last executing test programs: 3m55.408236949s ago: executing program 2 (id=188): faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 3m55.36629568s ago: executing program 2 (id=190): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x800) 3m55.36606637s ago: executing program 2 (id=192): lsm_set_self_attr(0x0, &(0x7f0000000000), 0x0, 0x0) 3m55.315899611s ago: executing program 2 (id=195): socket$inet(0x2, 0x1, 0x0) 3m55.008646538s ago: executing program 2 (id=198): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m54.944911879s ago: executing program 2 (id=201): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.003624848s ago: executing program 4 (id=8827): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 995.440469ms ago: executing program 3 (id=8828): userfaultfd(0x80001) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x6, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x6, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x4, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x7, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x30e, 0x78, 0xea4, 0x400000, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0x8, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x6, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x8, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0x4e8a20fd, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x6, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xb7, 0x80000003, 0x5, 0x401, 0xc8, 0x1, 0xfffff000, 0x10080, 0x6, 0x7e, 0x100, 0x1000, 0x7, 0x3, 0x8, 0x6, 0x226, 0x6, 0x5, 0xf, 0x30b1d693, 0x1d433e09, 0xf40, 0x7, 0x1, 0x6c1b, 0xc51a, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 967.436889ms ago: executing program 3 (id=8829): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) 956.992929ms ago: executing program 4 (id=8830): socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 888.181491ms ago: executing program 3 (id=8831): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x9, 0x5, 0xffffffff, 0xf2, 0xffffff82, "c9"}}, 0x119) write$UHID_CREATE2(r0, &(0x7f0000002240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x4, 0x3, 0x5, 0x4, 0x80000001}}, 0x118) 888.123831ms ago: executing program 3 (id=8832): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) 887.808701ms ago: executing program 3 (id=8833): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 867.635691ms ago: executing program 3 (id=8834): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 581.974277ms ago: executing program 1 (id=8838): io_setup(0x7, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffd, r1, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 458.26116ms ago: executing program 1 (id=8839): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) 426.918351ms ago: executing program 1 (id=8841): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') inotify_rm_watch(r0, 0x0) 376.014261ms ago: executing program 4 (id=8843): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 369.589602ms ago: executing program 1 (id=8844): r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9d5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 (0bd3:0569) [ 165.581842][ T72] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 165.588582][ T45] usb 4-1: No valid video chain found. [ 165.599811][ T72] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 165.611449][ T72] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 165.628427][ T72] usb 2-1: USB disconnect, device number 89 [ 165.731575][ T1829] usb 1-1: MIDIStreaming interface descriptor not found [ 165.742420][ T1829] usb 1-1: USB disconnect, device number 88 [ 165.758146][ T486] udevd[486]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.800023][ T45] usb 4-1: USB disconnect, device number 88 [ 166.127249][ T31] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 166.300541][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 166.308974][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.315252][ T36] audit: type=1400 audit(2000000073.458:267): avc: denied { map } for pid=3808 comm="syz.0.1805" path="pipe:[2771]" dev="pipefs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.322819][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.373758][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.397039][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.408918][ T10] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 166.409315][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.429584][ T31] usb 5-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈→Ⓩ蟸맏᯻쌲钧욢 [ 166.449313][ T31] usb 5-1: SerialNumber: syz [ 166.473936][ T3817] fuseblk: Bad value for 'source' [ 166.605296][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.619084][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 166.628739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.639537][ T10] usb 2-1: Product: syz [ 166.644180][ T10] usb 2-1: Manufacturer: syz [ 166.651978][ T72] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 166.661723][ T10] usb 2-1: SerialNumber: syz [ 166.667614][ T10] usb 2-1: config 0 descriptor?? [ 166.677891][ T10] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 166.683328][ T31] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 166.694867][ T31] cdc_ncm 5-1:1.0: bind() failure [ 166.705377][ T31] usb 5-1: USB disconnect, device number 88 [ 166.777501][ T673] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 166.844335][ T72] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 166.856882][ T72] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 166.870718][ T72] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 166.888603][ T72] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 166.898896][ T72] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.914322][ T72] usb 4-1: config 0 descriptor?? [ 166.917619][ T31] usb 2-1: USB disconnect, device number 90 [ 166.930367][ T3813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 166.972530][ T673] usb 1-1: Using ep0 maxpacket: 8 [ 166.981945][ T673] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.993912][ T673] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 167.004022][ T673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.013231][ T673] usb 1-1: Product: syz [ 167.017894][ T673] usb 1-1: Manufacturer: syz [ 167.022847][ T673] usb 1-1: SerialNumber: syz [ 167.160809][ T72] usbhid 4-1:0.0: can't add hid device: -71 [ 167.168570][ T72] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.181398][ T72] usb 4-1: USB disconnect, device number 89 [ 167.252251][ T673] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.262385][ T673] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 