last executing test programs: 1.547668407s ago: executing program 2 (id=6296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000740)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x748ac4f68da40f80}, 0x40004) 1.459815848s ago: executing program 2 (id=6300): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) 1.304068439s ago: executing program 2 (id=6307): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000013c0)) 1.10122921s ago: executing program 2 (id=6312): r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) 996.777647ms ago: executing program 2 (id=6317): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0xfffd, 0x0, 0x2, 0x0}) 856.82555ms ago: executing program 2 (id=6321): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f2e"], 0x0, 0x0}) 631.211911ms ago: executing program 0 (id=6330): r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x40001) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000680)=[0x42d, 0x5]) 630.4548ms ago: executing program 3 (id=6331): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xd5a527333bff4787, &(0x7f0000000400)) 524.930154ms ago: executing program 1 (id=6333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x3c, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x3c}}, 0x0) 524.75624ms ago: executing program 4 (id=6334): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) setgroups(0x0, 0x0) 517.003727ms ago: executing program 3 (id=6335): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r0) 510.580588ms ago: executing program 0 (id=6336): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x7, 0x4) 442.112966ms ago: executing program 4 (id=6337): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) 427.275197ms ago: executing program 1 (id=6338): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write(r0, &(0x7f0000000200)="e1ad129559f6bf2d6da8641e1b8c689adc280348faad5642f1e6b7c8646eaea89baca63df40b9a784cbd6d78d1938fbf00", 0x31) 387.907803ms ago: executing program 0 (id=6339): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 387.795944ms ago: executing program 3 (id=6340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c1400003e000701feffffff00000000047c000008004280040008002814018024141d"], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 387.45037ms ago: executing program 4 (id=6341): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}}, @common=@inet=@tcpmss={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 325.56444ms ago: executing program 0 (id=6342): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f00000002c0)) 314.76907ms ago: executing program 1 (id=6343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r0}, 0x18) 220.858763ms ago: executing program 3 (id=6344): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000501000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/142) 220.69085ms ago: executing program 1 (id=6345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 220.558784ms ago: executing program 4 (id=6346): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic}) 202.627923ms ago: executing program 0 (id=6347): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 168.116255ms ago: executing program 3 (id=6348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 84.3468ms ago: executing program 4 (id=6349): r0 = getpid() process_vm_readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000840)=""/190, 0xbe}], 0x2, &(0x7f0000000cc0)=[{&(0x7f0000003b40)=""/4096, 0x1000}], 0x1, 0x0) 83.922045ms ago: executing program 1 (id=6350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000076000d022cbd700004000000030000000000000008000100010000000800010001"], 0x28}}, 0x0) 78.262998ms ago: executing program 3 (id=6351): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 71.083533ms ago: executing program 0 (id=6352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 58.379874ms ago: executing program 4 (id=6353): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'team0\x00', @broadcast}) 0s ago: executing program 1 (id=6354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): ndor=1235, idProduct=0010, bcdDevice=59.84 [ 275.822923][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.825182][ T58] usb 2-1: config 0 descriptor?? [ 275.878000][ T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.931341][ T58] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 276.046151][ T58] usb 2-1: USB disconnect, device number 85 [ 276.085735][T13429] overlayfs: cannot append lower layer [ 276.670341][T13456] veth1_macvtap: left promiscuous mode [ 276.675879][T13456] macsec0: entered promiscuous mode [ 276.952125][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 276.986430][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 276.995345][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 277.277731][T13497] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 277.339283][T13497] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3513'. [ 277.424959][T13505] openvswitch: netlink: IP tunnel dst address not specified [ 277.951966][ T5812] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 277.986796][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 278.055380][ T2333] pvrusb2: request_firmware fatal error with code=-110 [ 278.079631][ T2333] pvrusb2: Failure uploading firmware1 [ 278.089551][ T2333] pvrusb2: Device initialization was not successful. [ 278.100507][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 278.130558][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 278.155567][ T5897] pvrusb2: Device being rendered inoperable [ 278.162094][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.193806][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 278.230228][ T5812] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 278.245110][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.282639][ T5812] usb 4-1: Product: syz [ 278.291716][ T5812] usb 4-1: Manufacturer: syz [ 278.296343][ T5812] usb 4-1: SerialNumber: syz [ 278.302139][T13564] veth1_virt_wifi: entered promiscuous mode [ 278.309090][ T5812] usb 4-1: config 0 descriptor?? [ 278.316321][T13564] netlink: 'syz.0.3547': attribute type 8 has an invalid length. [ 278.327477][T13523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.338376][T13564] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 278.346754][T13569] netlink: 'syz.2.3549': attribute type 10 has an invalid length. [ 278.373596][T13569] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 278.406188][T13569] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.482125][ T5812] rc_core: IR keymap rc-streamzap not found [ 278.498089][ T5812] Registered IR keymap rc-empty [ 278.503887][ T5812] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 278.538307][T13580] SET target dimension over the limit! [ 278.541639][ T5812] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 278.629904][ T5812] usb 4-1: USB disconnect, device number 82 [ 278.921714][ T58] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 279.082497][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 279.094063][ T58] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 279.105034][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.113044][ T58] usb 1-1: Product: syz [ 279.139326][ T58] usb 1-1: Manufacturer: syz [ 279.143976][ T58] usb 1-1: SerialNumber: syz [ 279.157893][ T58] usb 1-1: config 0 descriptor?? [ 279.164672][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 279.181136][ T58] gspca_main: se401-2.14.0 probing 047d:5003 [ 279.192461][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 279.210204][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 279.583557][ T5812] vxcan1 speed is unknown, defaulting to 1000 [ 279.597526][T13618] infiniband syz2: set active [ 279.613727][T13618] infiniband syz2: added vxcan1 [ 279.636275][ T58] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 279.655213][ T58] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 279.670773][ T58] usb 1-1: USB disconnect, device number 84 [ 279.778773][T13618] RDS/IB: syz2: added [ 279.816442][T13618] smc: adding ib device syz2 with port count 1 [ 279.824161][T13618] smc: ib device syz2 port 1 has pnetid [ 279.845282][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 279.852731][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 279.859903][T13648] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 279.871929][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'. [ 280.046562][T13654] xt_hashlimit: max too large, truncated to 1048576 [ 280.064390][T13654] xt_limit: Overflow, try lower: 0/0 [ 280.150158][T13659] netlink: 'syz.1.3592': attribute type 21 has an invalid length. [ 280.163780][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 280.163976][T13659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3592'. [ 280.274556][T13662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3595'. [ 280.425774][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 280.425789][ T30] audit: type=1400 audit(1747871430.181:5656): avc: denied { wake_alarm } for pid=13671 comm="syz.0.3599" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.453300][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.474756][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 280.535672][ T30] audit: type=1400 audit(1747871430.275:5657): avc: denied { write } for pid=13674 comm="syz.1.3601" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 280.779728][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 280.899838][ T30] audit: type=1400 audit(1747871430.583:5658): avc: denied { read } for pid=13690 comm="syz.1.3608" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 280.955536][ T30] audit: type=1400 audit(1747871430.583:5659): avc: denied { open } for pid=13690 comm="syz.1.3608" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 281.040408][ T30] audit: type=1400 audit(1747871430.583:5660): avc: denied { ioctl } for pid=13690 comm="syz.1.3608" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 281.044013][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 281.087427][T13700] netlink: 'syz.2.3611': attribute type 29 has an invalid length. [ 281.113822][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 281.260982][ T30] audit: type=1400 audit(1747871430.957:5661): avc: denied { read } for pid=13709 comm="syz.1.3617" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 281.285600][T13670] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 281.311473][T13618] vxcan1 speed is unknown, defaulting to 1000 [ 281.339423][ T30] audit: type=1400 audit(1747871431.004:5662): avc: denied { open } for pid=13709 comm="syz.1.3617" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 281.421992][ T30] audit: type=1400 audit(1747871431.004:5663): avc: denied { ioctl } for pid=13709 comm="syz.1.3617" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 281.704289][ T30] audit: type=1400 audit(1747871431.378:5664): avc: denied { create } for pid=13731 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.762324][ T30] audit: type=1400 audit(1747871431.425:5665): avc: denied { setopt } for pid=13731 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.479573][T13777] netlink: 'syz.0.3649': attribute type 12 has an invalid length. [ 282.496874][T13777] __nla_validate_parse: 1 callbacks suppressed [ 282.496891][T13777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3649'. [ 282.578533][ T5890] Bluetooth: hci0: command 0x0406 tx timeout [ 283.029986][T13808] ipt_REJECT: TCP_RESET invalid for non-tcp [ 283.254671][T13824] mmap: syz.0.3672 (13824): VmData 37392384 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 283.294407][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3673'. [ 283.616549][T13850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.785088][T13864] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3690'. [ 283.906760][T13872] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.912435][T13869] xt_ecn: cannot match TCP bits for non-tcp packets [ 284.064126][T13880] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3698'. [ 284.373508][T13901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.534967][ T58] IPVS: starting estimator thread 0... [ 284.663298][T13912] IPVS: using max 54 ests per chain, 129600 per kthread [ 285.279256][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 285.494898][T13972] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 285.934528][T14004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.963218][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 285.963236][ T30] audit: type=1400 audit(1747871435.353:5695): avc: denied { create } for pid=14005 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 286.015318][ T30] audit: type=1400 audit(1747871435.409:5696): avc: denied { setopt } for pid=14005 comm="syz.2.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 286.090367][ T30] audit: type=1400 audit(1747871435.428:5697): avc: denied { write } for pid=14007 comm="syz.1.3758" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 286.113672][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.238915][ T30] audit: type=1400 audit(1747871435.615:5698): avc: denied { create } for pid=14019 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 286.318958][ T30] audit: type=1400 audit(1747871435.615:5699): avc: denied { setopt } for pid=14019 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 286.537731][ T30] audit: type=1400 audit(1747871435.896:5700): avc: denied { read } for pid=14038 comm="syz.3.3774" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.557987][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.632228][T14043] netlink: 'syz.1.3775': attribute type 32 has an invalid length. [ 286.648229][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 286.686111][T14043] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 286.718852][T14050] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 286.737579][T14050] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3778'. [ 286.806850][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 286.928515][T14066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.391051][T14096] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3801'. [ 287.552526][ T30] audit: type=1400 audit(1747871436.850:5701): avc: denied { bind } for pid=14105 comm="syz.2.