T6660] vhci_hcd: connection closed [ 89.362398][ T12] vhci_hcd vhci_hcd.3: stop threads [ 89.367329][ T12] vhci_hcd vhci_hcd.3: release socket [ 89.372589][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 89.440984][ T6037] usb 6-1: Using ep0 maxpacket: 16 [ 89.444839][ T6037] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 89.448269][ T6037] usb 6-1: config 0 has no interface number 0 [ 89.451145][ T6037] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 89.455257][ T6037] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.460082][ T6037] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.464547][ T6037] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.471328][ T6037] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 89.475368][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.478748][ T6037] usb 6-1: Product: syz [ 89.479922][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 89.480554][ T6037] usb 6-1: Manufacturer: syz [ 89.480874][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.483378][ T9] usb 43-1: enqueue for inactive port 0 [ 89.490623][ T6037] usb 6-1: SerialNumber: syz [ 89.495539][ T6037] usb 6-1: config 0 descriptor?? [ 89.498317][ T6664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.501460][ T6664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.550971][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 89.632334][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.636378][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.00 [ 89.640037][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.645493][ T24] usb 5-1: config 0 descriptor?? [ 89.716788][ T6037] usb 6-1: USB disconnect, device number 10 [ 90.055707][ T24] asus 0003:0B05:196B.0006: ignoring exceeding usage max [ 90.060885][ T24] asus 0003:0B05:196B.0006: hidraw1: USB HID v10.00 Device [HID 0b05:196b] on usb-dummy_hcd.0-1/input0 [ 90.064938][ T24] asus 0003:0B05:196B.0006: Asus input not registered [ 90.075973][ T24] asus 0003:0B05:196B.0006: probe with driver asus failed with error -12 [ 90.255098][ T24] usb 5-1: USB disconnect, device number 8 [ 90.259032][ T40] audit: type=1400 audit(1770625645.821:323): avc: denied { read } for pid=6688 comm="syz.1.221" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.270932][ T40] audit: type=1400 audit(1770625645.821:324): avc: denied { open } for pid=6688 comm="syz.1.221" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.591073][ T40] audit: type=1326 audit(1770625646.151:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.1.224" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a579aeb9 code=0x0 [ 91.528543][ T6709] bond1 (unregistering): Released all slaves [ 91.589029][ T6087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.710996][ T40] audit: type=1400 audit(1770625647.271:326): avc: denied { read } for pid=6715 comm="syz.1.231" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.759721][ T40] audit: type=1400 audit(1770625647.281:327): avc: denied { open } for pid=6715 comm="syz.1.231" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.789427][ T6720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.234411][ T5986] net_ratelimit: 1 callbacks suppressed [ 92.234423][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.361167][ T6733] dns_resolver: Unsupported content type (152) [ 92.811131][ T6739] tipc: Started in network mode [ 92.813023][ T6739] tipc: Node identity 4, cluster identity 4711 [ 92.815009][ T6739] tipc: Node number set to 4 [ 93.381948][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 93.381964][ T40] audit: type=1400 audit(1770625648.951:333): avc: denied { read } for pid=6757 comm="syz.1.245" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.395273][ T40] audit: type=1400 audit(1770625648.961:334): avc: denied { open } for pid=6757 comm="syz.1.245" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.407311][ T40] audit: type=1400 audit(1770625648.971:335): avc: denied { ioctl } for pid=6757 comm="syz.1.245" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.521082][ T5939] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.687534][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.692985][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.697297][ T5939] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 93.701362][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.715647][ T5939] usb 7-1: config 0 descriptor?? [ 93.891371][ T5986] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.043432][ T5986] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.046194][ T5986] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 94.050265][ T5986] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.054254][ T5986] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.059061][ T5986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 94.065963][ T5986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.072238][ T5986] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.076000][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.079320][ T5986] usb 6-1: Product: syz [ 94.092611][ T5986] usb 6-1: Manufacturer: syz [ 94.097555][ T6762] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.103221][ T5986] cdc_wdm 6-1:1.0: skipping garbage [ 94.105457][ T5986] cdc_wdm 6-1:1.0: skipping garbage [ 94.110665][ T5986] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 94.113661][ T5986] cdc_wdm 6-1:1.0: Unknown control protocol [ 94.139843][ T5939] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 94.143528][ T5939] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 94.146025][ T5939] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 94.150702][ T5939] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 94.153320][ T5939] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 94.172848][ T5939] playstation 0003:054C:0DF2.0007: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 94.304739][ T40] audit: type=1400 audit(1770625649.871:336): avc: denied { read write } for pid=6761 comm="syz.1.247" name="cdc-wdm0" dev="devtmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 94.306272][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.312394][ T40] audit: type=1400 audit(1770625649.871:337): avc: denied { open } for pid=6761 comm="syz.1.247" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 94.314457][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.323936][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.326092][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.328224][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.330377][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.332586][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.333285][ T5939] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 199 [ 94.334678][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.337681][ T5939] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 94.339696][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.342575][ T5939] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 94.344564][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.347329][ T5939] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 94.349458][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.353980][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.356076][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.356274][ T5939] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 94.358211][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.363404][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.365510][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.367686][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.369806][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.374216][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 94.376334][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 94.400877][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.539175][ T6037] usb 7-1: USB disconnect, device number 6 [ 94.552652][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 94.556080][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.591874][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 94.594774][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 94.597391][ T9] usb 5-1: Manufacturer: syz [ 94.611408][ T9] usb 5-1: config 0 descriptor?? [ 94.660871][ T9] rc_core: IR keymap rc-hauppauge not found [ 94.662872][ T9] Registered IR keymap rc-empty [ 94.665479][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 94.669571][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 94.675288][ T40] audit: type=1400 audit(1770625650.241:338): avc: denied { read } for pid=5326 comm="acpid" name="event4" dev="devtmpfs" ino=2998 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.685007][ T40] audit: type=1400 audit(1770625650.241:339): avc: denied { open } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2998 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.694913][ T40] audit: type=1400 audit(1770625650.241:340): avc: denied { ioctl } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2998 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.771374][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.774726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.778156][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.781775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.017889][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 147 [ 95.172350][ T40] audit: type=1400 audit(1770625650.741:341): avc: denied { ioctl } for pid=6779 comm="syz.2.253" path="socket:[13461]" dev="sockfs" ino=13461 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 95.232894][ T6037] usb 5-1: USB disconnect, device number 9 [ 95.799430][ T40] audit: type=1400 audit(1770625651.361:342): avc: denied { append } for pid=6792 comm="syz.2.258" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.530946][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.644690][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 96.648159][ T9] usb 6-1: USB disconnect, device number 11 [ 96.759917][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 96.772858][ T29] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 96.775889][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.778417][ T29] usb 8-1: Product: syz [ 96.779756][ T29] usb 8-1: Manufacturer: syz [ 96.787867][ T29] usb 8-1: SerialNumber: syz [ 96.822202][ T29] usb 8-1: config 0 descriptor?? [ 97.267655][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 97.317710][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.349191][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 97.381300][ T29] usb 8-1: media controller created [ 97.439818][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.493412][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 97.511512][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 97.694549][ T5929] usb 8-1: USB disconnect, device number 8 [ 97.771054][ T5929] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 98.244849][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.247388][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.250143][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.253734][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.256266][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.259282][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.528287][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 98.528304][ T40] audit: type=1400 audit(1770625654.091:349): avc: denied { read } for pid=6848 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.542478][ T40] audit: type=1400 audit(1770625654.111:350): avc: denied { write } for pid=6846 comm="syz.3.276" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.554973][ T40] audit: type=1400 audit(1770625654.121:351): avc: denied { ioctl } for pid=6846 comm="syz.3.276" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.580886][ T6853] binder: 6846:6853 ioctl 4018620d 0 returned -22 [ 99.097895][ T40] audit: type=1400 audit(1770625654.661:352): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.521110][ T5986] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 