167.277033][ T673] usb 1-1: USB disconnect, device number 89 [ 167.487007][ T3837] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.497062][ T3837] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 167.508477][ T3837] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.519103][ T3837] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 167.542475][ T3839] cgroup: subsys name conflicts with all [ 167.622786][ T31] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 167.678688][ T36] audit: type=1400 audit(2000000074.731:268): avc: denied { write } for pid=3857 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.785332][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 167.795477][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 167.811497][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.833015][ T31] usb 5-1: config 0 has no interface number 0 [ 167.855956][ T31] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.882887][ T31] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.909744][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 167.921564][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 167.934232][ T3885] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1842'. [ 167.955124][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.971059][ T31] usb 5-1: Product: syz [ 167.979686][ T31] usb 5-1: Manufacturer: syz [ 167.985318][ T31] usb 5-1: SerialNumber: syz [ 168.002490][ T31] usb 5-1: config 0 descriptor?? [ 168.115187][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 168.115204][ T3899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1849'. [ 168.115214][ T36] audit: type=1400 audit(2000000075.128:271): avc: denied { write } for pid=3898 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.191390][ T36] audit: type=1404 audit(2000000075.202:272): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 168.210421][ T36] audit: type=1404 audit(2000000075.221:273): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 168.229677][ T673] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 168.243299][ T36] audit: type=1400 audit(2000000075.248:274): avc: denied { ioctl } for pid=3894 comm="syz.0.1847" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.252189][ T31] ipheth 5-1:0.196: Unable to find endpoints [ 168.282950][ T36] audit: type=1400 audit(2000000075.276:275): avc: denied { read write } for pid=534 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.298931][ T1829] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 168.321260][ T36] audit: type=1400 audit(2000000075.276:276): avc: denied { open } for pid=534 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.326450][ T31] usb 5-1: USB disconnect, device number 89 [ 168.372280][ T36] audit: type=1400 audit(2000000075.276:277): avc: denied { ioctl } for pid=534 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.403940][ T3907] netlink: 'syz.3.1853': attribute type 12 has an invalid length. [ 168.435984][ T673] usb 2-1: Using ep0 maxpacket: 16 [ 168.443329][ T673] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 168.459132][ T36] audit: type=1400 audit(2000000075.453:278): avc: denied { create } for pid=3910 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.488016][ T36] audit: type=1400 audit(2000000075.463:279): avc: denied { write } for pid=3910 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.511558][ T1829] usb 1-1: Using ep0 maxpacket: 32 [ 168.521228][ T673] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 168.534528][ T673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.540495][ T1829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.545827][ T673] usb 2-1: Product: syz [ 168.561484][ T673] usb 2-1: Manufacturer: syz [ 168.566342][ T1829] usb 1-1: config 254 has an invalid interface number: 103 but max is 0 [ 168.569154][ T673] usb 2-1: SerialNumber: syz [ 168.582266][ T1829] usb 1-1: config 254 has no interface number 0 [ 168.604294][ T36] audit: type=1400 audit(2000000075.583:280): avc: denied { read } for pid=3912 comm="syz.3.1856" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.619008][ T1829] usb 1-1: config 254 interface 103 altsetting 2 bulk endpoint 0xB has invalid maxpacket 1023 [ 168.656515][ T1829] usb 1-1: config 254 interface 103 altsetting 2 bulk endpoint 0xA has invalid maxpacket 1023 [ 168.668026][ T1829] usb 1-1: config 254 interface 103 has no altsetting 0 [ 168.679250][ T1829] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 168.690258][ T1829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.702221][ T1829] usb 1-1: Product: syz [ 168.710015][ T1829] usb 1-1: Manufacturer: syz [ 168.726101][ T1829] usb 1-1: SerialNumber: syz [ 168.735223][ T3895] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 168.747948][ T3895] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 168.825316][ T673] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.833769][ T673] usb 2-1: unit 6: unexpected type 0x03 [ 168.840987][ T673] usb 2-1: unit 12 not found! [ 168.849187][ T673] usb 2-1: unit 4 not found! [ 168.859144][ T673] usb 2-1: unit 8 not found! [ 168.868110][ T673] usb 2-1: unit 1 not found! [ 168.878531][ T673] usb 2-1: unit 9 not found! [ 168.901624][ T3923] incfs: Options parsing error. -22 [ 168.909433][ T3923] incfs: mount failed -22 [ 168.919783][ T673] usb 2-1: USB disconnect, device number 91 [ 168.943544][ T660] udevd[660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.001879][ T1829] usbserial_generic 1-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 169.016545][ T1829] usbserial_generic 1-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 169.030291][ T1829] usbserial_generic 1-1:254.103: generic converter detected [ 169.042098][ T1829] usb 1-1: generic converter now attached to ttyUSB0 [ 169.050828][ T1829] usb 1-1: generic converter now attached to ttyUSB1 [ 169.060070][ T1829] usb 1-1: USB disconnect, device number 90 [ 169.069495][ T1829] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 169.079082][ T31] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 169.091935][ T1829] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 169.120254][ T1829] usbserial_generic 1-1:254.103: device disconnected [ 169.250555][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 169.263304][ T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 169.275665][ T833] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 169.286466][ T31] usb 4-1: config 220 has no interface number 2 [ 169.294899][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 169.309687][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 169.317900][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 