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.680541][ T30] audit: type=1400 audit(1747871436.952:5702): avc: denied { read write } for pid=14117 comm="syz.4.3811" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 287.785342][ T30] audit: type=1400 audit(1747871436.962:5703): avc: denied { open } for pid=14117 comm="syz.4.3811" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 287.808878][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.892280][T14127] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3816'. [ 288.131482][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'. [ 288.163908][T14144] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 288.238283][T14148] openvswitch: netlink: Key type 113 is out of range max 32 [ 288.419934][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 288.473156][T14156] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 288.581554][ T30] audit: type=1400 audit(1747871437.804:5704): avc: denied { create } for pid=14160 comm="syz.1.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.808410][T14170] ip6t_srh: unknown srh invflags 7863 [ 289.226648][T14192] ip6tnl1: entered promiscuous mode [ 289.580340][T14207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.655304][T14221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 289.930872][T14236] netlink: 'syz.3.3858': attribute type 5 has an invalid length. [ 290.297945][ T5812] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 290.485529][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.516187][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.549945][ T5812] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.580886][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.606933][ T5812] usb 2-1: SerialNumber: syz [ 290.856766][ T5812] usb 2-1: 0:2 : does not exist [ 290.909640][ T5812] usb 2-1: USB disconnect, device number 86 [ 291.014848][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.068959][T14299] deleting an unspecified loop device is not supported. [ 291.513233][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 291.513249][ T30] audit: type=1400 audit(1747871440.544:5715): avc: denied { connect } for pid=14322 comm="syz.2.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 291.729637][T14338] ipt_rpfilter: unknown options [ 292.058480][T14358] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 292.111261][ T30] audit: type=1400 audit(1747871441.105:5716): avc: denied { connect } for pid=14362 comm="syz.0.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.129893][T14358] team0: Port device wlan1 added [ 292.188337][ T30] audit: type=1400 audit(1747871441.124:5717): avc: denied { sqpoll } for pid=14361 comm="syz.1.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 292.307888][ T30] audit: type=1400 audit(1747871441.283:5718): avc: denied { read write } for pid=14374 comm="syz.3.3917" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 292.346306][T14377] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 292.380737][ T30] audit: type=1400 audit(1747871441.320:5719): avc: denied { open } for pid=14374 comm="syz.3.3917" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 292.557451][T14390] xt_socket: unknown flags 0x4 [ 292.568520][T14393] tmpfs: Bad value for 'mpol' [ 293.190770][T14430] netlink: 'syz.3.3944': attribute type 5 has an invalid length. [ 293.228240][T14435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.384602][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3950'. [ 293.398719][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3950'. [ 293.592176][ T30] audit: type=1400 audit(1747871442.489:5720): avc: denied { getopt } for pid=14458 comm="syz.1.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.695511][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 293.707610][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 293.817743][ T58] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 294.026582][ T58] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 294.048021][ T58] usb 1-1: config 0 has no interface number 0 [ 294.052919][ T30] audit: type=1400 audit(1747871442.920:5721): avc: denied { mount } for pid=14486 comm="syz.3.3972" name="/" dev="gadgetfs" ino=7537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 294.068417][ T58] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.143891][ T58] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 294.151151][ T30] audit: type=1400 audit(1747871442.985:5722): avc: denied { unmount } for pid=5896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 294.164873][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.228086][ T58] usb 1-1: Product: syz [ 294.242758][ T58] usb 1-1: Manufacturer: syz [ 294.261670][ T58] usb 1-1: SerialNumber: syz [ 294.280011][ T58] usb 1-1: config 0 descriptor?? [ 294.289785][ T30] audit: type=1400 audit(1747871443.135:5723): avc: denied { write } for pid=14497 comm="syz.2.3977" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 294.306386][ T58] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 294.551935][ T30] audit: type=1400 audit(1747871443.387:5724): avc: denied { bind } for pid=14512 comm="syz.4.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.791294][ T58] usb 1-1: USB disconnect, device number 85 [ 294.805567][ T58] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 295.125717][T14549] netlink: 'syz.1.4002': attribute type 27 has an invalid length. [ 295.474636][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'. [ 295.505600][T14572] CIFS mount error: No usable UNC path provided in device string! [ 295.505600][T14572] [ 295.526753][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'. [ 295.545613][T14572] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.702082][T14581] netlink: 'syz.4.4019': attribute type 1 has an invalid length. [ 295.726889][T14581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4019'. [ 295.924616][T14583] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 296.481633][T14633] xt_CT: No such helper "pptp" [ 296.595526][T14583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.601769][T14583] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 296.635533][T14583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.662643][T14583] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 296.698936][T14583] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.720436][T14583] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 296.788228][ T5812] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 297.003408][ T5812] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 297.022955][ T5812] usb 4-1: config 0 has no interface number 0 [ 297.044313][ T5812] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 297.068078][ T5812] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 297.086179][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.098082][ T5812] usb 4-1: Product: syz [ 297.102282][ T5812] usb 4-1: Manufacturer: syz [ 297.126810][ T5812] usb 4-1: SerialNumber: syz [ 297.160818][ T5812] usb 4-1: config 0 descriptor?? [ 297.175659][T14641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.426180][ T5812] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.451193][ T5812] usb 4-1: MIDIStreaming interface descriptor not found [ 297.466237][T14693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4060'. [ 297.491893][T14693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4060'. [ 297.502579][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 297.502594][ T30] audit: type=1400 audit(1747871446.156:5736): avc: denied { connect } for pid=14698 comm="syz.1.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.549800][ T5812] usb 4-1: USB disconnect, device number 83 [ 297.728288][T14706] openvswitch: netlink: VXLAN extension 240 out of range max 1 [ 297.742529][ T30] audit: type=1400 audit(1747871446.371:5737): avc: denied { write } for pid=14708 comm="syz.2.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.023536][T14722] vxcan1 speed is unknown, defaulting to 1000 [ 298.301703][T14739] netlink: 'syz.2.4076': attribute type 2 has an invalid length. [ 298.334300][T14739] : entered promiscuous mode [ 298.563061][ T58] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 298.758908][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 298.785630][ T30] audit: type=1326 audit(1747871447.343:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 298.830872][ T30] audit: type=1326 audit(1747871447.381:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 298.840938][ T58] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 298.926359][ T30] audit: type=1326 audit(1747871447.381:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 298.933835][T14772] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 298.959688][ T58] usb 1-1: config 0 has no interface number 0 [ 298.965829][ T58] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.989894][ T58] usb 1-1: config 0 interface 85 has no altsetting 0 [ 299.024335][ T30] audit: type=1326 audit(1747871447.381:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 299.071614][ T58] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 299.110196][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.133244][ T58] usb 1-1: Product: syz [ 299.146472][ T58] usb 1-1: Manufacturer: syz [ 299.160788][ T58] usb 1-1: SerialNumber: syz [ 299.167812][ T58] usb 1-1: config 0 descriptor?? [ 299.218507][ T30] audit: type=1400 audit(1747871447.755:5742): avc: denied { mount } for pid=14784 comm="syz.3.4092" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 299.411327][T14796] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 299.449589][T14796] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4097'. [ 299.454805][ T30] audit: type=1400 audit(1747871447.979:5743): avc: denied { accept } for pid=14797 comm="syz.1.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.651735][ T58] appletouch 1-1:0.85: Failed to request geyser raw mode [ 299.659221][ T58] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 299.731184][ T58] usb 1-1: USB disconnect, device number 86 [ 300.234924][T14839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4113'. [ 300.272354][ T30] audit: type=1400 audit(1747871448.737:5744): avc: denied { write } for pid=14843 comm="syz.4.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.450914][ T30] audit: type=1400 audit(1747871448.896:5745): avc: denied { read } for pid=14852 comm="syz.4.4119" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.805746][T14877] netlink: 'syz.4.4129': attribute type 4 has an invalid length. [ 300.808696][T14878] autofs4:pid:14878:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 300.819798][T14877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4129'. [ 300.859660][T14877] : renamed from bond0 (while UP) [ 300.905052][ T58] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 300.979260][ T5812] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 301.086133][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 301.102139][ T58] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 301.120402][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.124534][T14891] nvme_fabrics: missing parameter 'transport=%s' [ 301.150120][ T58] usb 1-1: Product: syz [ 301.158451][ T58] usb 1-1: Manufacturer: syz [ 301.162167][T14891] nvme_fabrics: missing parameter 'nqn=%s' [ 301.174282][ T58] usb 1-1: SerialNumber: syz [ 301.175520][ T5812] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.188745][ T58] usb 1-1: config 0 descriptor?? [ 301.209959][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.235959][ T5812] usb 2-1: Product: syz [ 301.240171][ T5812] usb 2-1: Manufacturer: syz [ 301.265129][ T5812] usb 2-1: SerialNumber: syz [ 301.301395][ T5812] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.379353][ T5897] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.520836][ T58] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 301.545282][ T58] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 301.576155][ T58] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 301.584572][ T58] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 301.636914][ T58] usb 1-1: USB disconnect, device number 87 [ 301.680061][ C0] usb 2-1: ath9k_htc: invalid pkt_len (fd64) [ 302.030667][ T58] usb 2-1: USB disconnect, device number 87 [ 302.509826][ T5897] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 302.540942][ T5897] ath9k_htc: Failed to initialize the device [ 302.582086][ T58] usb 2-1: ath9k_htc: USB layer deinitialized [ 302.684990][T14957] netlink: 'syz.0.4157': attribute type 15 has an invalid length. [ 302.971769][T14976] overlayfs: conflicting options: metacopy=off,verity=on [ 303.182014][T14988] dvmrp8: entered allmulticast mode [ 303.413667][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 303.413681][ T30] audit: type=1400 audit(1747871451.674:5756): avc: denied { write } for pid=15001 comm="syz.4.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.540924][T15010] netlink: 'syz.0.4180': attribute type 3 has an invalid length. [ 303.732280][T15024] Unsupported ieee802154 address type: 0 [ 303.750922][ T30] audit: type=1400 audit(1747871451.973:5757): avc: denied { bind } for pid=15022 comm="syz.4.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.957909][ T30] audit: type=1400 audit(1747871452.188:5758): avc: denied { read } for pid=15040 comm="syz.4.4191" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.036257][ T30] audit: type=1400 audit(1747871452.188:5759): avc: denied { open } for pid=15040 comm="syz.4.4191" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.138717][ T30] audit: type=1400 audit(1747871452.216:5760): avc: denied { read } for pid=15039 comm="syz.2.4192" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.189961][ T30] audit: type=1400 audit(1747871452.216:5761): avc: denied { open } for pid=15039 comm="syz.2.4192" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.213537][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.215201][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4195'. [ 304.223085][ T30] audit: type=1400 audit(1747871452.216:5762): avc: denied { ioctl } for pid=15040 comm="syz.4.4191" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.253566][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.597838][T15077] vxcan1 speed is unknown, defaulting to 1000 [ 304.913965][T15097] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4212'. [ 305.008762][ T30] audit: type=1400 audit(1747871453.161:5763): avc: denied { setopt } for pid=15102 comm="syz.4.