99.802631][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.807683][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.812085][ T5986] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 99.815222][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.821480][ T5986] usb 5-1: config 0 descriptor?? [ 99.902252][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.905578][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.910293][ T6866] syz_tun: entered allmulticast mode [ 99.917131][ T6865] syz_tun: left allmulticast mode [ 100.256409][ T5986] stadia 0003:18D1:9400.0008: hidraw1: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 100.259956][ T5986] stadia 0003:18D1:9400.0008: no inputs found [ 100.262358][ T5986] stadia 0003:18D1:9400.0008: force feedback init failed [ 100.451448][ T6005] usb 5-1: USB disconnect, device number 10 [ 100.521312][ T40] audit: type=1400 audit(1770625656.091:353): avc: denied { ioctl } for pid=6878 comm="syz.1.284" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12261 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.956134][ T6883] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.156212][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.160166][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.166520][ T6890] netlink: 27 bytes leftover after parsing attributes in process `syz.0.286'. [ 101.179632][ T6890] team0: Device ipip0 is up. Set it down before adding it as a team port [ 101.224507][ T40] audit: type=1400 audit(1770625656.731:354): avc: denied { listen } for pid=6884 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.370943][ T6005] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 101.552242][ T6005] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 101.555102][ T6005] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 101.558043][ T6005] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 101.561317][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.572875][ T6005] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 101.736615][ T6903] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.775102][ T6005] gspca_sn9c2028: read1 error -32 [ 101.778776][ T6005] gspca_sn9c2028: read1 error -32 [ 101.960896][ T5929] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 101.986569][ T6005] usb 7-1: USB disconnect, device number 7 [ 102.187300][ T9] kernel write not supported for file /input/mouse0 (pid: 9 comm: kworker/0:0) [ 102.220433][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.223867][ T6919] netlink: 'syz.1.296': attribute type 2 has an invalid length. [ 102.461955][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 102.573540][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 102.577239][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 102.581253][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.588288][ T5929] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 102.593002][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 102.596317][ T5929] usb 8-1: Product: syz [ 102.598014][ T5929] usb 8-1: Manufacturer: syz [ 102.599846][ T5929] usb 8-1: SerialNumber: syz [ 102.604608][ T5929] usb 8-1: config 0 descriptor?? [ 102.700870][ T40] audit: type=1400 audit(1770625658.261:355): avc: denied { bind } for pid=6923 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.817648][ T5929] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 102.837404][ T5929] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 102.951923][ T40] audit: type=1400 audit(1770625658.491:356): avc: denied { mount } for pid=6929 comm="syz.2.300" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.070099][ T5929] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 103.074360][ T5929] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 103.081429][ T5929] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 103.273836][ T5929] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 103.459429][ T40] audit: type=1400 audit(1770625659.021:357): avc: denied { write } for pid=6933 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.470023][ T40] audit: type=1400 audit(1770625659.031:358): avc: denied { read } for pid=6933 comm="syz.1.301" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.995649][ T6947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.305'. [ 104.022433][ T5929] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 104.032496][ T5929] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 104.046875][ T5929] usb 8-1: USB disconnect, device number 9 [ 104.157082][ T5937] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 104.307333][ T6957] pimreg: entered allmulticast mode [ 104.897228][ T6957] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.283344][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 105.283357][ T40] audit: type=1400 audit(1770625660.851:360): avc: denied { write } for pid=6974 comm="syz.1.315" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.320949][ T5986] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 105.473513][ T5986] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.477192][ T5986] usb 5-1: not running at top speed; connect to a high speed hub [ 105.482170][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.486186][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.492547][ T5986] usb 5-1: string descriptor 0 read error: -22 [ 105.495266][ T5986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.498731][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.511765][ T5986] usb 5-1: 0:2 : does not exist [ 105.651397][ T13] net_ratelimit: 1 callbacks suppressed [ 105.651414][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.657973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.790254][ T6985] FAT-fs (loop5): unable to read boot sector [ 105.793744][ T40] audit: type=1400 audit(1770625661.351:361): avc: denied { mounton } for pid=6981 comm="syz.2.318" path="/85/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.454060][ T40] audit: type=1326 audit(1770625662.021:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.320" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc4ad9aeb9 code=0x0 [ 106.504519][ T40] audit: type=1400 audit(1770625662.071:363): avc: denied { create } for pid=6990 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.526868][ T5986] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 106.535403][ T5986] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 106.540504][ T5986] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 106.557901][ T5986] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 106.563081][ T5986] usb 5-1: USB disconnect, device number 11 [ 107.520874][ T7008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.571557][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.728588][ T40] audit: type=1400 audit(1770625663.291:364): avc: denied { write } for pid=7006 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.077892][ T40] audit: type=1400 audit(1770625663.641:365): avc: denied { write } for pid=7013 comm="syz.0.326" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.228701][ T40] audit: type=1400 audit(1770625663.791:366): avc: denied { bind } for pid=7017 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.235615][ T40] audit: type=1400 audit(1770625663.801:367): avc: denied { listen } for pid=7017 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.244519][ T40] audit: type=1400 audit(1770625663.811:368): avc: denied { connect } for pid=7017 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.285787][ T40] audit: type=1400 audit(1770625663.851:369): avc: denied { write } for pid=7017 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.393768][ T7024] process 'syz.1.330' launched './file1' with NULL argv: empty string added [ 109.131841][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.135386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.338401][ T7039] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.383369][ T7040] loop6: detected capacity change from 0 to 2640 [ 109.386244][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.388747][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.392537][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.395097][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.397578][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.400075][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.407978][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.414633][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.418090][ T7040] ldm_validate_partition_table(): Disk read failed. [ 109.441449][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.445118][ T7040] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.450678][ T7040] Dev loop6: unable to read RDB block 0 [ 109.453960][ T7040] loop6: unable to read partition table [ 109.471041][ T7040] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 109.892185][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 109.896001][ T7060] netlink: 'syz.3.341': attribute type 7 has an invalid length. [ 109.899608][ T7060] netlink: 'syz.3.341': attribute type 8 has an invalid length. [ 109.904545][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 109.982445][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 109.985723][ T7064] netlink: 'syz.3.343': attribute type 7 has an invalid length. [ 109.988422][ T7064] netlink: 'syz.3.343': attribute type 8 has an invalid length. [ 109.991304][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 109.996923][ T7064] ip6gretap0: entered promiscuous mode [ 109.999577][ T7064] syz_tun: entered promiscuous mode [ 110.003033][ T7064] gretap0: entered promiscuous mode [ 110.469301][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 110.469312][ T40] audit: type=1400 audit(1770625666.031:375): avc: denied { read write } for pid=7069 comm="syz.2.346" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.480862][ T40] audit: type=1400 audit(1770625666.041:376): avc: denied { open } for pid=7069 comm="syz.2.346" path="/dev/usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.412141][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.415679][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.435730][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.512906][ T40] audit: type=1400 audit(1770625667.081:377): avc: denied { ioctl } for pid=7086 comm="syz.0.353" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.701858][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.210903][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 114.360895][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 114.364779][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.369608][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.376048][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.379851][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.385319][ T24] usb 6-1: Product: syz [ 114.387126][ T24] usb 6-1: Manufacturer: syz [ 114.389174][ T24] usb 6-1: SerialNumber: syz [ 114.512285][ T7121] 9p: Bad value for 'rfdno' [ 114.799350][ T24] usb 6-1: cannot find UAC_HEADER [ 114.819663][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.846038][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.004918][ T6818] usb 6-1: USB disconnect, device number 12 [ 116.131238][ T7123] Set syz1 is full, maxelem 65536 reached [ 116.314356][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.333159][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.337699][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.060896][ T5986] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 117.142976][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.146674][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.171824][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.175860][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.224215][ T5986] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 117.234266][ T40] audit: type=1400 audit(1770625672.801:378): avc: denied { connect } for pid=7156 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.234869][ T7159] netlink: 'syz.0.375': attribute type 13 has an invalid length. [ 