169.326684][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 169.337366][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 169.349659][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.360596][ T31] usb 4-1: Product: syz [ 169.368931][ T31] usb 4-1: Manufacturer: syz [ 169.376844][ T31] usb 4-1: SerialNumber: syz [ 169.476049][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 169.487034][ T833] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 169.500252][ T833] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 169.513761][ T833] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 169.524687][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.534731][ T833] usb 5-1: Product: syz [ 169.543867][ T833] usb 5-1: Manufacturer: syz [ 169.549314][ T833] usb 5-1: SerialNumber: syz [ 169.610910][ T31] usb 4-1: selecting invalid altsetting 0 [ 169.620093][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 169.628326][ T31] usb 4-1: No valid video chain found. [ 169.637516][ T31] usb 4-1: USB disconnect, device number 90 [ 169.726108][ T45] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 169.790059][ T833] usb 5-1: USB disconnect, device number 90 [ 169.802116][ T486] udevd[486]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.844560][ T1829] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 169.898727][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 169.911789][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 169.931410][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.947139][ T45] usb 2-1: Product: syz [ 169.954176][ T45] usb 2-1: Manufacturer: syz [ 169.961339][ T45] usb 2-1: SerialNumber: syz [ 170.030917][ T1829] usb 1-1: config 0 has an invalid interface number: 128 but max is -1 [ 170.042815][ T1829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 170.053377][ T1829] usb 1-1: config 0 has no interface number 0 [ 170.062370][ T1829] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 170.074393][ T1829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.088809][ T1829] usb 1-1: config 0 descriptor?? [ 170.194371][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.237797][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 170.253175][ T45] usb 2-1: USB disconnect, device number 92 [ 170.270337][ T660] udevd[660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 170.325023][ T1829] usb 1-1: USB disconnect, device number 91 [ 170.432698][ T3947] x_tables: unsorted underflow at hook 4 [ 170.473106][ T673] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 170.592161][ T3969] ip6gre0: mtu less than device minimum [ 170.636830][ T673] usb 4-1: config 154 has an invalid interface number: 128 but max is 0 [ 170.650866][ T673] usb 4-1: config 154 has no interface number 0 [ 170.660014][ T673] usb 4-1: config 154 interface 128 has no altsetting 0 [ 170.671787][ T673] usb 4-1: string descriptor 0 read error: -22 [ 170.684813][ T673] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 170.698725][ T673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.711422][ T673] ums-datafab 4-1:154.128: USB Mass Storage device detected [ 170.787622][ T673] ums-sddr55 4-1:154.128: USB Mass Storage device detected [ 170.954477][ T673] usb 4-1: USB disconnect, device number 91 [ 171.221892][ T4080] netlink: 'syz.4.1937': attribute type 27 has an invalid length. [ 171.303092][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 171.429035][ T4120] syz.4.1957 (4120): /proc/4119/oom_adj is deprecated, please use /proc/4119/oom_score_adj instead. [ 171.582750][ T4151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=4151 comm=syz.0.1972 [ 171.596552][ T4154] kernel profiling enabled (shift: 9) [ 171.804175][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 171.940760][ T4215] netlink: 'syz.0.2004': attribute type 4 has an invalid length. [ 171.951119][ T4213] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2003'. [ 172.002917][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 172.032559][ T4213] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2003'. [ 172.044901][ T4213] netlink: 'syz.3.2003': attribute type 2 has an invalid length. [ 172.056124][ T4213] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2003'. [ 172.109601][ T45] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 172.154813][ T4233] netlink: 'syz.4.2012': attribute type 46 has an invalid length. [ 172.178385][ T4233] netlink: 'syz.4.2012': attribute type 28 has an invalid length. [ 172.214195][ T4238] netlink: 'syz.4.2016': attribute type 5 has an invalid length. [ 172.234732][ T4240] netlink: 'syz.3.2015': attribute type 11 has an invalid length. [ 172.318187][ T4250] netlink: 'syz.4.2021': attribute type 4 has an invalid length. [ 172.337172][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 172.355935][ T45] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 172.368393][ T45] usb 2-1: config 0 has no interface number 0 [ 172.374751][ T45] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.415174][ T45] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.432322][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 172.456402][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.467727][ T45] usb 2-1: Product: syz [ 172.472383][ T45] usb 2-1: Manufacturer: syz [ 172.482519][ T45] usb 2-1: SerialNumber: syz [ 172.489465][ T45] usb 2-1: config 0 descriptor?? [ 172.508804][ T4199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.532528][ T4199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.764983][ T4199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.780486][ T4199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.995648][ T4310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2051'. [ 173.016752][ T45] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 173.061285][ T45] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 173.103717][ T45] asix 2-1:0.251: probe with driver asix failed with error -5 [ 173.138319][ T45] usb 2-1: USB disconnect, device number 93 [ 173.235700][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 173.572496][ T4400] netlink: 'syz.3.2096': attribute type 8 has an invalid length. [ 173.668783][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 173.668807][ T36] audit: type=1400 audit(2000000080.251:333): avc: denied { create } for pid=4418 comm="syz.1.