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.234877][ T30] audit: type=1326 audit(1747871453.385:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.3.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 305.292206][T15121] netlink: 'syz.0.4222': attribute type 6 has an invalid length. [ 305.323675][ T30] audit: type=1326 audit(1747871453.404:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.3.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 305.451855][T15128] xt_hashlimit: max too large, truncated to 1048576 [ 305.924863][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4236'. [ 307.010901][T15214] block device autoloading is deprecated and will be removed. [ 307.036127][T15214] syz.3.4260: attempt to access beyond end of device [ 307.036127][T15214] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.305755][T15238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4267'. [ 307.333201][T15238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4267'. [ 307.432485][T15244] netlink: 400 bytes leftover after parsing attributes in process `syz.3.4271'. [ 307.475124][T15238] bond3: entered promiscuous mode [ 307.528668][T15238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.890416][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 308.586000][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4304'. [ 308.845475][T15345] netlink: 'syz.1.4312': attribute type 8 has an invalid length. [ 308.886720][T15347] xt_limit: Overflow, try lower: 2147483649/3300 [ 309.051819][ T5993] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 309.199630][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 309.199646][ T30] audit: type=1400 audit(1747871457.089:5776): avc: denied { getopt } for pid=15369 comm="syz.2.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.222797][ T5993] usb 1-1: Using ep0 maxpacket: 8 [ 309.242901][ T5993] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 309.255964][ T5993] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 309.311702][ T5993] usb 1-1: config 6 has no interface number 0 [ 309.317905][ T5993] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 309.352843][ T5993] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 309.410347][ T5993] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.450099][ T5993] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 309.468719][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.498389][ T5993] usb 1-1: Product: syz [ 309.508486][ T5993] usb 1-1: Manufacturer: syz [ 309.508904][ T30] audit: type=1326 audit(1747871457.379:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 309.525797][ T5993] usb 1-1: SerialNumber: syz [ 309.590013][ T5993] hso 1-1:6.2: Failed to find INT IN ep [ 309.595957][ T30] audit: type=1326 audit(1747871457.379:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 309.683237][ T30] audit: type=1326 audit(1747871457.388:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 309.762661][ T30] audit: type=1326 audit(1747871457.388:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 309.849817][ T30] audit: type=1326 audit(1747871457.388:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15387 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 309.907423][ T5897] usb 1-1: USB disconnect, device number 88 [ 309.936528][ T30] audit: type=1400 audit(1747871457.594:5782): avc: denied { ioctl } for pid=15396 comm="syz.4.4331" path="socket:[38030]" dev="sockfs" ino=38030 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 310.012699][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4338'. [ 310.632296][T15458] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 310.787351][T15464] veth3: entered promiscuous mode [ 310.792432][T15464] veth3: entered allmulticast mode [ 311.110515][ T30] audit: type=1400 audit(1747871458.875:5783): avc: denied { bind } for pid=15484 comm="syz.2.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.130353][ T5812] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 311.278768][ T30] audit: type=1400 audit(1747871459.025:5784): avc: denied { ioctl } for pid=15497 comm="syz.1.4368" path="socket:[38161]" dev="sockfs" ino=38161 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.341836][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 311.358838][ T5812] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 311.380504][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 311.412768][ T5812] usb 4-1: Product: syz [ 311.433911][ T5812] usb 4-1: Manufacturer: syz [ 311.470894][ T5812] usb 4-1: SerialNumber: syz [ 311.501304][ T5812] r8152-cfgselector 4-1: Unknown version 0x0000 [ 311.507597][ T5812] r8152-cfgselector 4-1: config 0 descriptor?? [ 311.534511][T15515] xt_l2tp: missing protocol rule (udp|l2tpip) [ 311.795110][ T30] audit: type=1326 audit(1747871459.521:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15531 comm="syz.0.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211cd8e969 code=0x7ffc0000 [ 311.946108][T15538] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.981058][ T5812] r8152-cfgselector 4-1: USB disconnect, device number 84 [ 311.986994][T15541] syz.1.4380: attempt to access beyond end of device [ 311.986994][T15541] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 311.991190][T15538] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.035909][T15541] gfs2: error -5 reading superblock [ 312.342968][T15565] netlink: 'syz.1.4391': attribute type 5 has an invalid length. [ 312.494518][ T58] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 312.620344][T15583] IPv6: Can't replace route, no match found [ 312.677067][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 312.710979][ T58] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 312.746572][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.775453][ T58] usb 1-1: Product: syz [ 312.790195][ T58] usb 1-1: Manufacturer: syz [ 312.805046][ T58] usb 1-1: SerialNumber: syz [ 312.813074][ T58] usb 1-1: config 0 descriptor?? [ 312.818224][ T5993] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 312.845047][ T58] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 312.997080][ T5993] usb 5-1: Using ep0 maxpacket: 8 [ 313.025840][ T5993] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 313.051713][ T5993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.070463][ T5993] usb 5-1: config 0 has no interface number 0 [ 313.080348][ T5993] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 313.100069][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.109637][ T5993] usb 5-1: Product: syz [ 313.120386][ T5993] usb 5-1: Manufacturer: syz [ 313.123321][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 313.125627][ T5993] usb 5-1: SerialNumber: syz [ 313.155483][ T5993] usb 5-1: config 0 descriptor?? [ 313.216706][T15618] netlink: 'syz.1.4414': attribute type 1 has an invalid length. [ 313.298200][ T58] gspca_m5602: Failed to find a sensor [ 313.303755][ T58] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 313.326171][ T58] usb 1-1: USB disconnect, device number 89 [ 313.341280][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 313.380201][ T5993] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 313.392819][ T5993] usb 5-1: No valid video chain found. [ 313.510359][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 313.523478][ T24] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 313.532384][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.540561][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.570510][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.579296][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.589744][ T24] usb 3-1: config 0 has no interface number 0 [ 313.610776][ T5901] usb 5-1: USB disconnect, device number 81 [ 313.632252][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 313.651785][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.663944][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.674885][ T24] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.688083][ T24] usb 3-1: config 0 interface 125 has no altsetting 0 [ 313.694905][ T24] usb 3-1: config 0 interface 125 has no altsetting 2 [ 313.704118][ T24] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 313.713172][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.721474][ T24] usb 3-1: Product: syz [ 313.725717][ T24] usb 3-1: Manufacturer: syz [ 313.730310][ T24] usb 3-1: SerialNumber: syz [ 313.737827][ T24] usb 3-1: config 0 descriptor?? [ 313.744580][ T24] usb 3-1: selecting invalid altsetting 2 [ 313.927401][ T5812] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 313.968255][ C1] usb 3-1: async_complete: urb error -71 [ 313.974009][ C1] usb 3-1: async_complete: urb error -71 [ 313.979676][ C1] usb 3-1: async_complete: urb error -71 [ 313.985335][ C1] usb 3-1: async_complete: urb error -71 [ 313.996097][ T24] get_1284_register: usb error -71 [ 314.001252][ T24] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 314.016694][ T24] usb 3-1: USB disconnect, device number 40 [ 314.120655][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 314.128651][ T5812] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 314.139849][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.150765][ T5812] usb 4-1: config 0 descriptor?? [ 314.160308][ T5812] gspca_main: sunplus-2.14.0 probing 041e:400b [ 314.414103][T15671] xt_CT: No such helper "snmp" [ 314.594761][ T5812] gspca_sunplus: reg_w_riv err -71 [ 314.600028][ T5812] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 314.633556][ T5812] usb 4-1: USB disconnect, device number 85 [ 315.100146][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 315.100174][ T30] audit: type=1400 audit(1747871462.607:5798): avc: denied { map } for pid=15719 comm="syz.0.4464" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 315.137296][ T30] audit: type=1400 audit(1747871462.645:5799): avc: denied { execute } for pid=15719 comm="syz.0.4464" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 315.169306][ T5901] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 315.364757][ T5901] usb 3-1: config 0 has an invalid interface number: 194 but max is 0 [ 315.389309][ T5901] usb 3-1: config 0 has no interface number 0 [ 315.426941][ T5901] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 315.446181][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.461583][ T5901] usb 3-1: Product: syz [ 315.465777][ T5901] usb 3-1: Manufacturer: syz [ 315.488336][ T5901] usb 3-1: SerialNumber: syz [ 315.504927][ T5901] usb 3-1: config 0 descriptor?? [ 315.901085][ T30] audit: type=1400 audit(1747871463.355:5800): avc: denied { write } for pid=15757 comm="syz.1.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 315.990473][ T5897] usb 3-1: USB disconnect, device number 41 [ 316.013108][ T5897] f81534a_ctrl 3-1:0.194: failed to set register 0x116: -19 [ 316.020457][ T5897] f81534a_ctrl 3-1:0.194: failed to enable ports: -19 [ 316.080489][T15772] xt_hashlimit: invalid interval [ 316.131334][T15776] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4491'. [ 316.305510][T15788] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4498'. [ 316.427008][ T30] audit: type=1400 audit(1747871463.851:5801): avc: denied { write } for pid=15800 comm="syz.1.4504" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.486612][ T30] audit: type=1400 audit(1747871463.907:5802): avc: denied { write } for pid=15803 comm="syz.3.4507" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 316.558996][ T30] audit: type=1400 audit(1747871463.935:5803): avc: denied { ioctl } for pid=15803 comm="syz.3.4507" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 316.562118][T15807] Zero length message leads to an empty skb [ 316.660765][T15814] netlink: 'syz.2.4511': attribute type 11 has an invalid length. [ 316.964088][ T30] audit: type=1400 audit(1747871464.328:5804): avc: denied { write } for pid=15836 comm="syz.0.4522" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 316.987306][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.217148][T15854] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 317.534085][T15875] veth5: entered promiscuous mode [ 317.539261][T15875] veth5: entered allmulticast mode [ 317.570723][T15881] netlink: 'syz.3.4542': attribute type 10 has an invalid length. [ 317.631487][T15881] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.655570][T15881] bond0: (slave team0): Enslaving as an active interface with an up link [ 317.896135][ T30] audit: type=1400 audit(1747871465.226:5805): avc: denied { connect } for pid=15901 comm="syz.2.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 318.017816][T15905] block device autoloading is deprecated and will be removed. [ 318.077891][T15911] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 318.095639][T15911] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 318.175864][ T30] audit: type=1400 audit(1747871465.478:5806): avc: denied { read } for pid=15914 comm="syz.4.