117.235717][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.235731][ T5986] usb 8-1: Product: syz [ 117.235739][ T5986] usb 8-1: Manufacturer: syz [ 117.235746][ T5986] usb 8-1: SerialNumber: syz [ 117.236884][ T5986] usb 8-1: config 0 descriptor?? [ 117.287944][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.290929][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.345839][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.351915][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.440958][ T5986] airspy 8-1:0.0: usb_control_msg() failed -71 request 09 [ 117.444171][ T5986] airspy 8-1:0.0: Could not detect board [ 117.448921][ T5986] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 117.455430][ T5986] usb 8-1: USB disconnect, device number 10 [ 117.481895][ T1256] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.485866][ T1256] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.489653][ T1256] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.552571][ T1256] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.574389][ T7165] batman_adv: batadv0: Adding interface: dummy0 [ 117.587946][ T7165] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.600896][ T7165] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 117.801063][ T40] audit: type=1400 audit(1770625673.371:379): avc: denied { ioctl } for pid=7171 comm="syz.0.380" path="socket:[15864]" dev="sockfs" ino=15864 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.623640][ T6087] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 118.718320][ T40] audit: type=1400 audit(1770625674.281:380): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.784985][ T6087] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 118.788812][ T6087] usb 6-1: config 0 has no interface number 0 [ 118.791459][ T6087] usb 6-1: config 0 interface 115 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 118.800536][ T6087] usb 6-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=b3.b2 [ 118.804324][ T6087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.807629][ T6087] usb 6-1: Product: syz [ 118.809823][ T6087] usb 6-1: Manufacturer: syz [ 118.812020][ T6087] usb 6-1: SerialNumber: syz [ 118.825730][ T6087] usb 6-1: config 0 descriptor?? [ 118.846993][ T6087] smsc95xx v2.0.0 [ 118.848749][ T6087] smsc95xx 6-1:0.115 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 118.854913][ T6087] smsc95xx 6-1:0.115: probe with driver smsc95xx failed with error -22 [ 119.050970][ T5986] usb 6-1: USB disconnect, device number 13 [ 119.597414][ T40] audit: type=1400 audit(1770625675.161:381): avc: denied { map } for pid=7201 comm="syz.1.392" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.615470][ T40] audit: type=1400 audit(1770625675.181:382): avc: denied { ioctl } for pid=7201 comm="syz.1.392" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.625920][ T40] audit: type=1400 audit(1770625675.181:383): avc: denied { create } for pid=7201 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.117993][ T40] audit: type=1400 audit(1770625675.681:384): avc: denied { create } for pid=7207 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.175818][ T7209] binder: 7207:7209 ioctl 0 200000000040 returned -22 [ 120.883435][ T7217] comedi comedi0: pcmmio: I/O port conflict (0xfff,32) [ 120.926673][ T40] audit: type=1400 audit(1770625676.491:385): avc: denied { connect } for pid=7218 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.759367][ T7241] kAFS: No cell specified [ 121.907785][ T7245] vlan2: entered promiscuous mode [ 121.914804][ T7245] dummy0: entered promiscuous mode [ 122.452376][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 122.475007][ T40] audit: type=1400 audit(1770625678.041:386): avc: denied { mount } for pid=7258 comm="syz.1.412" name="/" dev="autofs" ino=14900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 122.498409][ T40] audit: type=1400 audit(1770625678.061:387): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 122.552245][ T7264] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.780960][ T5999] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.939437][ T40] audit: type=1400 audit(1770625678.501:388): avc: denied { map } for pid=7270 comm="syz.3.417" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.955749][ T5999] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.959912][ T5999] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.971053][ T5999] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.973959][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.978424][ T7263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.982833][ T5999] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.334919][ T9] usb 5-1: USB disconnect, device number 12 [ 123.420934][ T6087] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 123.571814][ T6087] usb 8-1: Using ep0 maxpacket: 16 [ 123.579068][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.584688][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.589183][ T6087] usb 8-1: config 0 interface 0 has no altsetting 0 [ 123.592109][ T6087] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 123.595781][ T6087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.607505][ T6087] usb 8-1: config 0 descriptor?? [ 123.823858][ T6087] usbhid 8-1:0.0: can't add hid device: -71 [ 123.844526][ T6087] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 123.916319][ T6087] usb 8-1: USB disconnect, device number 11 [ 124.441718][ T40] audit: type=1400 audit(1770625680.001:389): avc: denied { read } for pid=7295 comm="syz.2.426" lport=43306 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.636341][ T6087] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 124.909556][ T7293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 124.913526][ T7293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 125.012053][ T6087] usb 8-1: Using ep0 maxpacket: 16 [ 125.022326][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.025965][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.030003][ T6087] usb 8-1: config 0 interface 0 has no altsetting 0 [ 125.033315][ T6087] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 125.037797][ T6087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.056001][ T6087] usb 8-1: config 0 descriptor?? [ 125.514926][ T6087] nzxt-smart2 0003:1E71:2009.0009: item fetching failed at offset 4/5 [ 125.525220][ T6087] nzxt-smart2 0003:1E71:2009.0009: probe with driver nzxt-smart2 failed with error -22 [ 125.532107][ T7310] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 125.556342][ T7310] syz_tun: entered promiscuous mode [ 125.564395][ T7310] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.705639][ T6087] usb 8-1: USB disconnect, device number 12 [ 126.014509][ T40] audit: type=1400 audit(1770625681.581:390): avc: denied { write } for pid=7316 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.605072][ T40] audit: type=1400 audit(1770625682.171:391): avc: denied { load_policy } for pid=7328 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.773053][ T7329] SELinux: failed to load policy [ 126.891453][ T7335] syzkaller1: entered promiscuous mode [ 126.893273][ T7335] syzkaller1: entered allmulticast mode [ 127.032779][ T40] audit: type=1400 audit(1770625682.601:392): avc: denied { setopt } for pid=7340 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.042636][ T40] audit: type=1400 audit(1770625682.601:393): avc: denied { read } for pid=7340 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.077797][ T40] audit: type=1400 audit(1770625682.641:394): avc: denied { ioctl } for pid=7346 comm="syz.0.446" path="socket:[16169]" dev="sockfs" ino=16169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.224684][ T7368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.233134][ T40] audit: type=1400 audit(1770625682.801:395): avc: denied { create } for pid=7369 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.274999][ T7374] netlink: 'syz.3.458': attribute type 27 has an invalid length. [ 127.301763][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.304213][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.349715][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.356823][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.487549][ T7387] netlink: 236 bytes leftover after parsing attributes in process `syz.2.464'. [ 127.495182][ T7387] netlink: 236 bytes leftover after parsing attributes in process `syz.2.464'. [ 127.499842][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 127.499858][ T40] audit: type=1400 audit(1770625683.061:397): avc: denied { read } for pid=7386 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.528775][ T1149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.533531][ T1149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.539302][ T1149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.543642][ T1149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.582820][ T7392] syzkaller0: entered promiscuous mode [ 127.584760][ T7392] syzkaller0: entered allmulticast mode [ 127.718516][ T7399] netlink: 'syz.2.469': attribute type 12 has an invalid length. [ 127.721223][ T7399] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 127.723673][ T7399] netlink: 148 bytes leftover after parsing attributes in process `syz.2.469'. [ 127.726545][ T7399] netlink: 'syz.2.469': attribute type 2 has an invalid length. [ 127.728986][ T7399] netlink: 23 bytes leftover after parsing attributes in process `syz.2.469'. [ 127.765654][ T40] audit: type=1400 audit(1770625683.331:398): avc: denied { mount } for pid=7400 comm="syz.2.470" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.774115][ T40] audit: type=1400 audit(1770625683.341:399): avc: denied { remount } for pid=7400 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.787263][ T40] audit: type=1400 audit(1770625683.351:400): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.103908][ T40] audit: type=1400 audit(1770625683.671:401): avc: denied { watch watch_reads } for pid=7406 comm="syz.1.473" path="/109/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.150406][ T7409] netlink: 'syz.1.474': attribute type 34 has an invalid length. [ 128.227981][ T40] audit: type=1400 audit(1770625683.791:402): avc: denied { getopt } for pid=7412 comm="syz.1.476" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.281700][ T40] audit: type=1400 audit(1770625683.841:403): avc: denied { write } for pid=7414 comm="syz.1.477" lport=50653 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.292763][ T40] audit: type=1400 audit(1770625683.861:404): avc: denied { setopt } for pid=7414 comm="syz.1.477" lport=50653 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.490716][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.495272][ T7421] bridge_slave_1: left allmulticast mode [ 128.497591][ T7421] bridge_slave_1: left promiscuous mode [ 128.501072][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.571671][ T7425] tipc: Started in network mode [ 128.573806][ T7425] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.578033][ T7425] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 128.581960][ T7425] tipc: Enabled bearer , priority 10 [ 128.627195][ T7428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 128.750326][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 128.941831][ T7444] usb usb1: usbfs: process 7444 (syz.2.490) did not claim interface 0 before use [ 128.970981][ T5999] IPVS: starting estimator thread 0... [ 129.005384][ T40] audit: type=1400 audit(1770625684.571:405): avc: denied { ioctl } for pid=7450 comm="syz.2.494" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.016039][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 129.019646][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 129.023819][ T7453] vlan0: entered promiscuous mode [ 129.071279][ T7449] IPVS: using max 43 ests per chain, 103200 per kthread [ 129.097746][ T40] audit: type=1400 audit(1770625684.661:406): avc: denied { mount } for pid=7458 comm="syz.1.498" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 129.159153][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.500'. [ 129.164662][ T7463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 