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.751103][ T36] audit: type=1400 audit(2000000080.334:334): avc: denied { read } for pid=4428 comm="syz.4.2110" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.785037][ T36] audit: type=1400 audit(2000000080.334:335): avc: denied { open } for pid=4428 comm="syz.4.2110" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.873275][ T36] audit: type=1400 audit(2000000080.436:336): avc: denied { read } for pid=4436 comm="syz.1.2114" name="binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.919281][ T36] audit: type=1400 audit(2000000080.482:337): avc: denied { open } for pid=4436 comm="syz.1.2114" path="/dev/binderfs/binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.968208][ T36] audit: type=1400 audit(2000000080.528:338): avc: denied { ioctl } for pid=4436 comm="syz.1.2114" path="/dev/binderfs/binder0" dev="binder" ino=18 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.109866][ T36] audit: type=1400 audit(2000000080.657:339): avc: denied { append } for pid=4452 comm="syz.3.2123" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.190463][ T36] audit: type=1400 audit(2000000080.731:340): avc: denied { write } for pid=4461 comm="syz.4.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.249647][ T4475] __nla_validate_parse: 1 callbacks suppressed [ 174.249669][ T4475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2131'. [ 174.266629][ T36] audit: type=1400 audit(2000000080.787:341): avc: denied { nlmsg_read } for pid=4470 comm="syz.1.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.438858][ T36] audit: type=1400 audit(2000000080.962:342): avc: denied { getopt } for pid=4506 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.473878][ T4510] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.497736][ T4510] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.092260][ T4603] 2N: renamed from vcan0 (while UP) [ 175.282036][ T4623] netlink: 'syz.1.2206': attribute type 9 has an invalid length. [ 175.306786][ T4625] : renamed from veth0_vlan (while UP) [ 175.320998][ T4627] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 175.525328][ T4677] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2233'. [ 175.564062][ T4683] SELinux: failed to load policy [ 175.634999][ T4699] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2245'. [ 175.705040][ T4713] netlink: 'syz.4.2250': attribute type 4 has an invalid length. [ 175.907508][ T4750] netlink: 'syz.4.2269': attribute type 10 has an invalid length. [ 175.942697][ T4757] overlayfs: missing 'lowerdir' [ 176.008819][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 176.239050][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.246243][ T4809] netlink: 'syz.4.2296': attribute type 16 has an invalid length. [ 176.271067][ T4814] IPv6: Can't replace route, no match found [ 176.273309][ T4813] mmap: syz.4.2299 (4813): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 176.333108][ T4824] netlink: 'syz.1.2304': attribute type 27 has an invalid length. [ 176.716871][ T4897] can0: slcan on ttyS3. [ 176.803152][ T4896] can0 (unregistered): slcan off ttyS3. [ 176.833067][ T4911] 8021q: VLANs not supported on lo [ 176.849733][ T4913] netlink: 5892 bytes leftover after parsing attributes in process `syz.4.2347'. [ 176.914188][ T4929] netlink: 'syz.0.2353': attribute type 21 has an invalid length. [ 177.035065][ T4956] process 'syz.4.2368' launched '/dev/fd/3' with NULL argv: empty string added [ 177.070199][ T4962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2370'. [ 177.131261][ T4970] bridge0: port 3(veth0_to_team) entered blocking state [ 177.138898][ T4970] bridge0: port 3(veth0_to_team) entered disabled state [ 177.146031][ T4970] veth0_to_team: entered allmulticast mode [ 177.160178][ T4970] veth0_to_team: entered promiscuous mode [ 177.257551][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 177.305454][ T5002] netlink: 'syz.4.2391': attribute type 64 has an invalid length. [ 177.316240][ T5002] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2391'. [ 177.540025][ T1829] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 177.612988][ T5054] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2417'. [ 177.712795][ T1829] usb 1-1: Using ep0 maxpacket: 32 [ 177.728107][ T1829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.755015][ T1829] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 177.775042][ T1829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.785389][ T1829] usb 1-1: Product: syz [ 177.791290][ T1829] usb 1-1: Manufacturer: syz [ 177.796893][ T1829] usb 1-1: SerialNumber: syz [ 177.803453][ T1829] usb 1-1: config 0 descriptor?? [ 177.810907][ T1829] usb 1-1: bad CDC descriptors [ 177.815986][ T1829] usb 1-1: unsupported MDLM descriptors [ 177.856569][ T5095] netlink: 'syz.4.2437': attribute type 4 has an invalid length. [ 177.874748][ T5095] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2437'. [ 177.934031][ T5108] gretap0: entered promiscuous mode [ 178.029293][ T1829] usb 1-1: USB disconnect, device number 92 [ 178.196355][ T5163] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 178.482239][ T673] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 178.585451][ T10] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 178.645922][ T673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 178.659077][ T673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 178.669354][ T673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 178.679755][ T673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 178.691753][ T673] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 178.701608][ T673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.710099][ T673] usb 2-1: Product: syz [ 178.715829][ T673] usb 2-1: Manufacturer: syz [ 178.720901][ T673] usb 2-1: SerialNumber: syz [ 178.726563][ T673] usb 2-1: config 0 descriptor?? [ 178.733599][ T673] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 178.774345][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.791813][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 178.803055][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 178.835427][ T10] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 178.859188][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.874517][ T10] usb 5-1: Product: syz [ 178.879084][ T10] usb 5-1: Manufacturer: syz [ 178.884738][ T10] usb 5-1: SerialNumber: syz [ 178.896338][ T5173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.952062][ T673] scsi host1: usb-storage 2-1:0.0 [ 178.959975][ T673] usb 2-1: USB disconnect, device number 94 [ 179.031783][ T5224] netlink: 'syz.3.2499': attribute type 12 has an invalid length. [ 179.156237][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 179.182222][ T10] usb 5-1: USB disconnect, device number 91 [ 179.196564][ T4898] udevd[4898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.525041][ T5302] netlink: 'syz.0.2534': attribute type 21 has an invalid length. [ 179.802842][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 179.802863][ T36] audit: type=1400 audit(2000000085.908:390): avc: denied { setcurrent } for pid=5358 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 179.906786][ T5373] bridge: RTM_NEWNEIGH with invalid ether address [ 180.131313][ T36] audit: type=1400 audit(2000000086.221:391): avc: denied { bind } for pid=5421 comm="syz.1.