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 318.443839][T15935] netlink: 'syz.0.4570': attribute type 1 has an invalid length. [ 318.464468][T15935] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4570'. [ 318.675021][ T5897] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 318.853051][ T5897] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 318.881375][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.909166][ T5897] usb 4-1: Product: syz [ 318.917841][ T5897] usb 4-1: Manufacturer: syz [ 318.932236][ T5897] usb 4-1: SerialNumber: syz [ 318.948473][ T5897] usb 4-1: config 0 descriptor?? [ 318.976111][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 319.155877][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 319.291235][T15999] openvswitch: netlink: Missing key (keys=40, expected=100) [ 319.328248][ T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 319.344812][ T24] usb 3-1: config 0 has no interface number 0 [ 319.358439][ T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 319.380502][ T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 319.403816][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 319.413590][ T5897] gspca_sunplus: reg_r err -71 [ 319.421009][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.436639][ T5897] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 319.442060][ T24] usb 3-1: Product: syz [ 319.459640][ T24] usb 3-1: Manufacturer: syz [ 319.462944][ T5897] usb 4-1: USB disconnect, device number 86 [ 319.471502][ T24] usb 3-1: SerialNumber: syz [ 319.486418][ T24] usb 3-1: config 0 descriptor?? [ 319.506978][T15972] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 319.538981][ T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 319.765902][ T5897] usb 3-1: USB disconnect, device number 42 [ 319.774376][ T5897] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 319.947209][T16043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4622'. [ 319.973065][ T30] audit: type=1400 audit(1747871467.162:5807): avc: denied { getopt } for pid=16044 comm="syz.4.4623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 320.013325][T16047] xt_policy: neither incoming nor outgoing policy selected [ 320.522354][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 320.522370][ T30] audit: type=1400 audit(1747871467.676:5809): avc: denied { getattr } for pid=16086 comm="syz.0.4643" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 320.601496][ T30] audit: type=1400 audit(1747871467.723:5810): avc: denied { create } for pid=16088 comm="syz.1.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 320.665479][ T30] audit: type=1400 audit(1747871467.732:5811): avc: denied { ioctl } for pid=16088 comm="syz.1.4644" path="socket:[40098]" dev="sockfs" ino=40098 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 320.772639][ T58] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 320.944351][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 320.951248][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 320.968786][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 320.998102][ T58] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 321.013683][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.037477][ T58] usb 3-1: Product: syz [ 321.041685][ T58] usb 3-1: Manufacturer: syz [ 321.046300][ T58] usb 3-1: SerialNumber: syz [ 321.055478][T16125] netlink: 'syz.0.4663': attribute type 5 has an invalid length. [ 321.062585][ T58] usb 3-1: config 0 descriptor?? [ 321.075860][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.087794][T16127] syz.3.4662: attempt to access beyond end of device [ 321.087794][T16127] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 321.118446][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4664'. [ 321.123774][T16127] (syz.3.4662,16127,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 321.151589][ T58] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 321.158562][T16127] (syz.3.4662,16127,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 321.173887][T16127] (syz.3.4662,16127,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 321.192718][T16127] (syz.3.4662,16127,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 321.245303][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.308132][ T5897] usb 3-1: USB disconnect, device number 43 [ 321.499113][ T58] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 321.680587][ T58] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 321.700066][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.725786][ T58] usb 2-1: config 0 has no interface number 0 [ 321.731942][ T58] usb 2-1: config 0 interface 182 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 321.758486][ T58] usb 2-1: config 0 interface 182 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 321.772349][ T58] usb 2-1: config 0 interface 182 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 321.790001][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=ac.d7 [ 321.807340][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.818097][ T58] usb 2-1: Product: syz [ 321.822635][ T58] usb 2-1: Manufacturer: syz [ 321.832951][ T58] usb 2-1: SerialNumber: syz [ 321.844369][ T58] usb 2-1: config 0 descriptor?? [ 321.856532][ T58] appletouch 2-1:0.182: Could not find int-in endpoint [ 321.875394][ T58] appletouch 2-1:0.182: probe with driver appletouch failed with error -5 [ 321.897549][ T58] usbhid 2-1:0.182: couldn't find an input interrupt endpoint [ 322.109104][T16190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.115510][ T58] usb 2-1: USB disconnect, device number 88 [ 322.407632][T16211] netlink: 'syz.4.4705': attribute type 33 has an invalid length. [ 322.487918][T16214] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4706'. [ 322.636325][T16226] new mount options do not match the existing superblock, will be ignored [ 322.673910][ T30] audit: type=1400 audit(1747871469.697:5812): avc: denied { mount } for pid=16225 comm="syz.2.4712" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.721429][ T30] audit: type=1400 audit(1747871469.734:5813): avc: denied { unmount } for pid=5895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.855633][ T30] audit: type=1400 audit(1747871469.865:5814): avc: denied { ioctl } for pid=16238 comm="syz.4.4719" path="socket:[41270]" dev="sockfs" ino=41270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 322.924368][T16244] netlink: 'syz.1.4721': attribute type 7 has an invalid length. [ 323.014120][T16244] : entered promiscuous mode [ 323.130339][T16259] xt_bpf: check failed: parse error [ 323.304409][ T5870] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 323.360270][ T30] audit: type=1400 audit(1747871470.323:5815): avc: denied { read write } for pid=16276 comm="syz.3.4737" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 323.383488][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.435148][ T30] audit: type=1400 audit(1747871470.323:5816): avc: denied { open } for pid=16276 comm="syz.3.4737" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 323.466119][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 323.477198][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.505624][ T5870] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 323.527434][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.544121][ T5870] usb 5-1: Product: syz [ 323.554415][ T5870] usb 5-1: Manufacturer: syz [ 323.568096][ T5870] usb 5-1: SerialNumber: syz [ 323.604565][ T5870] usb 5-1: config 0 descriptor?? [ 323.620752][ T5870] usb 5-1: bad CDC descriptors [ 323.644084][ T5870] usb 5-1: unsupported MDLM descriptors [ 323.864697][T16303] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 323.875250][ T5870] usb 5-1: USB disconnect, device number 82 [ 323.994220][T16311] sctp: [Deprecated]: syz.3.4754 (pid 16311) Use of int in max_burst socket option deprecated. [ 323.994220][T16311] Use struct sctp_assoc_value instead [ 324.026412][T16315] netlink: 'syz.1.4755': attribute type 1 has an invalid length. [ 324.045503][T16315] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4755'. [ 324.959499][ T30] audit: type=1400 audit(1747871471.829:5817): avc: denied { append } for pid=16382 comm="syz.0.4787" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.338484][ T30] audit: type=1400 audit(1747871472.175:5818): avc: denied { append } for pid=16410 comm="syz.2.4798" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.361982][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.583040][T16432] netlink: 'syz.1.4808': attribute type 5 has an invalid length. [ 325.600147][T16432] ip6erspan0: entered promiscuous mode [ 326.024887][T16464] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 326.042372][T16467] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 326.148212][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 326.148230][ T30] audit: type=1400 audit(1747871472.933:5820): avc: denied { read } for pid=16471 comm="syz.0.4828" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 326.216682][ T30] audit: type=1400 audit(1747871472.933:5821): avc: denied { open } for pid=16471 comm="syz.0.4828" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 326.313880][ T30] audit: type=1400 audit(1747871472.979:5822): avc: denied { ioctl } for pid=16471 comm="syz.0.4828" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 326.339666][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.614870][T16504] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 326.726392][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4847'. [ 326.766863][T16514] kAFS: unable to lookup cell '' [ 326.774885][T16511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4847'. [ 326.829784][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4847'. [ 326.866692][T16511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4847'. [ 326.903068][T16511] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4847'. [ 327.149184][T16527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4854'. [ 327.389142][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.395487][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.590197][T16546] xt_nat: multiple ranges no longer supported [ 327.782627][T16560] netlink: 'syz.4.4870': attribute type 7 has an invalid length. [ 327.885886][T16565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.897129][T16567] SELinux: syz.4.4874 (16567) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.100253][T16583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 328.375905][T16600] openvswitch: netlink: Duplicate or invalid key (type 0). [ 328.396526][T16600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.346603][T16659] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.484211][T16667] ipt_REJECT: TCP_RESET invalid for non-tcp [ 329.928346][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4938'. [ 330.057401][ T30] audit: type=1400 audit(1747871476.599:5823): avc: denied { setcurrent } for pid=16705 comm="syz.0.4943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 330.121560][ T30] audit: type=1401 audit(1747871476.599:5824): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 330.214325][ T30] audit: type=1400 audit(1747871476.739:5825): avc: denied { shutdown } for pid=16717 comm="syz.2.4948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 330.346132][T16728] SET target dimension over the limit! [ 330.417717][ T30] audit: type=1326 audit(1747871476.936:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 330.521269][ T30] audit: type=1326 audit(1747871476.936:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 330.597842][ T30] audit: type=1326 audit(1747871476.936:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 330.649363][ T30] audit: type=1326 audit(1747871476.936:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 330.680587][T16748] netlink: 'syz.4.4965': attribute type 1 has an invalid length. [ 330.893781][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.088512][ T5897] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 331.199801][T16788] netlink: 'syz.1.4984': attribute type 11 has an invalid length. [ 331.248314][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 331.270265][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 331.283700][ T5897] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 331.292852][ T5897] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 331.307517][ T5897] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 331.317850][ T5897] usb 5-1: config 128 has no interface number 0 [ 331.324351][ T5897] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 331.335928][ T5897] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.361374][ T5897] usb 5-1: config 128 interface 127 has no altsetting 0 [ 331.373539][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 331.398171][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.417805][ T5897] usb 5-1: Product: syz [ 331.457419][ T5897] usb 5-1: Manufacturer: syz [ 331.476057][ T5897] usb 5-1: SerialNumber: syz [ 331.627861][T16812] xt_l2tp: v2 doesn't support IP mode [ 331.769555][ T5897] usb 5-1: USB disconnect, device number 83 [ 331.809795][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 331.809812][ T30] audit: type=1400 audit(1747871478.236:5836): avc: denied { getopt } for pid=16823 comm="syz.3.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 331.857205][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.923682][T16828] netlink: 'syz.1.5003': attribute type 3 has an invalid length. [ 331.937693][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5003'. [ 331.957425][T16832] netlink: 'syz.3.5004': attribute type 2 has an invalid length. [ 331.971443][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5005'. [ 331.991795][T16832] netlink: 'syz.3.5004': attribute type 8 has an invalid length. [ 332.003107][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5005'. [ 332.229729][T16850] __nla_validate_parse: 1 callbacks suppressed [ 332.229749][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 332.343694][ T30] audit: type=1400 audit(1747871478.741:5837): avc: denied { append } for pid=16853 comm="syz.1.5016" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 332.632198][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5025'. [ 332.739565][T16884] netlink: 'syz.3.5031': attribute type 10 has an invalid length. [ 332.753582][T16885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5033'. [ 333.038486][T16904] mac80211_hwsim hwsim8 3@0ÿ: renamed from wlan0 [ 333.266046][ T30] audit: type=1326 audit(1747871479.592:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.1.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0dd8e969 code=0x7ffc0000 [ 333.365247][ T30] audit: type=1326 audit(1747871479.592:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.1.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0dd8e969 code=0x7ffc0000 [ 333.388727][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.408184][ T5897] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 333.467060][ T30] audit: type=1326 audit(1747871479.629:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.1.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1f0dd8e969 code=0x7ffc0000 [ 333.514593][ T30] audit: type=1326 audit(1747871479.629:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.1.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0dd8e969 code=0x7ffc0000 [ 333.564336][ T30] audit: type=1326 audit(1747871479.629:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.1.