129.166777][ T7463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.174265][ T7463] vhci_hcd vhci_hcd.0: Device attached [ 129.178220][ T7463] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 129.181062][ T7463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.185531][ T7463] vhci_hcd vhci_hcd.0: Device attached [ 129.207351][ T7463] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 129.210104][ T7463] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.214890][ T7463] vhci_hcd vhci_hcd.0: Device attached [ 129.221722][ T7463] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 129.224533][ T7463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.227768][ T7463] vhci_hcd vhci_hcd.0: Device attached [ 129.229022][ T7478] netlink: 'syz.1.503': attribute type 3 has an invalid length. [ 129.230580][ T7471] vhci_hcd: connection closed [ 129.230637][ T7469] vhci_hcd: connection closed [ 129.233733][ T7475] vhci_hcd: connection closed [ 129.235017][ T7464] vhci_hcd: connection closed [ 129.239265][ T1256] vhci_hcd vhci_hcd.2: stop threads [ 129.243831][ T1256] vhci_hcd vhci_hcd.2: release socket [ 129.246092][ T1256] vhci_hcd vhci_hcd.2: disconnect device [ 129.256878][ T1256] vhci_hcd vhci_hcd.2: stop threads [ 129.259137][ T1256] vhci_hcd vhci_hcd.2: release socket [ 129.270851][ T1256] vhci_hcd vhci_hcd.2: disconnect device [ 129.273312][ T1256] vhci_hcd vhci_hcd.2: stop threads [ 129.275480][ T1256] vhci_hcd vhci_hcd.2: release socket [ 129.277774][ T1256] vhci_hcd vhci_hcd.2: disconnect device [ 129.287401][ T1256] vhci_hcd vhci_hcd.2: stop threads [ 129.289780][ T1256] vhci_hcd vhci_hcd.2: release socket [ 129.300843][ T1256] vhci_hcd vhci_hcd.2: disconnect device [ 129.331928][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 129.718450][ T5929] tipc: Node number set to 1 [ 129.863139][ T7530] tun0: tun_chr_ioctl cmd 1074025688 [ 130.173791][ T7569] kernel read not supported for file /eth0 (pid: 7569 comm: syz.1.538) [ 130.200126][ T7571] Illegal XDP return value 4294967274 on prog (id 30) dev syz_tun, expect packet loss! [ 130.221194][ T7574] capability: warning: `syz.1.540' uses 32-bit capabilities (legacy support in use) [ 130.292020][ T7582] netlink: 'syz.1.544': attribute type 9 has an invalid length. [ 130.353778][ T7592] tipc: Enabling of bearer rejected, failed to enable media [ 130.447048][ T7606] hsr_slave_0: left promiscuous mode [ 130.450092][ T7606] hsr_slave_1: left promiscuous mode [ 130.917750][ T5945] Bluetooth: hci4: sending frame failed (-49) [ 130.920612][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 131.106023][ T7644] vlan0: entered promiscuous mode [ 131.548667][ T7686] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 132.582019][ T7708] gretap0: entered promiscuous mode [ 133.510824][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 133.510836][ T40] audit: type=1400 audit(1770625689.071:437): avc: denied { create } for pid=7723 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.518928][ T40] audit: type=1400 audit(1770625689.081:438): avc: denied { bind } for pid=7723 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.575604][ T7732] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 134.398966][ T7745] __nla_validate_parse: 3 callbacks suppressed [ 134.398984][ T7745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 134.522440][ T7753] netlink: 400 bytes leftover after parsing attributes in process `syz.3.617'. [ 134.622111][ T7767] netlink: 44 bytes leftover after parsing attributes in process `syz.0.624'. [ 134.769738][ T40] audit: type=1400 audit(1770625690.331:439): avc: denied { watch } for pid=7777 comm="syz.0.629" path="/164" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.800940][ T5999] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 134.984077][ T5999] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.988247][ T5999] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.995076][ T5999] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.997542][ T5999] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 135.001433][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.008965][ T5999] usb 7-1: config 0 descriptor?? [ 135.223938][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.227050][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.235983][ T5999] usbhid 7-1:0.0: can't add hid device: -71 [ 135.238807][ T5999] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 135.243554][ T5999] usb 7-1: USB disconnect, device number 8 [ 135.776896][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.635'. [ 135.817321][ T7802] kAFS: No cell specified [ 135.854005][ T7808] netlink: 168 bytes leftover after parsing attributes in process `syz.3.639'. [ 135.969819][ T40] audit: type=1400 audit(1770625691.531:440): avc: denied { mount } for pid=7820 comm="syz.0.647" name="/" dev="hugetlbfs" ino=17107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.033986][ T7825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.649'. [ 136.133868][ T7830] netlink: 168 bytes leftover after parsing attributes in process `syz.0.652'. [ 136.170967][ T6087] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 136.332388][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.336824][ T6087] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.340586][ T6087] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.343363][ T6087] usb 8-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 136.347039][ T6087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.353068][ T6087] usb 8-1: config 0 descriptor?? [ 136.561240][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.565187][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.644423][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 136.648239][ T7840] bridge_slave_1: left allmulticast mode [ 136.659010][ T7840] bridge_slave_1: left promiscuous mode [ 136.663469][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.667820][ T40] audit: type=1400 audit(1770625692.231:441): avc: denied { mounton } for pid=7841 comm="syz.2.657" path="/171/file0" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 136.679455][ T7840] bridge_slave_0: left allmulticast mode [ 136.694447][ T7840] bridge_slave_0: left promiscuous mode [ 136.697942][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.851856][ T6087] usbhid 8-1:0.0: can't add hid device: -71 [ 136.854382][ T6087] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 136.861160][ T6087] usb 8-1: USB disconnect, device number 13 [ 137.167504][ T7854] netlink: 168 bytes leftover after parsing attributes in process `syz.3.662'. [ 137.476147][ T7878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.669'. [ 137.664174][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.666979][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.703451][ T7888] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 137.891696][ T5937] Bluetooth: hci3: command tx timeout [ 138.775704][ T7940] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 139.208660][ T7960] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 139.524979][ T40] audit: type=1400 audit(1770625695.091:442): avc: denied { create } for pid=7979 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.532643][ T7981] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.122660][ T7999] macsec0: entered promiscuous mode [ 140.124542][ T7999] macsec0: entered allmulticast mode [ 140.126257][ T7999] veth1_macvtap: entered allmulticast mode [ 140.607435][ T40] audit: type=1400 audit(1770625696.171:443): avc: denied { connect } for pid=8027 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.223233][ T8083] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 141.303803][ T8089] __nla_validate_parse: 1 callbacks suppressed [ 141.303820][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'. [ 141.311536][ T8089] netlink: 5 bytes leftover after parsing attributes in process `syz.3.764'. [ 141.316050][ T8089] ..0ªî{X¹¦: renamed from gretap0 [ 141.322063][ T8089] ..0ªî{X¹¦: entered allmulticast mode [ 141.326323][ T8089] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 141.927492][ T8130] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 141.973508][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.786'. [ 142.127224][ T40] audit: type=1400 audit(1770625697.691:444): avc: denied { bind } for pid=8157 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.184952][ T8167] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.315969][ T8173] tmpfs: Bad value for 'mpol' [ 142.317982][ T40] audit: type=1400 audit(1770625697.881:445): avc: denied { mounton } for pid=8172 comm="syz.2.803" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 143.550511][ T8218] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.701658][ T8242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 145.708541][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 145.828702][ T8330] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.247727][ T8351] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.821270][ T8394] kAFS: No cell specified [ 146.867252][ T8396] comedi comedi0: pcmmio: I/O port conflict (0xfff,32) [ 147.805375][ T8415] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 148.641556][ T8450] netlink: 'syz.2.925': attribute type 10 has an invalid length. [ 148.645686][ T8450] syz_tun: entered promiscuous mode [ 148.657075][ T8450] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 149.293046][ T8495] kAFS: No cell specified [ 149.575282][ T8478] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.708419][ T8529] netlink: 52 bytes leftover after parsing attributes in process `syz.3.959'. [ 150.752946][ T8533] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.128634][ T8563] binder: 8559:8563 ioctl 0 200000000040 returned -22 [ 151.822943][ T8568] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.156525][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'. [ 152.419992][ T8618] binder: 8615:8618 ioctl 0 200000000040 returned -22 [ 153.169383][ T8648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1009'. [ 153.894406][ T8681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 154.098139][ T8667] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 154.115309][ T8702] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1032'. [ 154.152875][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1033'. [ 154.734265][ T8731] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1045'. [ 154.978060][ T8747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1053'. [ 155.209809][ T8726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 155.321249][ T8783] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.334275][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 155.438234][ T8803] netlink: 'syz.1.1077': attribute type 13 has an invalid length. [ 155.441207][ T8803] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1077'. [ 155.627058][ T8814] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.765835][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 155.828533][ T8822] usb usb1: check_ctrlrecip: process 8822 (syz.1.1086) requesting ep 01 but needs 81 [ 156.302284][ T8805] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 156.341408][ T8839] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1093'. [ 156.370042][ T8841] netlink: 'syz.3.1094': attribute type 12 has an invalid length. [ 156.372689][ T8841] netlink: 'syz.3.1094': attribute type 29 has an invalid length. [ 156.375182][ T8841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1094'. [ 156.378015][ T8841] netlink: 'syz.3.1094': attribute type 2 has an invalid length. [ 156.380413][ T8841] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1094'. [ 156.653658][ T8860] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1103'. [ 156.756519][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 156.793992][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 157.013342][ T8882] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 157.295930][ T8885] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1114'. [ 157.334810][ T40] audit: type=1400 audit(1770625712.901:446): avc: denied { write } for pid=8886 