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.230347][ T5442] __nla_validate_parse: 2 callbacks suppressed [ 180.230373][ T5442] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2602'. [ 180.283922][ T5453] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2608'. [ 180.307522][ T36] audit: type=1400 audit(2000000086.378:392): avc: denied { bind } for pid=5455 comm="syz.0.2609" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.339041][ T36] audit: type=1400 audit(2000000086.378:393): avc: denied { name_bind } for pid=5455 comm="syz.0.2609" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 180.361242][ T36] audit: type=1400 audit(2000000086.378:394): avc: denied { node_bind } for pid=5455 comm="syz.0.2609" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 180.502457][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 180.548800][ T5497] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 180.618880][ T5511] x_tables: unsorted underflow at hook 2 [ 180.683286][ T5525] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.702811][ T5529] rust_binder: Write failure EFAULT in pid:1276 [ 180.723108][ T5534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2648'. [ 180.910709][ T5571] validate_nla: 2 callbacks suppressed [ 180.910735][ T5571] netlink: 'syz.3.2666': attribute type 46 has an invalid length. [ 180.937895][ T36] audit: type=1400 audit(2000000086.959:395): avc: denied { read } for pid=5573 comm="syz.1.2668" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.975121][ T36] audit: type=1400 audit(2000000086.959:396): avc: denied { open } for pid=5573 comm="syz.1.2668" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.001848][ T36] audit: type=1400 audit(2000000086.978:397): avc: denied { ioctl } for pid=5573 comm="syz.1.2668" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.032002][ T5580] netlink: 'syz.3.2669': attribute type 3 has an invalid length. [ 181.035644][ T5579] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2671'. [ 181.041805][ T5580] netlink: 944 bytes leftover after parsing attributes in process `syz.3.2669'. [ 181.088079][ T5587] netlink: 'syz.1.2673': attribute type 2 has an invalid length. [ 181.149826][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 181.219865][ T5609] IPv6: A: Disabled Multicast RS [ 181.295388][ T5628] netlink: 'syz.1.2695': attribute type 27 has an invalid length. [ 181.312020][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'. [ 181.404334][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.513107][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2698'. [ 181.630432][ T36] audit: type=1400 audit(2000000087.596:398): avc: denied { setopt } for pid=5665 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.757918][ T36] audit: type=1400 audit(2000000087.716:399): avc: denied { bind } for pid=5684 comm="syz.1.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.903884][ T5715] netlink: 'syz.0.2734': attribute type 5 has an invalid length. [ 181.978981][ T5728] PM: Enabling pm_trace changes system date and time during resume. [ 181.978981][ T5728] PM: Correct system time has to be restored manually after resume. [ 182.049630][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 182.254687][ T5788] sit0: entered promiscuous mode [ 182.259866][ T5788] netlink: 'syz.1.2769': attribute type 1 has an invalid length. [ 182.381281][ T5810] netlink: 'syz.4.2780': attribute type 10 has an invalid length. [ 182.396955][ T5810] veth1: entered promiscuous mode [ 182.642585][ T5869] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.796150][ T5905] netlink: 'syz.0.2826': attribute type 12 has an invalid length. [ 182.978955][ T5947] block device autoloading is deprecated and will be removed. [ 183.490728][ T6071] netlink: 'syz.4.2904': attribute type 11 has an invalid length. [ 183.526790][ T6079] x_tables: unsorted entry at hook 1 [ 183.616628][ T6100] rust_binder: Write failure EFAULT in pid:1417 [ 183.728490][ T6125] netlink: 'syz.1.2931': attribute type 13 has an invalid length. [ 183.749409][ T6125] erspan0: refused to change device tx_queue_len [ 184.009224][ T6183] veth0_to_batadv: mtu greater than device maximum [ 184.085309][ T5655] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 184.261013][ T5655] usb 5-1: Using ep0 maxpacket: 16 [ 184.271119][ T5655] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.285889][ T6240] binfmt_misc: register: failed to install interpreter file ./file0 [ 184.294491][ T6243] : renamed from bridge0 (while UP) [ 184.301090][ T5655] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 184.312874][ T5655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.320968][ T5655] usb 5-1: Product: syz [ 184.340276][ T5655] usb 5-1: Manufacturer: syz [ 184.345067][ T5655] usb 5-1: SerialNumber: syz [ 184.437501][ T6265] SELinux: policydb string does not match my string SE Linux [ 184.445460][ T6265] SELinux: failed to load policy [ 184.576810][ T5655] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 184.597996][ T5655] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 184.613892][ T5655] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 184.629190][ T5655] usb 5-1: USB disconnect, device number 92 [ 184.974990][ T6376] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 185.277362][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 185.294826][ T36] audit: type=1400 audit(180.983:467): avc: denied { create } for pid=6435 comm="syz.4.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.341665][ T36] audit: type=1400 audit(180.992:468): avc: denied { lock } for pid=6438 comm="syz.3.3088" path="socket:[22783]" dev="sockfs" ino=22783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 185.367534][ T36] audit: type=1400 audit(181.075:469): avc: denied { getopt } for pid=6448 comm="syz.0.