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0dd8e969 code=0x7ffc0000 [ 333.587814][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.624783][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 333.660432][ T5897] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 333.668922][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.685336][ T5897] usb 4-1: config 0 has no interface number 0 [ 333.696485][ T5897] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 333.705766][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.750159][ T5897] usb 4-1: Product: syz [ 333.754420][ T5897] usb 4-1: Manufacturer: syz [ 333.759409][ T5897] usb 4-1: SerialNumber: syz [ 333.766144][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'. [ 333.777955][ T5897] usb 4-1: config 0 descriptor?? [ 333.795312][ T5897] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 333.819439][T16946] ip6t_srh: unknown srh invflags 7D00 [ 333.825574][ T5897] usb 4-1: No valid video chain found. [ 334.017319][T16962] netlink: 'syz.1.5069': attribute type 10 has an invalid length. [ 334.081541][ T5897] usb 4-1: USB disconnect, device number 87 [ 334.172664][ T30] audit: type=1400 audit(1747871480.443:5843): avc: denied { create } for pid=16971 comm="syz.1.5075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.232135][ T30] audit: type=1400 audit(1747871480.443:5844): avc: denied { write } for pid=16971 comm="syz.1.5075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.282587][ T30] audit: type=1400 audit(1747871480.480:5845): avc: denied { create } for pid=16973 comm="syz.4.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.371828][T16980] macvtap0: entered allmulticast mode [ 334.377321][T16980] veth0_macvtap: entered allmulticast mode [ 334.732611][T17001] sctp: [Deprecated]: syz.4.5089 (pid 17001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.732611][T17001] Use struct sctp_sack_info instead [ 335.378252][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5113'. [ 335.439337][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5113'. [ 335.464111][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 335.641461][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5123'. [ 335.817253][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'. [ 335.978809][T17100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5138'. [ 336.188058][ T5812] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 336.369897][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 336.383542][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 336.406977][ T5812] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 336.423871][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.426863][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.440477][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.448946][ T5812] usb 2-1: Product: syz [ 336.466027][ T5812] usb 2-1: Manufacturer: syz [ 336.476255][ T5812] usb 2-1: SerialNumber: syz [ 336.495569][ T5812] usb 2-1: config 0 descriptor?? [ 336.528338][ T5812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 336.720737][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.745719][ T5812] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 336.754849][ T5812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 336.764453][ T5812] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 336.793197][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.928107][T17126] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.946434][T17126] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.959800][T17126] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.970622][T17126] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.976918][ T5812] usb 2-1: USB disconnect, device number 89 [ 337.042463][ T5870] vxcan1 speed is unknown, defaulting to 1000 [ 337.052046][ T5870] syz2: Port: 1 Link DOWN [ 337.060951][ T5993] vxcan1 speed is unknown, defaulting to 1000 [ 337.088126][T17156] ksmbd: Unknown IPC event: 0, ignore. [ 337.357005][T17178] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 337.457859][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 337.457876][ T30] audit: type=1400 audit(1747871483.520:5900): avc: denied { setcheckreqprot } for pid=17183 comm="syz.0.5180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 337.522261][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.622308][ T30] audit: type=1400 audit(1747871483.679:5901): avc: denied { read write } for pid=17192 comm="syz.0.5184" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 337.715080][ T30] audit: type=1400 audit(1747871483.679:5902): avc: denied { open } for pid=17192 comm="syz.0.5184" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 337.764559][T17206] netlink: 'syz.4.5190': attribute type 1 has an invalid length. [ 337.779156][ T30] audit: type=1400 audit(1747871483.791:5903): avc: denied { create } for pid=17201 comm="syz.1.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.798968][T17206] __nla_validate_parse: 2 callbacks suppressed [ 337.798982][T17206] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5190'. [ 337.876088][ T30] audit: type=1400 audit(1747871483.791:5904): avc: denied { setopt } for pid=17201 comm="syz.1.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.895568][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.915028][T17212] kernel profiling enabled (shift: 17) [ 337.917113][T17210] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5192'. [ 338.045214][ T30] audit: type=1400 audit(1747871484.062:5905): avc: denied { allowed } for pid=17219 comm="syz.2.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 338.113499][ T30] audit: type=1400 audit(1747871484.062:5906): avc: denied { sqpoll } for pid=17219 comm="syz.2.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 338.164706][ T30] audit: type=1400 audit(1747871484.062:5907): avc: denied { create } for pid=17219 comm="syz.2.5198" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 338.236470][ T30] audit: type=1400 audit(1747871484.062:5908): avc: denied { map } for pid=17219 comm="syz.2.5198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 338.288330][ T30] audit: type=1400 audit(1747871484.062:5909): avc: denied { read write } for pid=17219 comm="syz.2.5198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 338.352079][T17241] netlink: 'syz.0.5209': attribute type 1 has an invalid length. [ 338.387687][T17246] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 338.395253][T17246] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.081984][T17298] SET target dimension over the limit! [ 339.193119][T17312] dlm: no local IP address has been set [ 339.198948][T17312] dlm: cannot start dlm midcomms -107 [ 339.418699][T17324] netlink: 'syz.0.5248': attribute type 10 has an invalid length. [ 339.427081][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.434640][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.551145][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.558394][T17324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.565840][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.573014][T17324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.602032][T17324] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 339.724135][T17345] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.957370][T17363] sock: sock_timestamping_bind_phc: sock not bind to device [ 340.272296][ T5812] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 340.448988][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.481987][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.516970][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.549697][ T5812] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.567932][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.591299][ T5812] usb 1-1: config 0 descriptor?? [ 340.621742][ T5812] hub 1-1:0.0: USB hub found [ 340.841382][ T5812] hub 1-1:0.0: 9 ports detected [ 340.871133][ T5812] hub 1-1:0.0: insufficient power available to use all downstream ports [ 341.083344][ T5812] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 341.095602][ T5812] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 341.149980][ T5812] usb 1-1: USB disconnect, device number 90 [ 341.370517][T17444] netlink: 'syz.2.5307': attribute type 1 has an invalid length. [ 341.385456][T17445] netlink: 'syz.1.5308': attribute type 1 has an invalid length. [ 341.459159][T17445] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5308'. [ 341.533961][ T5870] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 341.705030][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 341.714123][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.726287][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.731190][T17461] netlink: 'syz.0.5316': attribute type 10 has an invalid length. [ 341.740311][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 341.756690][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 341.768624][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 341.779075][T17461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.780427][ T5870] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.790213][T17461] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 341.852935][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.876661][ T5870] hub 5-1:1.0: bad descriptor, ignoring hub [ 341.885247][ T5870] hub 5-1:1.0: probe with driver hub failed with error -5 [ 341.894589][ T5870] cdc_wdm 5-1:1.0: skipping garbage [ 341.900092][ T5870] cdc_wdm 5-1:1.0: skipping garbage [ 341.911168][ T5870] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 342.137444][T17483] bridge4: entered promiscuous mode [ 342.210342][ T5870] usb 5-1: USB disconnect, device number 84 [ 342.315377][T17495] ip6t_REJECT: ECHOREPLY is not supported [ 342.423023][ T5993] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 342.629430][ T5993] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.666916][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.682352][ T5993] usb 2-1: Product: syz [ 342.691597][ T5993] usb 2-1: Manufacturer: syz [ 342.696233][ T5993] usb 2-1: SerialNumber: syz [ 342.721831][ T5993] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.768716][ T5870] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.898781][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 342.898798][ T30] audit: type=1400 audit(1747871488.608:5952): avc: denied { create } for pid=17530 comm="syz.4.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.928097][T17535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5353'. [ 342.928406][T17532] netlink: 'syz.3.5351': attribute type 32 has an invalid length. [ 342.960439][ T30] audit: type=1400 audit(1747871488.655:5953): avc: denied { getopt } for pid=17530 comm="syz.4.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.188013][T17547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.197035][T17547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.205944][T17547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.223931][T17547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.243962][ T5812] usb 2-1: USB disconnect, device number 90 [ 343.259584][T17547] geneve2: entered promiscuous mode [ 343.264836][T17547] geneve2: entered allmulticast mode [ 343.302733][T17553] openvswitch: netlink: IP tunnel dst address not specified [ 343.335677][T17555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 343.342231][T17555] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 343.356320][T17555] vhci_hcd vhci_hcd.0: Device attached [ 343.366538][T17556] vhci_hcd: connection closed [ 343.366846][ T999] vhci_hcd: stop threads [ 343.379829][ T999] vhci_hcd: release socket [ 343.387699][ T999] vhci_hcd: disconnect device [ 343.441430][ T30] audit: type=1400 audit(1747871489.113:5954): avc: denied { create } for pid=17564 comm="syz.3.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.466512][ T30] audit: type=1400 audit(1747871489.141:5955): avc: denied { setopt } for pid=17564 comm="syz.3.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.519829][T17567] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 343.533950][ T5897] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 343.548080][T17569] netlink: 'syz.3.5369': attribute type 8 has an invalid length. [ 343.633187][T17574] netlink: 'syz.3.5371': attribute type 1 has an invalid length. [ 343.704540][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 343.713715][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 4 [ 343.749737][ T5897] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.762191][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.775274][ T5897] usb 1-1: Product: syz [ 343.782908][ T5897] usb 1-1: Manufacturer: syz [ 343.787532][ T5897] usb 1-1: SerialNumber: syz [ 343.796931][ T5897] usb 1-1: config 0 descriptor?? [ 343.821538][T17551] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.874976][T17585] usb usb8: usbfs: process 17585 (syz.2.5377) did not claim interface 0 before use [ 343.895894][T17587] netlink: 'syz.3.5378': attribute type 21 has an invalid length. [ 343.895957][ T30] audit: type=1400 audit(1747871489.534:5956): avc: denied { create } for pid=17588 comm="syz.1.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.905424][T17587] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5378'. [ 343.929580][ T5870] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 343.947034][ T5870] ath9k_htc: Failed to initialize the device [ 343.961159][ T30] audit: type=1400 audit(1747871489.581:5957): avc: denied { write } for pid=17588 comm="syz.1.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.983965][T17587] netlink: 'syz.3.5378': attribute type 4 has an invalid length. [ 343.991707][T17587] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5378'. [ 344.000762][ T5812] usb 2-1: ath9k_htc: USB layer deinitialized [ 344.086086][ T5993] usb 1-1: USB disconnect, device number 91 [ 344.401146][T17615] macvtap0: entered allmulticast mode [ 344.411983][T17618] netlink: 'syz.2.5392': attribute type 1 has an invalid length. [ 344.415242][T17615] veth0_macvtap: entered allmulticast mode [ 344.425502][T17621] netlink: 'syz.3.5395': attribute type 1 has an invalid length. [ 344.436760][T17621] netlink: 'syz.3.5395': attribute type 2 has an invalid length. [ 344.529602][T17623] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5396'. [ 344.560230][ T30] audit: type=1400 audit(1747871490.151:5958): avc: denied { create } for pid=17624 comm="syz.4.