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.525682][ T8862] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 157.618891][ T8894] binder: 8892:8894 ioctl 0 200000000040 returned -22 [ 157.847608][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 158.015097][ T8915] netlink: 'syz.0.1129': attribute type 12 has an invalid length. [ 158.017639][ T8915] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 158.020357][ T8915] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1129'. [ 158.081455][ T8920] netlink: 'syz.0.1131': attribute type 3 has an invalid length. [ 158.084811][ T8920] netlink: 'syz.0.1131': attribute type 2 has an invalid length. [ 158.273940][ T8937] netlink: 'syz.0.1139': attribute type 12 has an invalid length. [ 158.276542][ T8937] netlink: 'syz.0.1139': attribute type 29 has an invalid length. [ 158.681933][ T8979] binder: 8973:8979 ioctl 0 200000000040 returned -22 [ 159.463006][ T5986] hid-generic 0080:0005:FFFFFFFD.000A: unknown main item tag 0x0 [ 159.466307][ T5986] hid-generic 0080:0005:FFFFFFFD.000A: unknown main item tag 0x0 [ 159.479543][ T5986] hid-generic 0080:0005:FFFFFFFD.000A: hidraw1: HID v0.03 Device [syz0] on syz1 [ 159.531490][ T9018] fido_id[9018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.815054][ T9042] binder: 9038:9042 ioctl 0 200000000040 returned -22 [ 159.898644][ T40] audit: type=1400 audit(1770625715.461:447): avc: denied { write } for pid=6005 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22416 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.137674][ T9059] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 161.573558][ T9109] __nla_validate_parse: 18 callbacks suppressed [ 161.573938][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 162.594278][ T9120] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 162.950509][ T9174] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 163.320184][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 163.323167][ T9199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1255'. [ 163.385678][ T9203] validate_nla: 6 callbacks suppressed [ 163.385689][ T9203] netlink: 'syz.0.1257': attribute type 12 has an invalid length. [ 163.390517][ T9203] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 163.393883][ T9203] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1257'. [ 163.397392][ T9203] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1257'. [ 163.490918][ T5986] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 163.562333][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 163.566059][ T9219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1265'. [ 163.655537][ T5986] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 163.659325][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.663061][ T5986] usb 7-1: Product: syz [ 163.664880][ T5986] usb 7-1: Manufacturer: syz [ 163.666845][ T5986] usb 7-1: SerialNumber: syz [ 163.880973][ T5986] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 163.887015][ T5986] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 163.892496][ T5986] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.897563][ T5986] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 163.906978][ T5986] usb 7-1: USB disconnect, device number 9 [ 164.142938][ T9237] netlink: 'syz.0.1272': attribute type 12 has an invalid length. [ 164.146371][ T9237] netlink: 'syz.0.1272': attribute type 29 has an invalid length. [ 164.149622][ T9237] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1272'. [ 164.153787][ T9237] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1272'. [ 164.324889][ T9253] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 164.456969][ T9265] netlink: 'syz.2.1284': attribute type 12 has an invalid length. [ 164.459465][ T9265] netlink: 'syz.2.1284': attribute type 29 has an invalid length. [ 164.463774][ T9265] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1284'. [ 164.712771][ T9288] netlink: 'syz.0.1294': attribute type 12 has an invalid length. [ 164.716106][ T9288] netlink: 'syz.0.1294': attribute type 29 has an invalid length. [ 164.999706][ T40] audit: type=1400 audit(1770625720.561:448): avc: denied { sqpoll } for pid=9308 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.218875][ T9316] netlink: 'syz.2.1306': attribute type 12 has an invalid length. [ 165.221830][ T9316] netlink: 'syz.2.1306': attribute type 29 has an invalid length. [ 166.817747][ T9433] __nla_validate_parse: 11 callbacks suppressed [ 166.817759][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 166.828823][ T9433] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1360'. [ 166.833810][ T9435] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1359'. [ 166.888974][ T29] IPVS: starting estimator thread 0... [ 166.891104][ T9437] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.900489][ T9447] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1365'. [ 166.904249][ T9437] capability: warning: `syz.3.1361' uses deprecated v2 capabilities in a way that may be insecure [ 166.917381][ T9447] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1365'. [ 166.969617][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 166.973690][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'. [ 166.983202][ T9446] IPVS: using max 42 ests per chain, 100800 per kthread [ 167.152928][ T9477] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1379'. [ 167.155818][ T9477] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1379'. [ 167.205047][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 167.574739][ T9532] No such timeout policy "syz0" [ 167.638102][ T40] audit: type=1400 audit(1770625723.201:449): avc: denied { getopt } for pid=9540 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.809214][ T9558] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 167.992254][ T40] audit: type=1400 audit(1770625723.551:450): avc: denied { read } for pid=9570 comm="syz.1.1423" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 168.002893][ T40] audit: type=1400 audit(1770625723.571:451): avc: denied { open } for pid=9570 comm="syz.1.1423" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 168.016801][ T40] audit: type=1400 audit(1770625723.581:452): avc: denied { write } for pid=9570 comm="syz.1.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.149827][ T40] audit: type=1326 audit(1770625723.711:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.1427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 168.167581][ T40] audit: type=1326 audit(1770625723.711:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.1427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 168.177510][ T40] audit: type=1326 audit(1770625723.711:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.1427" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 168.187479][ T40] audit: type=1326 audit(1770625723.711:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.1427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 168.197264][ T40] audit: type=1326 audit(1770625723.711:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.1427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 168.430524][ T9597] validate_nla: 9 callbacks suppressed [ 168.430540][ T9597] netlink: 'syz.3.1435': attribute type 12 has an invalid length. [ 168.436223][ T9597] netlink: 'syz.3.1435': attribute type 29 has an invalid length. [ 169.417708][ T9607] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.943642][ T9680] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 170.344868][ T9701] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 170.425435][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 170.425451][ T40] audit: type=1400 audit(1770625725.991:505): avc: denied { create } for pid=9707 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.440193][ T40] audit: type=1400 audit(1770625726.001:506): avc: denied { write } for pid=9707 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.589190][ T9725] netlink: 'syz.0.1486': attribute type 12 has an invalid length. [ 170.593231][ T9725] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 170.710163][ T40] audit: type=1400 audit(1770625726.271:507): avc: denied { getopt } for pid=9738 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.788746][ T40] audit: type=1326 audit(1770625726.351:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.2.1494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 170.801212][ T40] audit: type=1326 audit(1770625726.351:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.2.1494" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 170.808678][ T40] audit: type=1326 audit(1770625726.351:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.2.1494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7758d9aeb9 code=0x7ffc0000 [ 170.903814][ T9753] netlink: 'syz.3.1499': attribute type 12 has an invalid length. [ 170.906918][ T9753] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 171.332078][ T9787] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 171.405487][ T1256] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.409276][ T1256] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.414144][ T1256] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.417287][ T1256] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.462542][ T9803] netlink: 'syz.3.1523': attribute type 12 has an invalid length. [ 171.465169][ T9803] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 171.545640][ T9810] netlink: 'syz.1.1526': attribute type 3 has an invalid length. [ 171.704940][ T9826] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 171.778113][ T9836] netlink: 'syz.2.1537': attribute type 3 has an invalid length. [ 171.855560][ T9844] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 171.887585][ T9846] syzkaller0: entered promiscuous mode [ 171.889393][ T9846] syzkaller0: entered allmulticast mode [ 172.069263][ T9852] __nla_validate_parse: 35 callbacks suppressed [ 172.069280][ T9852] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1545'. [ 172.485672][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'. [ 172.489530][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 172.527218][ T5999] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 172.531488][ T5999] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 172.617230][ T9838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.044214][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 173.047163][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1559'. [ 173.507669][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 173.511795][ T9927] validate_nla: 4 callbacks suppressed [ 173.511804][ T9927] netlink: 'syz.2.1568': attribute type 3 has an invalid length. [ 173.515999][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'. [ 173.710499][ T40] audit: type=1400 audit(1770625729.271:511): avc: denied { write } for pid=9940 comm="syz.2.1574" path="socket:[28344]" dev="sockfs" ino=28344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.056011][ T40] audit: type=1400 audit(1770625729.621:512): avc: denied { append } for pid=9965 comm="syz.0.1585" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.250460][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1590'. [ 174.254314][ T9977] netlink: 'syz.0.1590': attribute type 3 has an invalid length. [ 174.257323][ T9977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 174.957423][ T9998] syzkaller0: entered promiscuous mode [ 174.959268][ T9998] syzkaller0: entered allmulticast mode [ 175.571433][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 175.580862][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 175.947443][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1608'. [ 175.950263][T10026] netlink: 'syz.3.1608': attribute type 3 has an invalid length. [ 176.007729][ T40] audit: type=1400 audit(1770625731.571:513): avc: denied { create } for pid=10038 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 176.017113][ T40] audit: type=1400 audit(1770625731.571:514): avc: denied { sys_admin } for pid=10038 comm="syz.2.1613" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 176.411489][T10058] netlink: 'syz.3.1620': attribute type 3 has an invalid length. [ 176.909547][T10084] syzkaller0: entered promiscuous mode [ 176.912662][T10084] syzkaller0: entered allmulticast mode [ 177.059682][T10090] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 177.125775][T10098] tipc: Started in network mode [ 177.127321][T10098] tipc: Node identity 4, cluster identity 4711 [ 177.129199][T10098] tipc: Node number set to 4 [ 177.220580][T10107] syzkaller0: entered promiscuous mode [ 177.222952][T10107] syzkaller0: entered allmulticast mode [ 177.414720][T10114] __nla_validate_parse: 5 callbacks suppressed [ 177.414731][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 177.419617][T10114] netlink: 'syz.3.1644': attribute type 3 has an invalid length. [ 177.422116][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 177.422573][ T6087] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 177.436353][ T6087] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 177.659997][T10133] program syz.3.