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.501838][ T6477] tipc: Trying to set illegal importance in message [ 185.518519][ T36] audit: type=1400 audit(181.213:470): avc: denied { read write } for pid=6480 comm="syz.4.3111" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.577800][ T36] audit: type=1400 audit(181.213:471): avc: denied { open } for pid=6480 comm="syz.4.3111" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.601487][ T36] audit: type=1400 audit(181.213:472): avc: denied { ioctl } for pid=6480 comm="syz.4.3111" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.680588][ T36] audit: type=1400 audit(181.361:473): avc: denied { write } for pid=6501 comm="syz.1.3121" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.744767][ T6516] __nla_validate_parse: 12 callbacks suppressed [ 185.745605][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3127'. [ 185.888272][ T36] audit: type=1400 audit(181.555:474): avc: denied { read write } for pid=6548 comm="syz.4.3145" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 185.948682][ T36] audit: type=1400 audit(181.555:475): avc: denied { open } for pid=6548 comm="syz.4.3145" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 186.004303][ T36] audit: type=1400 audit(181.555:476): avc: denied { ioctl } for pid=6548 comm="syz.4.3145" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 186.544369][ T6656] rust_binder: Write failure EFAULT in pid:1472 [ 186.625254][ T6666] tipc: Can't bind to reserved service type 2 [ 186.702358][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 186.850981][ T6707] validate_nla: 9 callbacks suppressed [ 186.851005][ T6707] netlink: 'syz.0.3221': attribute type 46 has an invalid length. [ 187.305512][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3267'. [ 187.563080][ T6854] netlink: 'syz.0.3293': attribute type 4 has an invalid length. [ 187.577125][ T6854] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3293'. [ 187.698463][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3308'. [ 187.880960][ T6925] netlink: 'syz.0.3328': attribute type 28 has an invalid length. [ 188.026762][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 188.062759][ T5655] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 188.141045][ T6979] netlink: 'syz.4.3355': attribute type 22 has an invalid length. [ 188.227108][ T5655] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.241381][ T5655] usb 2-1: not running at top speed; connect to a high speed hub [ 188.250269][ T5655] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 188.258879][ T5651] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 188.266745][ T5655] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 188.277327][ T5655] usb 2-1: config 4 has no interface number 0 [ 188.286290][ T5655] usb 2-1: string descriptor 0 read error: -22 [ 188.292893][ T5655] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 188.302316][ T5655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.315662][ T5655] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 188.322784][ T5655] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 188.330228][ T5655] usb 2-1: No valid video chain found. [ 188.391989][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3365'. [ 188.425007][ T7001] incfs: Error accessing: ./file2. [ 188.430537][ T7001] incfs: mount failed -20 [ 188.442094][ T5651] usb 1-1: Using ep0 maxpacket: 8 [ 188.455862][ T5651] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 188.465116][ T5651] usb 1-1: config 0 has no interface number 0 [ 188.473332][ T5651] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 188.483061][ T5651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.494656][ T5651] usb 1-1: Product: syz [ 188.499414][ T5651] usb 1-1: Manufacturer: syz [ 188.505112][ T5651] usb 1-1: SerialNumber: syz [ 188.515024][ T5651] usb 1-1: config 0 descriptor?? [ 188.541106][ T5655] usb 2-1: USB disconnect, device number 95 [ 188.747893][ T5651] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 188.754629][ T5651] usb 1-1: Failed to initialize entity for entity 6 [ 188.762088][ T5651] usb 1-1: Failed to register entities (-22). [ 188.837780][ T7045] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3388'. [ 188.942402][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3399'. [ 188.987598][ T5651] usb 1-1: USB disconnect, device number 93 [ 189.147538][ T7089] netlink: 'syz.1.3410': attribute type 4 has an invalid length. [ 189.155550][ T7089] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3410'. [ 189.698258][ T7184] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 189.780900][ T7194] netlink: 'syz.3.3461': attribute type 13 has an invalid length. [ 189.995286][ T7222] Unsupported ieee802154 address type: 0 [ 190.327847][ T833] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 190.491985][ T833] usb 4-1: Using ep0 maxpacket: 32 [ 190.508283][ T833] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7 [ 190.521639][ T833] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 190.532946][ T833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.548943][ T833] usb 4-1: Product: syz [ 190.553323][ T833] usb 4-1: Manufacturer: syz [ 190.565122][ T833] usb 4-1: SerialNumber: syz [ 190.572433][ T833] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 190.705460][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 190.705482][ T36] audit: type=1400 audit(185.993:516): avc: denied { write } for pid=7351 comm="syz.0.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.733030][ T36] audit: type=1400 audit(186.002:517): avc: denied { read } for pid=7353 comm="syz.4.3540" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.756853][ T36] audit: type=1400 audit(186.002:518): avc: denied { open } for pid=7353 comm="syz.4.3540" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.801647][ T833] usb 4-1: USB disconnect, device number 92 [ 190.817093][ T4901] udevd[4901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.833723][ T36] audit: type=1400 audit(186.020:519): avc: denied { ioctl } for pid=7353 comm="syz.4.3540" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.906311][ T36] audit: type=1400 audit(186.177:520): avc: denied { ioctl } for pid=7371 comm="syz.4.3549" path="socket:[25498]" dev="sockfs" ino=25498 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.944195][ T7378] netlink: 'syz.1.3550': attribute type 13 has an invalid length. [ 191.038471][ T7396] netlink: 'syz.0.3561': attribute type 20 has an invalid length. [ 191.125846][ T36] audit: type=1400 audit(186.380:521): avc: denied { write } for pid=7413 comm="syz.1.