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.594878][ T30] audit: type=1400 audit(1747871490.151:5959): avc: denied { bind } for pid=17624 comm="syz.4.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.630029][ T30] audit: type=1400 audit(1747871490.151:5960): avc: denied { name_bind } for pid=17624 comm="syz.4.5399" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 344.703874][ T30] audit: type=1400 audit(1747871490.151:5961): avc: denied { node_bind } for pid=17624 comm="syz.4.5399" saddr=fe88::105 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 344.876524][T17643] hfs: unable to load iocharset "io#harset" [ 345.032527][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5414'. [ 345.250766][T17676] netlink: 'syz.4.5422': attribute type 11 has an invalid length. [ 345.522055][ T5812] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 345.698256][T17710] netlink: 'syz.3.5440': attribute type 14 has an invalid length. [ 345.698834][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 345.730027][ T5812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.741477][ T5812] usb 2-1: config 0 has no interface number 0 [ 345.779472][ T5812] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 345.795960][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.807703][ T5812] usb 2-1: Product: syz [ 345.818347][ T5812] usb 2-1: Manufacturer: syz [ 345.826801][ T5812] usb 2-1: SerialNumber: syz [ 345.839208][ T5812] usb 2-1: config 0 descriptor?? [ 345.855516][ T5812] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 345.892492][T17722] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.5445'. [ 345.917813][ T5870] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 346.089359][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 346.101406][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.121948][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.149918][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.166896][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.177949][ T5870] usb 1-1: config 0 descriptor?? [ 346.185623][ T5870] hub 1-1:0.0: USB hub found [ 346.227800][ T6077] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 346.285500][ T5812] gspca_spca1528: reg_w err -71 [ 346.313929][ T5812] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 346.341125][ T5812] usb 2-1: USB disconnect, device number 91 [ 346.393625][ T6077] usb 4-1: Using ep0 maxpacket: 32 [ 346.408889][ T6077] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 346.417475][ T5870] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 346.426692][ T6077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.454716][ T6077] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 346.468277][ T6077] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 346.486743][ T6077] usb 4-1: Product: syz [ 346.495036][ T6077] usb 4-1: Manufacturer: syz [ 346.499642][ T6077] usb 4-1: SerialNumber: syz [ 346.517384][ T6077] usb 4-1: config 0 descriptor?? [ 346.528905][ T6077] ldusb 4-1:0.0: Interrupt in endpoint not found [ 346.632983][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 346.644759][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 346.688132][ T5870] usb 1-1: USB disconnect, device number 92 [ 346.767022][ T6077] usb 4-1: USB disconnect, device number 88 [ 347.201911][T17764] dlm: non-version read from control device 211 [ 347.622094][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5477'. [ 347.768214][T17790] vxcan1 speed is unknown, defaulting to 1000 [ 348.094626][T17809] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 348.340898][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 348.340914][ T30] audit: type=1326 audit(1747871493.696:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.0.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211cd8e969 code=0x7ffc0000 [ 348.403252][ T30] audit: type=1326 audit(1747871493.696:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.0.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211cd8e969 code=0x7ffc0000 [ 348.515827][ T6126] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 348.669670][ T30] audit: type=1400 audit(1747871494.004:5988): avc: denied { read } for pid=17843 comm="syz.1.5505" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.697454][ T6126] usb 5-1: Using ep0 maxpacket: 32 [ 348.706200][ T30] audit: type=1400 audit(1747871494.004:5989): avc: denied { open } for pid=17843 comm="syz.1.5505" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.739053][ T6126] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 348.739084][ T6126] usb 5-1: config 4 has no interface number 0 [ 348.739117][ T6126] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.739141][ T6126] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.739174][ T6126] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 348.739194][ T6126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.767524][ T6126] hub 5-1:4.128: USB hub found [ 348.769404][ T30] audit: type=1400 audit(1747871494.023:5990): avc: denied { ioctl } for pid=17843 comm="syz.1.5505" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.868737][ T5812] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 349.006863][ T6126] hub 5-1:4.128: config failed, hub has too many ports! (err -19) [ 349.053582][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.063902][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 349.073221][ T5812] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 349.083243][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.097431][ T5812] usb 3-1: config 0 descriptor?? [ 349.181883][ T30] audit: type=1400 audit(1747871494.491:5991): avc: denied { read } for pid=17865 comm="syz.1.5516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 349.264573][ T30] audit: type=1400 audit(1747871494.556:5992): avc: denied { create } for pid=17869 comm="syz.0.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 349.314956][ T30] audit: type=1400 audit(1747871494.584:5993): avc: denied { setopt } for pid=17869 comm="syz.0.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 349.350134][T17876] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.350225][ T6077] usb 5-1: USB disconnect, device number 85 [ 349.538758][ T5812] Bluetooth: Can't get state to change to load configuration err [ 349.553340][ T5812] Bluetooth: Loading sysconfig file failed [ 349.561788][ T5812] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 349.577583][ T5812] usb 3-1: USB disconnect, device number 44 [ 349.716493][ T30] audit: type=1400 audit(1747871494.987:5994): avc: denied { read } for pid=17898 comm="syz.3.5532" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 349.764684][ T30] audit: type=1400 audit(1747871494.987:5995): avc: denied { open } for pid=17898 comm="syz.3.5532" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 349.918934][T17915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.972904][T17919] netlink: 'syz.0.5542': attribute type 10 has an invalid length. [ 349.997566][T17919] team0: Device ipvlan1 failed to register rx_handler [ 350.037246][T17924] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5545'. [ 350.515386][ T6077] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 350.641504][T17971] netlink: 'syz.3.5567': attribute type 1 has an invalid length. [ 350.675650][ T6077] usb 1-1: Using ep0 maxpacket: 16 [ 350.690884][ T6077] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 350.704017][ T6077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.717349][ T6077] usb 1-1: config 0 has no interface number 0 [ 350.724519][ T6077] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 350.741600][ T6077] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 350.754472][ T6077] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 350.769019][ T6077] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 350.817271][ T6077] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 350.861530][ T6077] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 350.877915][T17981] veth5: entered promiscuous mode [ 350.891277][ T6077] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 350.901520][ T6077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.916481][ T6077] usb 1-1: config 0 descriptor?? [ 350.941255][T17939] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.957711][ T6077] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.987086][T17989] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5576'. [ 351.200078][ T6077] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 351.256062][ T6077] usb 1-1: USB disconnect, device number 93 [ 351.401806][T18011] program syz.2.5586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.717082][T18034] netlink: 'syz.3.5598': attribute type 7 has an invalid length. [ 352.449477][T18091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5626'. [ 352.488470][T18091] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5626'. [ 352.503447][T18091] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5626'. [ 352.738585][T18107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.142640][T18142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5650'. [ 353.495941][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 353.519463][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.527123][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.679096][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.692744][T18184] netlink: 22 bytes leftover after parsing attributes in process `syz.0.5671'. [ 353.735078][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.835413][T18164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.847540][T18164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.859097][T18164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.898739][T18164] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 49123 - 0 [ 353.908029][T18164] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 49123 - 0 [ 353.917340][T18164] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 49123 - 0 [ 353.928490][T18164] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 36953 - 0 [ 353.938074][T18164] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 36953 - 0 [ 353.947014][T18164] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 36953 - 0 [ 354.512141][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 354.512156][ T30] audit: type=1400 audit(1747871499.467:6013): avc: denied { create } for pid=18233 comm="syz.1.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 354.540529][ T30] audit: type=1400 audit(1747871499.476:6014): avc: denied { write } for pid=18233 comm="syz.1.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 354.603433][T18238] netlink: 'syz.4.5699': attribute type 4 has an invalid length. [ 354.613415][T18240] x_tables: duplicate entry at hook 2 [ 354.830600][ T30] audit: type=1400 audit(1747871499.766:6015): avc: denied { bind } for pid=18253 comm="syz.2.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 354.855811][ T30] audit: type=1326 audit(1747871499.794:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.3.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 354.867096][ T6077] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 354.898331][ T30] audit: type=1326 audit(1747871499.794:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.3.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 354.934299][ T30] audit: type=1326 audit(1747871499.850:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.3.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 354.967596][ T30] audit: type=1400 audit(1747871499.897:6019): avc: denied { execmod } for pid=18261 comm="syz.2.5710" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 354.995954][ T30] audit: type=1400 audit(1747871499.897:6020): avc: denied { execute } for pid=18261 comm="syz.2.5710" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 355.025274][ T30] audit: type=1326 audit(1747871499.897:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.3.