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.702749][T10135] syzkaller0: entered promiscuous mode [ 177.705076][T10135] syzkaller0: entered allmulticast mode [ 177.795741][ T40] audit: type=1400 audit(1770625733.361:515): avc: denied { create } for pid=10138 comm="syz.1.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.946224][T10155] tmpfs: Bad value for 'mpol' [ 178.549673][ T40] audit: type=1400 audit(1770625734.111:516): avc: denied { bind } for pid=10178 comm="syz.0.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.839324][ T5999] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 178.844865][ T5999] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 179.419644][T10183] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 179.490708][T10218] syzkaller0: entered promiscuous mode [ 179.496523][T10218] syzkaller0: entered allmulticast mode [ 179.749569][ T6087] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 179.762345][ T6087] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 180.173187][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 180.479732][T10258] syzkaller0: entered promiscuous mode [ 180.481798][T10258] syzkaller0: entered allmulticast mode [ 180.629656][ T6037] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 180.633516][ T6037] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 180.841871][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 180.845853][T10243] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.064691][T10285] syzkaller0: entered promiscuous mode [ 181.066428][T10285] syzkaller0: entered allmulticast mode [ 181.172959][T10289] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 181.251196][ T6087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 181.254538][ T6087] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 181.309444][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1720'. [ 181.347760][T10301] tipc: Started in network mode [ 181.349453][T10301] tipc: Node identity 4, cluster identity 4711 [ 181.351630][T10301] tipc: Node number set to 4 [ 181.473289][T10307] syzkaller0: entered promiscuous mode [ 181.475665][T10307] syzkaller0: entered allmulticast mode [ 181.765206][ T6005] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 181.771912][ T6005] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 181.782501][T10326] syzkaller0: entered promiscuous mode [ 181.784339][T10326] syzkaller0: entered allmulticast mode [ 182.055061][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 182.269056][T10357] syzkaller0: entered promiscuous mode [ 182.272299][T10357] syzkaller0: entered allmulticast mode [ 182.391443][ T6087] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 182.397189][ T6087] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 182.598095][T10365] batman_adv: batadv0: Adding interface: dummy0 [ 182.600708][T10365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.608473][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 182.613337][T10365] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 182.617781][ T40] audit: type=1400 audit(1770625738.181:517): avc: denied { ioctl } for pid=10364 comm="syz.3.1748" path="socket:[29876]" dev="sockfs" ino=29876 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.821672][T10382] syzkaller0: entered promiscuous mode [ 182.823528][T10382] syzkaller0: entered allmulticast mode [ 182.889361][ T6005] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.905858][ T6005] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 182.918834][T10388] bridge0: entered promiscuous mode [ 182.922735][T10388] bridge0: port 2(macsec1) entered blocking state [ 182.925099][T10388] bridge0: port 2(macsec1) entered disabled state [ 182.927415][T10388] macsec1: entered allmulticast mode [ 182.929135][T10388] bridge0: entered allmulticast mode [ 182.932665][T10388] macsec1: left allmulticast mode [ 182.934312][T10388] bridge0: left allmulticast mode [ 182.937307][T10388] bridge0: left promiscuous mode [ 183.466469][T10420] syzkaller0: entered promiscuous mode [ 183.468275][T10420] syzkaller0: entered allmulticast mode [ 183.481669][ T6005] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 183.638655][ T6005] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 183.644866][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.648294][ T6005] usb 8-1: Product: syz [ 183.649696][ T6005] usb 8-1: Manufacturer: syz [ 183.651809][ T6005] usb 8-1: SerialNumber: syz [ 183.661201][ T5986] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 183.666279][ T5986] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 183.858490][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 183.871263][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 183.875165][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 183.878913][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.884083][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.887887][ T6005] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 183.897144][ T6005] usb 8-1: USB disconnect, device number 14 [ 184.039012][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 184.042928][ T24] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz1] on syz0 [ 184.865725][ T24] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 184.965768][ T5986] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 184.970712][ T5986] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 185.033214][ T24] usb 8-1: Invalid ep0 maxpacket: 64 [ 185.161877][ T24] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 185.333488][ T24] usb 8-1: Invalid ep0 maxpacket: 64 [ 185.339614][ T24] usb usb8-port1: attempt power cycle [ 185.359335][ T6019] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 185.370480][ T6019] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz1] on syz0 [ 185.504393][ T40] audit: type=1400 audit(1770625741.071:518): avc: denied { read } for pid=10536 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.710859][ T24] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 185.731578][ T24] usb 8-1: Invalid ep0 maxpacket: 64 [ 185.860955][ T24] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 185.882021][ T24] usb 8-1: Invalid ep0 maxpacket: 64 [ 185.887441][ T24] usb usb8-port1: unable to enumerate USB device [ 186.073401][ T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 186.133537][ T24] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz1] on syz0 [ 186.159587][T10557] fido_id[10557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.466090][ T40] audit: type=1400 audit(1770625742.031:519): avc: denied { append } for pid=10588 comm="syz.1.1841" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.900226][ T40] audit: type=1326 audit(1770625742.461:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.907452][ T40] audit: type=1326 audit(1770625742.461:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.915164][ T40] audit: type=1326 audit(1770625742.461:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.923620][ T40] audit: type=1326 audit(1770625742.461:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.931475][ T40] audit: type=1326 audit(1770625742.461:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.938673][ T40] audit: type=1326 audit(1770625742.461:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 186.946670][ T40] audit: type=1326 audit(1770625742.461:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.1.1847" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a579aeb9 code=0x7ffc0000 [ 188.106199][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 188.106211][ T40] audit: type=1400 audit(1770625743.671:529): avc: denied { setopt } for pid=10651 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.108136][T10654] netlink: 'syz.1.1867': attribute type 3 has an invalid length. [ 188.108618][ T40] audit: type=1400 audit(1770625743.671:530): avc: denied { read } for pid=10651 comm="syz.3.1866" lport=20369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.115191][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1867'. [ 188.235612][ T40] audit: type=1400 audit(1770625743.801:531): avc: denied { connect } for pid=10660 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.454836][T10703] netlink: 'syz.0.1886': attribute type 3 has an invalid length. [ 189.457312][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'. [ 189.782652][T10725] netlink: 'syz.1.1896': attribute type 3 has an invalid length. [ 189.785200][T10725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1896'. [ 189.787809][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1897'. [ 189.794052][T10727] geneve2: entered promiscuous mode [ 190.681574][T10772] netlink: 'syz.1.1916': attribute type 13 has an invalid length. [ 190.727699][T10776] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 190.731364][T10776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1918'. [ 190.777753][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.784519][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.850620][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.853644][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.856476][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.859358][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.011271][T10785] mmap: syz.3.1921 (10785): VmData 37462016 exceed data ulimit 18507. Update limits or use boot option ignore_rlimit_data. [ 191.125860][T10801] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 191.129647][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1927'. [ 191.263131][T10816] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 191.494890][T10832] netlink: 'syz.1.1938': attribute type 3 has an invalid length. [ 191.497577][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1938'. [ 191.895504][T10863] netlink: 'syz.1.1949': attribute type 3 has an invalid length. [ 191.898624][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'. [ 192.198643][T10894] netlink: 'syz.3.1961': attribute type 3 has an invalid length. [ 192.201229][T10894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1961'. [ 192.229530][T10896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1962'. [ 192.342516][ T40] audit: type=1400 audit(1770625747.901:532): avc: denied { relabelfrom } for pid=10906 comm="syz.3.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 192.348677][ T40] audit: type=1400 audit(1770625747.911:533): avc: denied { relabelto } for pid=10906 comm="syz.3.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 192.356498][ T40] audit: type=1400 audit(1770625747.911:534): avc: denied { ioctl } for pid=10906 comm="syz.3.1967" path="socket:[32162]" dev="sockfs" ino=32162 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.372782][T10908] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 193.121870][T10916] netlink: 'syz.1.1970': attribute type 3 has an invalid length. [ 193.124408][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1970'. [ 193.245969][T10923] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1972'. [ 193.249646][T10923] ksmbd: Unknown IPC event: 4, ignore. [ 193.430149][T10940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 193.595414][ T40] audit: type=1400 audit(1770625749.161:535): avc: denied { block_suspend } for pid=10956 comm="syz.2.1985" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.921668][T10975] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.167928][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1998'. [ 194.918625][ T40] audit: type=1400 audit(1770625750.481:536): avc: denied { bind } for pid=11070 comm="syz.2.