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 191.238262][ T36] audit: type=1400 audit(186.482:522): avc: denied { ioctl } for pid=7437 comm="syz.4.3582" path="mnt:[4026532490]" dev="nsfs" ino=4026532490 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.332809][ T36] audit: type=1400 audit(186.574:523): avc: denied { lock } for pid=7455 comm="syz.0.3591" path="socket:[26199]" dev="sockfs" ino=26199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 191.367600][ T7460] raw_sendmsg: syz.1.3592 forgot to set AF_INET. Fix it! [ 191.374775][ T36] audit: type=1400 audit(186.602:524): avc: denied { nlmsg_read } for pid=7458 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.399074][ T7462] netlink: 'syz.3.3594': attribute type 46 has an invalid length. [ 191.509435][ T7482] __nla_validate_parse: 5 callbacks suppressed [ 191.509460][ T7482] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3604'. [ 191.526914][ T7486] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3605'. [ 191.536070][ T7486] gretap0: entered allmulticast mode [ 191.541894][ T7486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.710782][ T7522] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3623'. [ 191.789788][ T36] audit: type=1400 audit(186.999:525): avc: denied { mount } for pid=7539 comm="syz.0.3632" name="/" dev="pstore" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 192.087164][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3670'. [ 192.458621][ T7694] Zero length message leads to an empty skb [ 192.530215][ T7704] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3713'. [ 192.588781][ T7714] validate_nla: 8 callbacks suppressed [ 192.588806][ T7714] netlink: 'syz.3.3718': attribute type 27 has an invalid length. [ 192.603255][ T7714] gretap0: left allmulticast mode [ 192.625449][ T833] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 192.809695][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 192.819557][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.835502][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.845575][ T833] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.855720][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.864899][ T833] usb 5-1: config 0 descriptor?? [ 192.870925][ T833] hub 5-1:0.0: USB hub found [ 192.952940][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 193.005290][ T7757] netlink: 'syz.0.3739': attribute type 4 has an invalid length. [ 193.026460][ T7757] netlink: 'syz.0.3739': attribute type 21 has an invalid length. [ 193.034378][ T7757] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3739'. [ 193.085528][ T7765] netlink: 'syz.1.3743': attribute type 28 has an invalid length. [ 193.093902][ T833] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 193.207372][ T7783] netlink: 'syz.1.3752': attribute type 7 has an invalid length. [ 193.312275][ T833] usbhid 5-1:0.0: can't add hid device: -71 [ 193.324328][ T833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 193.366415][ T833] usb 5-1: USB disconnect, device number 93 [ 193.398607][ T7818] netlink: 'syz.1.3770': attribute type 27 has an invalid length. [ 193.444266][ T7829] netlink: 'syz.1.3775': attribute type 13 has an invalid length. [ 193.585671][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 193.763262][ T7880] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3800'. [ 193.808372][ T7886] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3803'. [ 193.892936][ T7900] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 193.948051][ T1829] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 193.980029][ T7918] netlink: 'syz.4.3819': attribute type 12 has an invalid length. [ 194.121045][ T1829] usb 1-1: Using ep0 maxpacket: 32 [ 194.132659][ T1829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.146712][ T1829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.169765][ T1829] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.179548][ T1829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.199109][ T1829] usb 1-1: config 0 descriptor?? [ 194.212837][ T1829] hub 1-1:0.0: USB hub found [ 194.424645][ T1829] hub 1-1:0.0: 26 ports detected [ 194.435121][ T1829] hub 1-1:0.0: insufficient power available to use all downstream ports [ 194.457102][ T7995] netlink: 'syz.4.3858': attribute type 27 has an invalid length. [ 194.467264][ T7995] gretap0: left promiscuous mode [ 194.479200][ T7995] veth1: left promiscuous mode [ 194.608077][ T8017] netlink: 'syz.4.3868': attribute type 33 has an invalid length. [ 194.647773][ T1829] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 194.656384][ T1829] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 194.664227][ T8025] overlayfs: unescaped trailing colons in lowerdir mount option. [ 194.674426][ T1829] usbhid 1-1:0.0: can't add hid device: -71 [ 194.680472][ T1829] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.721159][ T1829] usb 1-1: USB disconnect, device number 94 [ 194.760546][ T833] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 194.879004][ T8065] sit0: entered promiscuous mode [ 194.924946][ T833] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 194.933092][ T833] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 194.945017][ T833] usb 2-1: config 0 has no interface number 0 [ 194.953003][ T833] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 194.964422][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.973726][ T833] usb 2-1: Product: syz [ 194.978253][ T833] usb 2-1: Manufacturer: syz [ 194.982885][ T833] usb 2-1: SerialNumber: syz [ 194.988943][ T833] usb 2-1: config 0 descriptor?? [ 195.281615][ T8132] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 195.434388][ T833] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 195.450485][ T833] usb 2-1: No valid video chain found. [ 195.462477][ T833] usb 2-1: USB disconnect, device number 96 [ 195.630717][ T8204] x_tables: unsorted underflow at hook 3 [ 195.846528][ T8243] .N: renamed from veth0_to_bond (while UP) [ 195.876942][ T1829] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 196.007897][ T8277] random: crng reseeded on system resumption [ 196.040548][ T1829] usb 4-1: config 1 interface 0 altsetting 54 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 196.061205][ T1829] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.073359][ T8285] tc_dump_action: action bad kind [ 196.090238][ T1829] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 196.102174][ T1829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.114633][ T1829] usb 4-1: Product: syz [ 196.119033][ T1829] usb 4-1: Manufacturer: syz [ 196.123679][ T1829] usb 4-1: SerialNumber: syz [ 196.138495][ T8202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.217389][ T8307] x_tables: duplicate underflow at hook 1 [ 196.252367][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 196.252387][ T36] audit: type=1400 audit(191.114:551): avc: denied { connect } for pid=8312 comm="syz.4.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.373737][ T1829] hub 4-1:1.0: bad descriptor, ignoring hub [ 196.380626][ T1829] hub 4-1:1.0: probe with driver hub failed with error -5 [ 196.419303][ T1829] usb 4-1: USB disconnect, device number 93 [ 196.502802][ T36] audit: type=1401 audit(191.344:552): op=setxattr invalid_context="" [ 196.750320][ T36] audit: type=1400 audit(191.575:553): avc: denied { connect } for pid=8421 comm="syz.1.