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 355.072026][ T30] audit: type=1326 audit(1747871499.897:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.3.5708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 355.137677][ T6077] usb 1-1: Using ep0 maxpacket: 32 [ 355.146169][ T6077] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 355.183058][ T6077] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 355.198409][ T6077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.206429][ T6077] usb 1-1: Product: syz [ 355.223303][ T6077] usb 1-1: Manufacturer: syz [ 355.243603][ T6077] usb 1-1: SerialNumber: syz [ 355.261161][ T6077] usb 1-1: config 0 descriptor?? [ 355.276787][T18242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.298075][ T6077] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input58 [ 355.601374][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 355.654784][T18296] xfrm1: entered promiscuous mode [ 355.690271][T18296] xfrm1: entered allmulticast mode [ 355.738335][T18302] JFS: charset not found [ 355.751021][ T6077] usb 1-1: USB disconnect, device number 94 [ 355.757083][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 355.921929][T18312] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.237232][T18336] netlink: 'syz.4.5746': attribute type 2 has an invalid length. [ 356.245074][T18336] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 356.253103][T18336] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 356.363954][ T5812] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 356.448349][T18348] SET target dimension over the limit! [ 356.483270][ T5897] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 356.550424][ T5812] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 356.558878][ T5812] usb 3-1: config 4 has no interface number 0 [ 356.571140][ T5812] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 356.583518][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.595799][ T5812] usb 3-1: Product: syz [ 356.600167][ T5812] usb 3-1: Manufacturer: syz [ 356.604819][ T5812] usb 3-1: SerialNumber: syz [ 356.617819][ T5812] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 356.673969][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 356.699851][ T5897] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 356.710438][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.723870][T18366] vxcan1 speed is unknown, defaulting to 1000 [ 356.753924][ T5897] usb 4-1: Product: syz [ 356.758165][ T5897] usb 4-1: Manufacturer: syz [ 356.762898][ T5897] usb 4-1: SerialNumber: syz [ 356.789295][ T5897] usb 4-1: config 0 descriptor?? [ 356.805804][ T5897] hub 4-1:0.0: bad descriptor, ignoring hub [ 356.811878][ T5897] hub 4-1:0.0: probe with driver hub failed with error -5 [ 356.821067][ T5897] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 357.036032][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.043399][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.047237][ T5812] vp7045: USB control message 'in' went wrong. [ 357.058966][ T5812] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 357.079224][ T5812] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 357.098326][ T5812] usb 3-1: USB disconnect, device number 45 [ 357.174627][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.189743][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.253268][ T5897] gspca_vc032x: reg_w err -71 [ 357.259126][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.267363][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.277879][T18376] veth0_macvtap: left allmulticast mode [ 357.285157][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.290491][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.300905][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.308842][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.314153][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.319541][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.324851][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.331162][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.336475][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.342006][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.348938][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.354320][T18376] netdevsim netdevsim1 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.354332][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.364895][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.373986][T18376] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.383076][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.388467][T18376] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.397377][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.401148][T18376] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.402810][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.417007][ T5897] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.422751][ T5897] gspca_vc032x: Unknown sensor... [ 357.434999][ T5897] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 357.544062][ T5897] usb 4-1: USB disconnect, device number 89 [ 357.707313][T18399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.865732][T18409] dlm: no locking on control device [ 358.025915][T18419] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.082266][T18420] ALSA: mixer_oss: invalid OSS volume '”' [ 358.145053][T18424] netlink: 'syz.4.5792': attribute type 4 has an invalid length. [ 358.343268][T18439] wg1: entered promiscuous mode [ 358.348177][T18439] wg1: entered allmulticast mode [ 358.534454][T18457] netlink: 'syz.0.5806': attribute type 5 has an invalid length. [ 358.910841][T18484] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 359.490264][T18526] 9pnet: Found fid 0 not clunked [ 359.600990][T18538] bridge_slave_1: left allmulticast mode [ 359.619595][T18538] bridge_slave_1: left promiscuous mode [ 359.638079][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.681018][T18538] bridge_slave_0: left allmulticast mode [ 359.703510][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.799000][T18550] tmpfs: Bad value for 'mpol' [ 359.863496][T18542] netlink: 'syz.1.5848': attribute type 15 has an invalid length. [ 359.978889][T18558] bond4: entered promiscuous mode [ 359.985440][T18558] bond4: entered allmulticast mode [ 359.993812][T18558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.128730][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5862'. [ 360.279789][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 360.279805][ T30] audit: type=1400 audit(1747871504.863:6044): avc: denied { connect } for pid=18584 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.380250][ T30] audit: type=1400 audit(1747871504.957:6045): avc: denied { getopt } for pid=18587 comm="syz.1.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 360.482374][ T30] audit: type=1400 audit(1747871505.059:6046): avc: denied { append } for pid=18595 comm="syz.0.5874" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 360.587605][T18604] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5879'. [ 360.609689][ T30] audit: type=1400 audit(1747871505.162:6047): avc: denied { setopt } for pid=18605 comm="syz.0.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 360.710686][T18612] netlink: 'syz.1.5882': attribute type 10 has an invalid length. [ 360.736738][T18616] misc userio: Invalid payload size [ 360.745832][T18612] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 361.018314][T18636] netlink: 'syz.2.5894': attribute type 10 has an invalid length. [ 361.128288][T18644] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 361.147520][T18646] tipc: Trying to set illegal importance in message [ 361.359623][T18660] xt_connbytes: Forcing CT accounting to be enabled [ 361.373429][T18660] xt_bpf: check failed: parse error [ 361.563095][ T30] audit: type=1400 audit(1747871506.070:6048): avc: denied { map } for pid=18675 comm="syz.3.5914" path="socket:[48600]" dev="sockfs" ino=48600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.601493][ T30] audit: type=1400 audit(1747871506.070:6049): avc: denied { read accept } for pid=18675 comm="syz.3.5914" path="socket:[48600]" dev="sockfs" ino=48600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.650412][ T30] audit: type=1326 audit(1747871506.135:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.3.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 361.673598][T18680] vxcan1 speed is unknown, defaulting to 1000 [ 361.673898][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.726827][ T30] audit: type=1326 audit(1747871506.135:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.3.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 361.766183][ T30] audit: type=1326 audit(1747871506.135:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.3.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 361.773876][ T5993] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 361.835260][T18688] netlink: 'syz.2.5920': attribute type 11 has an invalid length. [ 361.965420][T18694] netlink: 'syz.1.5922': attribute type 2 has an invalid length. [ 361.973643][T18694] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5922'. [ 362.090549][ T5993] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 362.099012][ T5993] usb 1-1: config 0 has no interface number 1 [ 362.118813][ T5993] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 362.136014][ T30] audit: type=1326 audit(1747871506.593:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.3.5916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5eb8e969 code=0x7ffc0000 [ 362.169491][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.191766][ T5993] usb 1-1: config 0 descriptor?? [ 362.419217][ T5993] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 362.727672][ T5897] usb 1-1: USB disconnect, device number 95 [ 362.762185][ T5897] qcserial 1-1:0.2: device disconnected [ 362.978330][T18752] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5952'. [ 363.383873][T18784] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5965'. [ 363.526319][T18795] vxcan1: entered allmulticast mode [ 363.666674][T18805] openvswitch: netlink: Missing key (keys=40, expected=80) [ 363.803336][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'. [ 364.071189][T18839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5993'. [ 364.099727][T18839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5993'. [ 364.122885][T18841] TCP: TCP_TX_DELAY enabled [ 364.279654][T18850] xt_l2tp: missing protocol rule (udp|l2tpip) [ 364.296703][T18853] xt_hashlimit: max too large, truncated to 1048576 [ 364.841482][T18890] vxcan1 speed is unknown, defaulting to 1000 [ 365.010540][T18905] bad cache= option: no%e [ 365.010540][T18905] [ 365.053151][T18905] CIFS: VFS: bad cache= option: no%e [ 365.138391][T18911] delete_channel: no stack [ 365.345464][T18926] usb usb8: usbfs: process 18926 (syz.1.6036) did not claim interface 0 before use [ 365.445899][T18931] tmpfs: Bad value for 'mpol' [ 365.598761][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6046'. [ 365.730022][ T6126] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 365.784300][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 365.784336][ T30] audit: type=1400 audit(1747871510.016:6077): avc: denied { read } for pid=18953 comm="syz.4.6050" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.809357][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6054'. [ 365.826754][T18955] binder: 18953:18955 ioctl 400c620e 200000000380 returned -22 [ 365.876236][ T30] audit: type=1400 audit(1747871510.016:6078): avc: denied { open } for pid=18953 comm="syz.4.6050" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.958448][ T6126] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.978700][ T6126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.997180][ T30] audit: type=1400 audit(1747871510.054:6079): avc: denied { ioctl } for pid=18953 comm="syz.4.6050" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 366.007552][T18967] tmpfs: Bad value for 'mpol' [ 366.022660][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.022923][ T6126] usb 3-1: Product: syz [ 366.050726][ T6126] usb 3-1: Manufacturer: syz [ 366.064460][ T6126] usb 3-1: SerialNumber: syz [ 366.100193][ T6126] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 366.109474][ T30] audit: type=1400 audit(1747871510.306:6080): avc: denied { write } for pid=18969 comm="syz.0.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 366.129361][ T5897] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 366.184784][ T5812] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 366.207921][ T30] audit: type=1400 audit(1747871510.409:6081): avc: denied { name_bind } for pid=18975 comm="syz.0.6061" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 366.263037][ T30] audit: type=1400 audit(1747871510.419:6082): avc: denied { node_bind } for pid=18975 comm="syz.0.6061" saddr=fe80::bb src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 366.285159][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.341790][ T5897] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 366.357115][ T5897] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 366.386227][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 366.418807][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.448878][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 366.465995][T18988] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6067'. [ 366.494588][T18990] netlink: 'syz.3.6068': attribute type 1 has an invalid length. [ 366.506990][T18990] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6068'. [ 366.531805][ T5993] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 366.562565][ T30] audit: type=1400 audit(1747871510.737:6083): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 366.610241][T18994] xt_SECMARK: invalid mode: 2 [ 366.644025][ T10] usb 3-1: USB disconnect, device number 46 [ 366.703971][ T5993] usb 5-1: Using ep0 maxpacket: 16 [ 366.717434][ T5993] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 366.729552][ T5993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.747420][ T5993] usb 5-1: config 0 has no interface number 0 [ 366.763243][ T5993] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 366.773220][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.788894][ T5993] usb 5-1: Product: syz [ 366.793145][ T5993] usb 5-1: Manufacturer: syz [ 366.808616][ T5993] usb 5-1: SerialNumber: syz [ 366.814687][ T30] audit: type=1400 audit(1747871510.980:6084): avc: denied { connect } for pid=19001 comm="syz.3.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 366.836489][ T5993] usb 5-1: config 0 descriptor?? [ 366.878034][ T5897] gspca_sn9c2028: read1 error -71 [ 366.894268][ T5897] gspca_sn9c2028: read1 error -71 [ 366.900068][ T30] audit: type=1400 audit(1747871511.055:6085): avc: denied { accept } for pid=19005 comm="syz.3.