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.919846][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 196.118478][T11177] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 196.122477][ T40] audit: type=1400 audit(1770625751.691:537): avc: denied { relabelto } for pid=11176 comm="syz.1.2052" name="474" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 196.134174][ T40] audit: type=1400 audit(1770625751.691:538): avc: denied { associate } for pid=11176 comm="syz.1.2052" name="474" dev="tmpfs" ino=2419 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 196.144427][ T40] audit: type=1400 audit(1770625751.691:539): avc: denied { add_name } for pid=11176 comm="syz.1.2052" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 196.158578][ T40] audit: type=1400 audit(1770625751.691:540): avc: denied { create } for pid=11176 comm="syz.1.2052" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 196.169125][ T40] audit: type=1400 audit(1770625751.691:541): avc: denied { associate } for pid=11176 comm="syz.1.2052" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.179543][ T40] audit: type=1400 audit(1770625751.711:542): avc: denied { remove_name } for pid=5927 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 196.191732][ T40] audit: type=1400 audit(1770625751.711:543): avc: denied { rmdir } for pid=5927 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 196.203290][ T40] audit: type=1400 audit(1770625751.711:544): avc: denied { rmdir } for pid=5927 comm="syz-executor" name="474" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 196.557269][T11196] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2060'. [ 196.957036][T11219] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2070'. [ 197.896457][T11246] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2081'. [ 198.483371][T11273] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 198.893900][T11280] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2093'. [ 199.095454][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.097676][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.281297][T11304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2103'. [ 199.321241][T11311] syz_tun: entered allmulticast mode [ 199.324960][T11309] syz_tun: left allmulticast mode [ 199.496852][T11324] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 200.196107][T11360] netlink: 'syz.3.2124': attribute type 3 has an invalid length. [ 200.198708][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'. [ 200.562006][T11386] netlink: 'syz.3.2136': attribute type 3 has an invalid length. [ 200.564552][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2136'. [ 200.601867][T11390] syzkaller0: entered promiscuous mode [ 200.603640][T11390] syzkaller0: entered allmulticast mode [ 200.693189][T11392] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 201.032461][T11408] tipc: Enabled bearer , priority 0 [ 201.053022][T11408] syzkaller0: entered promiscuous mode [ 201.055246][T11408] syzkaller0: entered allmulticast mode [ 201.057452][T11408] tipc: Resetting bearer [ 201.067300][T11407] tipc: Resetting bearer [ 201.119389][T11412] netlink: 'syz.1.2147': attribute type 3 has an invalid length. [ 201.122050][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2147'. [ 201.539404][ T40] audit: type=1400 audit(1770625757.101:545): avc: denied { read } for pid=11422 comm="syz.0.2150" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 201.547878][ T40] audit: type=1400 audit(1770625757.101:546): avc: denied { open } for pid=11422 comm="syz.0.2150" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 201.982246][T11407] tipc: Disabling bearer [ 202.098977][T11444] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2160'. [ 202.173553][T11451] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 202.307835][T11461] syzkaller0: entered promiscuous mode [ 202.309733][T11461] syzkaller0: entered allmulticast mode [ 202.490625][T11468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2169'. [ 202.980126][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2178'. [ 203.189084][T11512] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.265363][T11518] syzkaller0: entered promiscuous mode [ 203.267158][T11518] syzkaller0: entered allmulticast mode [ 203.553870][T11535] syz_tun: entered allmulticast mode [ 203.556333][T11534] syz_tun: left allmulticast mode [ 203.862194][T11542] syzkaller0: entered promiscuous mode [ 203.864445][T11542] syzkaller0: entered allmulticast mode [ 203.976057][T11552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.169041][T11570] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 204.294138][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 204.392007][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 204.395624][T11595] netlink: 'syz.2.2222': attribute type 7 has an invalid length. [ 204.398731][T11595] netlink: 'syz.2.2222': attribute type 8 has an invalid length. [ 204.402079][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 204.408279][T11595] ip6gretap0: entered promiscuous mode [ 204.412968][T11595] ip6gretap0: left promiscuous mode [ 204.425730][T11597] syzkaller0: entered promiscuous mode [ 204.427709][T11597] syzkaller0: entered allmulticast mode [ 204.942565][T11617] syzkaller0: entered promiscuous mode [ 204.944968][T11617] syzkaller0: entered allmulticast mode [ 205.207049][T11644] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 205.265504][T11651] syzkaller0: entered promiscuous mode [ 205.267249][T11651] syzkaller0: entered allmulticast mode [ 206.083553][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2265'. [ 206.230680][ T40] audit: type=1400 audit(1770625761.791:547): avc: denied { mount } for pid=11708 comm="syz.1.2271" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.247297][ T40] audit: type=1400 audit(1770625761.811:548): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.250713][T11712] syzkaller0: entered promiscuous mode [ 206.255584][T11712] syzkaller0: entered allmulticast mode [ 206.362055][T11726] 9p: Bad value for 'rfdno' [ 206.390832][ T40] audit: type=1326 audit(1770625761.951:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.0.2279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3279d9aeb9 code=0x7ffc0000 [ 206.399322][ T40] audit: type=1326 audit(1770625761.951:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.0.2279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3279d9aeb9 code=0x7ffc0000 [ 206.406651][ T40] audit: type=1326 audit(1770625761.951:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.0.2279" exe="/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f3279d9aeb9 code=0x7ffc0000 [ 206.414059][ T40] audit: type=1326 audit(1770625761.951:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.0.2279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3279d9aeb9 code=0x7ffc0000 [ 206.421359][ T40] audit: type=1326 audit(1770625761.951:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11727 comm="syz.0.2279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3279d9aeb9 code=0x7ffc0000 [ 206.428394][ T40] audit: type=1400 audit(1770625761.971:554): avc: denied { write } for pid=11733 comm="syz.0.2282" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.515132][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 206.616765][T11753] syzkaller0: entered promiscuous mode [ 206.618600][T11753] syzkaller0: entered allmulticast mode [ 206.708300][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'. [ 206.811733][ T40] audit: type=1400 audit(1770625762.381:555): avc: denied { lock } for pid=11774 comm="syz.0.2302" path="socket:[34329]" dev="sockfs" ino=34329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 206.866212][T11780] syzkaller0: entered promiscuous mode [ 206.868089][T11780] syzkaller0: entered allmulticast mode [ 207.237782][T11821] syzkaller0: entered promiscuous mode [ 207.239605][T11821] syzkaller0: entered allmulticast mode [ 207.271962][T11826] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 207.603736][T11854] syzkaller0: entered promiscuous mode [ 207.605576][T11854] syzkaller0: entered allmulticast mode [ 207.630746][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.753787][ T40] audit: type=1400 audit(1770625763.321:556): avc: denied { execute } for pid=11867 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 207.762576][ T40] audit: type=1400 audit(1770625763.321:557): avc: denied { execute_no_trans } for pid=11867 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 207.820325][ T5937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.825172][ T5937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.829072][ T5937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.834356][ T5937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.837131][ T5937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.954951][T11872] chnl_net:caif_netlink_parms(): no params data found [ 208.008994][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.011948][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.014303][T11872] bridge_slave_0: entered allmulticast mode [ 208.016993][T11872] bridge_slave_0: entered promiscuous mode [ 208.021309][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.023785][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.026143][T11872] bridge_slave_1: entered allmulticast mode [ 208.028837][T11872] bridge_slave_1: entered promiscuous mode [ 208.043829][T11872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.048087][T11872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.062518][T11872] team0: Port device team_slave_0 added [ 208.065518][T11872] team0: Port device team_slave_1 added [ 208.078610][T11872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.081590][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.092580][T11872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.096796][T11872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.099001][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.114469][T11872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.135721][T11886] syzkaller0: entered promiscuous mode [ 208.137947][T11886] syzkaller0: entered allmulticast mode [ 208.143786][T11872] hsr_slave_0: entered promiscuous mode [ 208.146519][T11872] hsr_slave_1: entered promiscuous mode [ 208.149100][T11872] debugfs: 'hsr0' already exists in 'hsr' [ 208.152189][T11872] Cannot create hsr debugfs directory [ 208.216803][ T6052] bond0: (slave syz_tun): Releasing backup interface [ 208.284950][T11872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.288334][T11872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.492636][T11872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.495847][T11872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.510487][T11903] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 208.567083][T11872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.571679][ C3] ------------[ cut here ]------------ [ 208.573462][T11872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.573632][ C3] sk->sk_forward_alloc [ 208.576814][ C3] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x653/0x800, CPU#3: syz.0.2356/11897 [ 208.581689][ C3] Modules linked in: [ 208.583287][ C3] CPU: 3 UID: 0 PID: 11897 Comm: syz.0.