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 366.904781][ T5897] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 366.962720][ T5897] usb 2-1: USB disconnect, device number 92 [ 367.065262][ T5993] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 367.072308][ T5993] usb 5-1: No valid video chain found. [ 367.297179][ T5993] usb 5-1: USB disconnect, device number 86 [ 367.344270][ T5812] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 367.353631][ T5812] ath9k_htc: Failed to initialize the device [ 367.366630][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 367.515032][T19047] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 367.529553][ T30] audit: type=1400 audit(1747871511.635:6086): avc: denied { write } for pid=19048 comm="syz.3.6096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 367.552248][T19047] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 368.085455][ T5993] hid-generic 0348:007F:0003.0001: item fetching failed at offset 0/2 [ 368.103852][ T5993] hid-generic 0348:007F:0003.0001: probe with driver hid-generic failed with error -22 [ 368.204672][T19100] __vm_enough_memory: pid: 19100, comm: syz.1.6121, bytes: 21200303374336 not enough memory for the allocation [ 368.307201][T19109] CIFS: iocharset name too long [ 368.403002][ T5812] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 368.473652][T19122] netlink: 'syz.4.6132': attribute type 10 has an invalid length. [ 368.491854][T19122] team0: Port device dummy0 added [ 368.578918][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6136'. [ 368.589922][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.610661][ T5812] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 368.627683][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.649511][ T5812] usb 1-1: config 0 descriptor?? [ 368.667003][ T5812] xbox_remote_probe: Unexpected endpoint_in [ 368.673220][T19134] netlink: 'syz.1.6138': attribute type 5 has an invalid length. [ 368.677378][ T5812] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 368.747199][T19139] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.770018][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6142'. [ 368.780090][T19142] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6142'. [ 368.839873][T19144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6144'. [ 368.875635][ T5812] usb 1-1: USB disconnect, device number 96 [ 368.928674][T19152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6147'. [ 369.112374][T19167] netlink: 'syz.1.6155': attribute type 16 has an invalid length. [ 369.120605][T19167] netlink: 'syz.1.6155': attribute type 17 has an invalid length. [ 369.212255][T19174] SELinux: syz.3.6160 (19174) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 369.237276][T19178] netlink: 'syz.1.6158': attribute type 29 has an invalid length. [ 369.890639][T19233] kAFS: unable to lookup cell '/,' [ 370.004971][T19247] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 370.269172][T19265] xt_TPROXY: Can be used only with -p tcp or -p udp [ 370.489596][T19283] ip6t_srh: unknown srh match flags 4000 [ 370.572790][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 370.750328][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6220'. [ 370.777773][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 370.786908][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6220'. [ 370.803901][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.824970][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 370.844927][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.869789][ T10] usb 2-1: config 0 descriptor?? [ 370.888433][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 371.093905][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 371.356506][ T10] gspca_vc032x: reg_w err -71 [ 371.361290][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 371.384080][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 371.384095][ T30] audit: type=1326 audit(1747871515.245:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 371.423417][ T10] usb 2-1: USB disconnect, device number 93 [ 371.436151][ T30] audit: type=1326 audit(1747871515.245:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 371.440927][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6240'. [ 371.481353][ T30] audit: type=1326 audit(1747871515.283:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 371.505080][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.512225][ T30] audit: type=1326 audit(1747871515.283:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 371.590237][ T30] audit: type=1326 audit(1747871515.283:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1938e969 code=0x7ffc0000 [ 371.613719][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.687150][T19358] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6248'. [ 371.763084][T19365] netlink: 'syz.2.6251': attribute type 10 has an invalid length. [ 371.792050][T19365] veth0_macvtap: left promiscuous mode [ 371.808449][T19365] batman_adv: batadv0: Adding interface: macvtap0 [ 371.815833][T19365] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.842646][T19365] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 373.003082][T19461] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.328227][ T30] audit: type=1400 audit(1747871517.069:6096): avc: denied { write } for pid=19485 comm="syz.1.6310" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 373.435781][ T30] audit: type=1400 audit(1747871517.069:6097): avc: denied { write } for pid=19482 comm="syz.0.6309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 373.521665][T19498] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.582818][T19503] netlink: 'syz.3.6318': attribute type 1 has an invalid length. [ 373.879410][ T30] audit: type=1400 audit(1747871517.575:6098): avc: denied { create } for pid=19526 comm="syz.3.6331" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.919088][ T5993] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 373.966374][ T30] audit: type=1400 audit(1747871517.659:6099): avc: denied { unlink } for pid=5896 comm="syz-executor" name="file0" dev="tmpfs" ino=6554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.103714][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.125291][T19545] __nla_validate_parse: 1 callbacks suppressed [ 374.125312][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6340'. [ 374.145763][ T5993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 374.162163][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 374.172633][ T5993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 374.199707][ T5993] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 374.209809][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.229790][ T5993] usb 3-1: config 0 descriptor?? [ 374.336034][T19563] SET target dimension over the limit! [ 374.453946][T19569] netlink: 'syz.0.6352': attribute type 33 has an invalid length. [ 374.454246][T19572] team0: entered promiscuous mode [ 374.461824][T19569] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6352'. [ 374.488472][T19572] team_slave_0: entered promiscuous mode [ 374.489180][ T5993] hdpvr 3-1:0.0: firmware version 0x0 dated [ 374.496417][T19572] team_slave_1: entered promiscuous mode [ 374.506190][ T5993] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 374.513575][T19572] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 374.526573][T19572] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 19572, name: syz.4.6353 [ 374.537041][T19572] preempt_count: 0, expected: 0 [ 374.545247][T19572] RCU nest depth: 1, expected: 0 [ 374.550849][T19572] 2 locks held by syz.4.6353/19572: [ 374.556176][T19572] #0: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 374.568648][T19572] #1: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x33/0x390 [ 374.578869][T19572] CPU: 0 UID: 0 PID: 19572 Comm: syz.4.6353 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 374.578895][T19572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.578907][T19572] Call Trace: [ 374.578913][T19572] [ 374.578921][T19572] dump_stack_lvl+0x16c/0x1f0 [ 374.578953][T19572] __might_resched+0x3c0/0x5e0 [ 374.578981][T19572] ? __pfx___might_resched+0x10/0x10 [ 374.579012][T19572] __mutex_lock+0x106/0xb90 [ 374.579043][T19572] ? __pfx___dev_notify_flags+0x10/0x10 [ 374.579065][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.579090][T19572] ? __pfx___mutex_lock+0x10/0x10 [ 374.579114][T19572] ? lock_acquire+0x179/0x350 [ 374.579142][T19572] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.579166][T19572] ? __local_bh_enable_ip+0xa4/0x120 [ 374.579190][T19572] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.579218][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.579238][T19572] dev_set_promiscuity+0xa2/0x260 [ 374.579262][T19572] team_change_rx_flags+0x146/0x390 [ 374.579285][T19572] ? __pfx_team_change_rx_flags+0x10/0x10 [ 374.579306][T19572] __dev_set_promiscuity+0x217/0x590 [ 374.579325][T19572] ? __local_bh_enable_ip+0xa4/0x120 [ 374.579350][T19572] __dev_change_flags+0x2d1/0x720 [ 374.579372][T19572] ? __pfx___dev_change_flags+0x10/0x10 [ 374.579396][T19572] ? __mutex_trylock_common+0xe9/0x250 [ 374.579428][T19572] netif_change_flags+0x8d/0x160 [ 374.579450][T19572] dev_change_flags+0xba/0x250 [ 374.579475][T19572] dev_ifsioc+0x1498/0x1f70 [ 374.579496][T19572] ? __pfx_dev_ifsioc+0x10/0x10 [ 374.579515][T19572] ? __pfx___mutex_lock+0x10/0x10 [ 374.579551][T19572] ? dev_load+0x8e/0x240 [ 374.579574][T19572] dev_ioctl+0x223/0x10e0 [ 374.579596][T19572] sock_do_ioctl+0x19d/0x280 [ 374.579623][T19572] ? __pfx_sock_do_ioctl+0x10/0x10 [ 374.579655][T19572] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 374.579686][T19572] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 374.579718][T19572] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.579759][T19572] sock_ioctl+0x227/0x6b0 [ 374.579785][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 374.579808][T19572] ? hook_file_ioctl_common+0x145/0x410 [ 374.579833][T19572] ? selinux_file_ioctl+0x180/0x270 [ 374.579859][T19572] ? selinux_file_ioctl+0xb4/0x270 [ 374.579889][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 374.579916][T19572] __x64_sys_ioctl+0x190/0x200 [ 374.579944][T19572] do_syscall_64+0xcd/0x260 [ 374.579973][T19572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.579992][T19572] RIP: 0033:0x7fd00bb8e969 [ 374.580009][T19572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.580027][T19572] RSP: 002b:00007fd00c925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.580047][T19572] RAX: ffffffffffffffda RBX: 00007fd00bdb5fa0 RCX: 00007fd00bb8e969 [ 374.580059][T19572] RDX: 0000200000000500 RSI: 0000000000008914 RDI: 0000000000000004 [ 374.580070][T19572] RBP: 00007fd00bc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 374.580082][T19572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.580093][T19572] R13: 0000000000000000 R14: 00007fd00bdb5fa0 R15: 00007ffd556f3c58 [ 374.580120][T19572] [ 374.580227][T19572] [ 374.894938][T19572] ============================= [ 374.899773][T19572] [ BUG: Invalid wait context ] [ 374.904600][T19572] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Tainted: G W [ 374.913250][T19572] ----------------------------- [ 374.918082][T19572] syz.4.6353/19572 is trying to lock: [ 374.923434][T19572] ffff88805b6c8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0xa2/0x260 [ 374.933712][T19572] other info that might help us debug this: [ 374.939594][T19572] context-{5:5} [ 374.943044][T19572] 2 locks held by syz.4.6353/19572: [ 374.948232][T19572] #0: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 374.957041][T19572] #1: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x33/0x390 [ 374.966867][T19572] stack backtrace: [ 374.970583][T19572] CPU: 0 UID: 0 PID: 19572 Comm: syz.4.6353 Tainted: G W 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 374.970609][T19572] Tainted: [W]=WARN [ 374.970614][T19572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.970624][T19572] Call Trace: [ 374.970629][T19572] [ 374.970635][T19572] dump_stack_lvl+0x116/0x1f0 [ 374.970655][T19572] __lock_acquire+0x3ff/0x1ba0 [ 374.970679][T19572] lock_acquire+0x179/0x350 [ 374.970717][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.970740][T19572] ? __pfx___might_resched+0x10/0x10 [ 374.970761][T19572] __mutex_lock+0x199/0xb90 [ 374.970778][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.970793][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.970808][T19572] ? __pfx___mutex_lock+0x10/0x10 [ 374.970829][T19572] ? lock_acquire+0x179/0x350 [ 374.970855][T19572] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.970877][T19572] ? __local_bh_enable_ip+0xa4/0x120 [ 374.970898][T19572] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.970922][T19572] ? dev_set_promiscuity+0xa2/0x260 [ 374.970939][T19572] dev_set_promiscuity+0xa2/0x260 [ 374.970954][T19572] team_change_rx_flags+0x146/0x390 [ 374.970968][T19572] ? __pfx_team_change_rx_flags+0x10/0x10 [ 374.970994][T19572] __dev_set_promiscuity+0x217/0x590 [ 374.971011][T19572] ? __local_bh_enable_ip+0xa4/0x120 [ 374.971033][T19572] __dev_change_flags+0x2d1/0x720 [ 374.971050][T19572] ? __pfx___dev_change_flags+0x10/0x10 [ 374.971063][T19572] ? __mutex_trylock_common+0xe9/0x250 [ 374.971082][T19572] netif_change_flags+0x8d/0x160 [ 374.971095][T19572] dev_change_flags+0xba/0x250 [ 374.971111][T19572] dev_ifsioc+0x1498/0x1f70 [ 374.971130][T19572] ? __pfx_dev_ifsioc+0x10/0x10 [ 374.971146][T19572] ? __pfx___mutex_lock+0x10/0x10 [ 374.971173][T19572] ? dev_load+0x8e/0x240 [ 374.971188][T19572] dev_ioctl+0x223/0x10e0 [ 374.971199][T19572] sock_do_ioctl+0x19d/0x280 [ 374.971215][T19572] ? __pfx_sock_do_ioctl+0x10/0x10 [ 374.971232][T19572] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 374.971255][T19572] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 374.971284][T19572] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.971313][T19572] sock_ioctl+0x227/0x6b0 [ 374.971333][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 374.971349][T19572] ? hook_file_ioctl_common+0x145/0x410 [ 374.971362][T19572] ? selinux_file_ioctl+0x180/0x270 [ 374.971380][T19572] ? selinux_file_ioctl+0xb4/0x270 [ 374.971402][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 374.971426][T19572] __x64_sys_ioctl+0x190/0x200 [ 374.971450][T19572] do_syscall_64+0xcd/0x260 [ 374.971476][T19572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.971489][T19572] RIP: 0033:0x7fd00bb8e969 [ 374.971498][T19572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.971510][T19572] RSP: 002b:00007fd00c925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.971521][T19572] RAX: ffffffffffffffda RBX: 00007fd00bdb5fa0 RCX: 00007fd00bb8e969 [ 374.971529][T19572] RDX: 0000200000000500 RSI: 0000000000008914 RDI: 0000000000000004 [ 374.971539][T19572] RBP: 00007fd00bc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 374.971550][T19572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.971560][T19572] R13: 0000000000000000 R14: 00007fd00bdb5fa0 R15: 00007ffd556f3c58 [ 374.971576][T19572] [ 375.298500][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.308906][ T5993] hdpvr 3-1:0.0: device init failed [ 375.311474][T19572] dummy0: entered promiscuous mode [ 375.314869][ T5993] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 375.319555][T19572] team0: entered allmulticast mode [ 375.332590][ T5993] usb 3-1: USB disconnect, device number 47 [ 375.336069][T19572] team_slave_0: entered allmulticast mode [ 375.345383][T19572] team_slave_1: entered allmulticast mode [ 375.352814][T19572] dummy0: entered allmulticast mode [ 375.358907][T19572] 8021q: adding VLAN 0 to HW filter on device team0