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.586879][ C3] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.588337][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.591688][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 208.593784][ C3] Code: a9 4f ff e9 06 fd ff ff e8 2a 19 14 f8 90 0f 0b 90 e9 35 fe ff ff e8 1c 19 14 f8 90 0f 0b 90 e9 c5 fe ff ff e8 0e 19 14 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 00 19 14 f8 90 0f 0b 90 e9 65 fe ff ff [ 208.600038][ C3] RSP: 0018:ffffc900006f8d98 EFLAGS: 00010246 [ 208.602181][ C3] RAX: 0000000000000000 RBX: ffff8881042ea100 RCX: ffffffff89f2e537 [ 208.604755][ C3] RDX: ffff88805a758000 RSI: ffffffff89f2e632 RDI: ffff88805a758000 [ 208.607364][ C3] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 208.610162][ C3] R10: 0000000000000090 R11: 0000000000000000 R12: ffff8881042ea100 [ 208.612923][ C3] R13: ffff8881042ea190 R14: ffffffff81ece74b R15: 0000000000000000 [ 208.615537][ C3] FS: 0000000000000000(0000) GS:ffff8880d68d9000(0000) knlGS:0000000000000000 [ 208.618553][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.620826][ C3] CR2: 00007fd5a5a17dac CR3: 0000000037c4f000 CR4: 0000000000352ef0 [ 208.623708][ C3] Call Trace: [ 208.625011][ C3] [ 208.626262][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.628058][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 208.630112][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.631679][ C3] __sk_destruct+0x85/0xbb0 [ 208.633235][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.634883][ C3] rcu_core+0x7c0/0x15c0 [ 208.636319][ C3] ? __hrtimer_run_queues+0x7e0/0x990 [ 208.638105][ C3] ? __pfx_rcu_core+0x10/0x10 [ 208.639753][ C3] ? ktime_get+0x1a7/0x300 [ 208.641341][ C3] ? mark_held_locks+0x40/0x70 [ 208.642959][ C3] handle_softirqs+0x1ea/0x910 [ 208.644582][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 208.646326][ C3] __irq_exit_rcu+0xef/0x150 [ 208.647867][ C3] irq_exit_rcu+0x9/0x30 [ 208.649302][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 208.651304][ C3] [ 208.652344][ C3] [ 208.653332][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.655364][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 208.657537][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 6b 69 f6 48 89 df e8 62 b9 69 f6 e8 ad 30 95 f6 fb bf 01 00 00 00 22 08 5a f6 65 8b 05 1b b9 6a 08 85 c0 74 06 5b e9 81 4a 00 00 [ 208.664013][ C3] RSP: 0018:ffffc9000707f590 EFLAGS: 00000206 [ 208.666037][ C3] RAX: 0000000000004159 RBX: ffff888056253768 RCX: 0000000000000040 [ 208.668655][ C3] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: 0000000000000001 [ 208.671341][ C3] RBP: ffff888056253760 R08: 0000000000000001 R09: 0000000000000000 [ 208.674064][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056253768 [ 208.676691][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 208.679310][ C3] filemap_remove_folio+0x104/0x270 [ 208.681100][ C3] truncate_inode_folio+0x49/0x70 [ 208.682924][ C3] shmem_undo_range+0x3ae/0x1570 [ 208.684646][ C3] ? __pfx_shmem_undo_range+0x10/0x10 [ 208.686418][ C3] ? __lock_acquire+0x4a5/0x2630 [ 208.688066][ C3] ? find_held_lock+0x2b/0x80 [ 208.689648][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 208.691517][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 208.693251][ C3] ? percpu_counter_add_batch+0xb9/0x230 [ 208.695096][ C3] shmem_evict_inode+0x39e/0xbd0 [ 208.696817][ C3] ? inode_wait_for_writeback+0x171/0x390 [ 208.698679][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 208.700541][ C3] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 208.702685][ C3] ? find_held_lock+0x2b/0x80 [ 208.704355][ C3] ? evict+0x37e/0xad0 [ 208.705739][ C3] ? evict+0x37e/0xad0 [ 208.707122][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 208.708928][ C3] evict+0x3c2/0xad0 [ 208.710299][ C3] ? find_held_lock+0x2b/0x80 [ 208.712009][ C3] ? __pfx_evict+0x10/0x10 [ 208.713514][ C3] ? iput.part.0+0x61c/0x1150 [ 208.715081][ C3] iput.part.0+0x624/0x1150 [ 208.716611][ C3] iput+0x35/0x40 [ 208.717863][ C3] dentry_unlink_inode+0x2a1/0x490 [ 208.719555][ C3] __dentry_kill+0x1d0/0x600 [ 208.721113][ C3] finish_dput+0x76/0x480 [ 208.722535][ C3] dput.part.0+0x456/0x570 [ 208.723956][ C3] dput+0x1f/0x30 [ 208.725183][ C3] __fput+0x519/0xb40 [ 208.726472][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.728181][ C3] task_work_run+0x150/0x240 [ 208.729754][ C3] ? __pfx_task_work_run+0x10/0x10 [ 208.731601][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 208.733324][ C3] do_exit+0x829/0x2a30 [ 208.734707][ C3] ? signal_wake_up_state+0x8d/0x130 [ 208.736452][ C3] ? __pfx_do_exit+0x10/0x10 [ 208.737980][ C3] ? do_group_exit+0x1bd/0x2a0 [ 208.739572][ C3] ? do_group_exit+0x1bd/0x2a0 [ 208.741307][ C3] ? rcu_is_watching+0x12/0xc0 [ 208.742902][ C3] do_group_exit+0xd5/0x2a0 [ 208.744435][ C3] __x64_sys_exit_group+0x3e/0x50 [ 208.746096][ C3] x64_sys_call+0x14fd/0x1510 [ 208.747653][ C3] do_syscall_64+0xc9/0xf80 [ 208.749168][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.751289][ C3] RIP: 0033:0x7f3279d9aeb9 [ 208.753202][ C3] Code: Unable to access opcode bytes at 0x7f3279d9ae8f. [ 208.755541][ C3] RSP: 002b:00007fffbcedcad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 208.758300][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3279d9aeb9 [ 208.760972][ C3] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.763596][ C3] RBP: 00007fffbcedcb3c R08: 0000000000000000 R09: 00000000000927c0 [ 208.766233][ C3] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000253 [ 208.768782][ C3] R13: 00000000000927c0 R14: 0000000000032d4c R15: 00007fffbcedcb90 [ 208.771473][ C3] [ 208.772535][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.774932][ C3] CPU: 3 UID: 0 PID: 11897 Comm: syz.0.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.778432][ C3] Tainted: [L]=SOFTLOCKUP [ 208.779854][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.783210][ C3] Call Trace: [ 208.784351][ C3] [ 208.785275][ C3] dump_stack_lvl+0x100/0x190 [ 208.786834][ C3] vpanic+0x20d/0x630 [ 208.788162][ C3] panic+0xd1/0xd1 [ 208.789440][ C3] ? __pfx_panic+0x10/0x10 [ 208.790942][ C3] ? check_panic_on_warn+0x1f/0x90 [ 208.792703][ C3] check_panic_on_warn.cold+0x19/0x34 [ 208.794516][ C3] ? inet_sock_destruct+0x653/0x800 [ 208.796236][ C3] __warn.cold+0x191/0x2f8 [ 208.797721][ C3] __report_bug+0x296/0x3d0 [ 208.799233][ C3] ? inet_sock_destruct+0x653/0x800 [ 208.801009][ C3] ? __pfx___report_bug+0x10/0x10 [ 208.802663][ C3] ? __dentry_kill+0x1d0/0x600 [ 208.804310][ C3] ? finish_dput+0x76/0x480 [ 208.805816][ C3] ? dput.part.0+0x456/0x570 [ 208.807352][ C3] ? dput+0x1f/0x30 [ 208.808841][ C3] ? __fput+0x519/0xb40 [ 208.810123][ C3] ? task_work_run+0x150/0x240 [ 208.811539][ C3] ? do_exit+0x829/0x2a30 [ 208.812811][ C3] ? do_group_exit+0xd5/0x2a0 [ 208.814176][ C3] ? __x64_sys_exit_group+0x3e/0x50 [ 208.815684][ C3] ? x64_sys_call+0x14fd/0x1510 [ 208.817106][ C3] ? do_syscall_64+0xc9/0xf80 [ 208.818471][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.820267][ C3] ? inet_sock_destruct+0x653/0x800 [ 208.821786][ C3] report_bug+0xb2/0x220 [ 208.823008][ C3] ? inet_sock_destruct+0x653/0x800 [ 208.824518][ C3] handle_bug+0x166/0x2a0 [ 208.825773][ C3] exc_invalid_op+0x17/0x50 [ 208.827092][ C3] asm_exc_invalid_op+0x1a/0x20 [ 208.828509][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 208.830197][ C3] Code: a9 4f ff e9 06 fd ff ff e8 2a 19 14 f8 90 0f 0b 90 e9 35 fe ff ff e8 1c 19 14 f8 90 0f 0b 90 e9 c5 fe ff ff e8 0e 19 14 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 00 19 14 f8 90 0f 0b 90 e9 65 fe ff ff [ 208.835646][ C3] RSP: 0018:ffffc900006f8d98 EFLAGS: 00010246 [ 208.837397][ C3] RAX: 0000000000000000 RBX: ffff8881042ea100 RCX: ffffffff89f2e537 [ 208.839650][ C3] RDX: ffff88805a758000 RSI: ffffffff89f2e632 RDI: ffff88805a758000 [ 208.841948][ C3] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 208.844212][ C3] R10: 0000000000000090 R11: 0000000000000000 R12: ffff8881042ea100 [ 208.846465][ C3] R13: ffff8881042ea190 R14: ffffffff81ece74b R15: 0000000000000000 [ 208.848741][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.850044][ C3] ? inet_sock_destruct+0x557/0x800 [ 208.851558][ C3] ? inet_sock_destruct+0x652/0x800 [ 208.853079][ C3] ? inet_sock_destruct+0x652/0x800 [ 208.854578][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.855861][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 208.857354][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.858647][ C3] __sk_destruct+0x85/0xbb0 [ 208.859963][ C3] ? rcu_core+0x7bb/0x15c0 [ 208.861306][ C3] rcu_core+0x7c0/0x15c0 [ 208.862538][ C3] ? __hrtimer_run_queues+0x7e0/0x990 [ 208.864092][ C3] ? __pfx_rcu_core+0x10/0x10 [ 208.865459][ C3] ? ktime_get+0x1a7/0x300 [ 208.866756][ C3] ? mark_held_locks+0x40/0x70 [ 208.868137][ C3] handle_softirqs+0x1ea/0x910 [ 208.869533][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 208.871019][ C3] __irq_exit_rcu+0xef/0x150 [ 208.872353][ C3] irq_exit_rcu+0x9/0x30 [ 208.873585][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 208.875199][ C3] [ 208.876056][ C3] [ 208.876889][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.878479][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 208.880093][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 6b 69 f6 48 89 df e8 62 b9 69 f6 e8 ad 30 95 f6 fb bf 01 00 00 00 22 08 5a f6 65 8b 05 1b b9 6a 08 85 c0 74 06 5b e9 81 4a 00 00 [ 208.885504][ C3] RSP: 0018:ffffc9000707f590 EFLAGS: 00000206 [ 208.887209][ C3] RAX: 0000000000004159 RBX: ffff888056253768 RCX: 0000000000000040 [ 208.889461][ C3] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: 0000000000000001 [ 208.891744][ C3] RBP: ffff888056253760 R08: 0000000000000001 R09: 0000000000000000 [ 208.893999][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056253768 [ 208.896255][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 208.898510][ C3] filemap_remove_folio+0x104/0x270 [ 208.900012][ C3] truncate_inode_folio+0x49/0x70 [ 208.901515][ C3] shmem_undo_range+0x3ae/0x1570 [ 208.902949][ C3] ? __pfx_shmem_undo_range+0x10/0x10 [ 208.904532][ C3] ? __lock_acquire+0x4a5/0x2630 [ 208.905973][ C3] ? find_held_lock+0x2b/0x80 [ 208.907341][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 208.908851][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 208.910376][ C3] ? percpu_counter_add_batch+0xb9/0x230 [ 208.912007][ C3] shmem_evict_inode+0x39e/0xbd0 [ 208.913448][ C3] ? inode_wait_for_writeback+0x171/0x390 [ 208.915085][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 208.916665][ C3] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 208.918405][ C3] ? find_held_lock+0x2b/0x80 [ 208.919771][ C3] ? evict+0x37e/0xad0 [ 208.921011][ C3] ? evict+0x37e/0xad0 [ 208.922193][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 208.923763][ C3] evict+0x3c2/0xad0 [ 208.924924][ C3] ? find_held_lock+0x2b/0x80 [ 208.926283][ C3] ? __pfx_evict+0x10/0x10 [ 208.927586][ C3] ? iput.part.0+0x61c/0x1150 [ 208.928964][ C3] iput.part.0+0x624/0x1150 [ 208.930301][ C3] iput+0x35/0x40 [ 208.931383][ C3] dentry_unlink_inode+0x2a1/0x490 [ 208.932873][ C3] __dentry_kill+0x1d0/0x600 [ 208.934215][ C3] finish_dput+0x76/0x480 [ 208.935464][ C3] dput.part.0+0x456/0x570 [ 208.936769][ C3] dput+0x1f/0x30 [ 208.937834][ C3] __fput+0x519/0xb40 [ 208.939000][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.940532][ C3] task_work_run+0x150/0x240 [ 208.941887][ C3] ? __pfx_task_work_run+0x10/0x10 [ 208.943363][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 208.944887][ C3] do_exit+0x829/0x2a30 [ 208.946097][ C3] ? signal_wake_up_state+0x8d/0x130 [ 208.947624][ C3] ? __pfx_do_exit+0x10/0x10 [ 208.948968][ C3] ? do_group_exit+0x1bd/0x2a0 [ 208.950373][ C3] ? do_group_exit+0x1bd/0x2a0 [ 208.951765][ C3] ? rcu_is_watching+0x12/0xc0 [ 208.953159][ C3] do_group_exit+0xd5/0x2a0 [ 208.954429][ C3] __x64_sys_exit_group+0x3e/0x50 [ 208.955872][ C3] x64_sys_call+0x14fd/0x1510 [ 208.957247][ C3] do_syscall_64+0xc9/0xf80 [ 208.958570][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.960291][ C3] RIP: 0033:0x7f3279d9aeb9 [ 208.961605][ C3] Code: Unable to access opcode bytes at 0x7f3279d9ae8f. [ 208.963598][ C3] RSP: 002b:00007fffbcedcad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 208.965959][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3279d9aeb9 [ 208.968212][ C3] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.970485][ C3] RBP: 00007fffbcedcb3c R08: 0000000000000000 R09: 00000000000927c0 [ 208.972762][ C3] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000253 [ 208.975018][ C3] R13: 00000000000927c0 R14: 0000000000032d4c R15: 00007fffbcedcb90 [ 208.977300][ C3] [ 208.979001][ C3] Kernel Offset: disabled [ 208.980284][ C3] Rebooting in 86400 seconds..