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.058085][ T1829] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 197.178181][ T36] audit: type=1400 audit(191.972:554): avc: denied { write } for pid=8494 comm="syz.4.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.233311][ T1829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.241588][ T1829] usb 1-1: not running at top speed; connect to a high speed hub [ 197.251458][ T1829] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 197.259789][ T1829] usb 1-1: config 0 has no interface number 0 [ 197.267882][ T1829] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 197.279437][ T1829] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 197.289636][ T1829] usb 1-1: config 0 interface 88 has no altsetting 0 [ 197.298791][ T1829] usb 1-1: string descriptor 0 read error: -22 [ 197.305041][ T1829] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 197.314123][ T1829] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 197.323081][ T1829] usb 1-1: config 0 descriptor?? [ 197.334260][ T1829] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input21 [ 197.348605][ T36] audit: type=1400 audit(192.129:555): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=1662 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.351221][ T5651] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 197.372190][ T36] audit: type=1400 audit(192.129:556): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1662 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.410094][ T5127] udevd[5127]: Error opening device "/dev/input/event3": Input/output error [ 197.419265][ T5127] udevd[5127]: Unable to EVIOCGABS device "/dev/input/event3" [ 197.426880][ T5127] udevd[5127]: Unable to EVIOCGABS device "/dev/input/event3" [ 197.536280][ T5651] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 197.544522][ T5651] usb 4-1: config 0 has no interface number 0 [ 197.557335][ T5651] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 197.569099][ T5651] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 56221, setting to 64 [ 197.580349][ T5651] usb 4-1: config 0 interface 200 has no altsetting 0 [ 197.587707][ T5652] usb 1-1: USB disconnect, device number 95 [ 197.598708][ T5651] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 197.608075][ T5655] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 197.615723][ T5651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.623856][ T5651] usb 4-1: Product: syz [ 197.628088][ T5651] usb 4-1: Manufacturer: syz [ 197.632887][ T5651] usb 4-1: SerialNumber: syz [ 197.638264][ T5651] usb 4-1: config 0 descriptor?? [ 197.643925][ T8475] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.795062][ T5655] usb 5-1: Using ep0 maxpacket: 16 [ 197.801458][ T5655] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 197.809992][ T5655] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 197.818792][ T5655] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 197.829066][ T5655] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 197.839635][ T5655] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.848743][ T5655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.856870][ T5655] usb 5-1: Product: syz [ 197.861113][ T5655] usb 5-1: Manufacturer: syz [ 197.865790][ T5655] usb 5-1: SerialNumber: syz [ 197.874958][ T5651] usb 4-1: USB disconnect, device number 94 [ 198.003863][ T8505] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.003889][ T8505] rust_binder: Read failure Err(EFAULT) in pid:1938 [ 198.064901][ T8513] validate_nla: 7 callbacks suppressed [ 198.064925][ T8513] netlink: 'syz.1.4113': attribute type 9 has an invalid length. [ 198.084950][ T8513] netlink: 'syz.1.4113': attribute type 2 has an invalid length. [ 198.094094][ T5655] usb 5-1: 0:2 : does not exist [ 198.106617][ T5655] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 198.121419][ T5655] usb 5-1: USB disconnect, device number 94 [ 198.135159][ T5127] udevd[5127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.154864][ T36] audit: type=1400 audit(192.876:557): avc: denied { execute } for pid=8516 comm="syz.1.4115" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.458490][ T5651] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 198.493555][ T8548] __nla_validate_parse: 11 callbacks suppressed [ 198.493579][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4130'. [ 198.624869][ T8575] overlayfs: conflicting options: userxattr,redirect_dir=on [ 198.629655][ T5651] usb 1-1: Using ep0 maxpacket: 16 [ 198.638645][ T5651] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 198.660291][ T5651] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 198.669340][ T5651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 198.694971][ T5651] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 198.704082][ T5651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.720157][ T5651] usb 1-1: Product: syz [ 198.724387][ T5651] usb 1-1: Manufacturer: syz [ 198.729087][ T5651] usb 1-1: SerialNumber: syz [ 198.734655][ T36] audit: type=1400 audit(193.402:558): avc: denied { ioctl } for pid=8585 comm="syz.1.4149" path="socket:[29972]" dev="sockfs" ino=29972 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.738770][ T5651] usb 1-1: config 0 descriptor?? [ 198.778113][ T5651] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 198.951479][ T8628] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 198.960179][ T8628] netlink: 'syz.3.4169': attribute type 2 has an invalid length. [ 199.011176][ T5651] usb 1-1: USB disconnect, device number 96 [ 199.029782][ T36] audit: type=1400 audit(193.670:559): avc: denied { write } for pid=8638 comm="syz.1.4174" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.112400][ T8653] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.4180'. [ 199.259240][ T36] audit: type=1400 audit(193.891:560): avc: denied { setopt } for pid=8684 comm="syz.3.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.297178][ T8691] &nr: renamed from bond_slave_1 (while UP) [ 199.364763][ T8702] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 199.388196][ T8702] SELinux: failed to load policy [ 199.442139][ T8715] netlink: 'syz.4.4211': attribute type 30 has an invalid length. [ 199.604974][ T8741] netlink: 'syz.3.4224': attribute type 27 has an invalid length. [ 199.640589][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.662604][ T8747] netlink: 'syz.4.4227': attribute type 1 has an invalid length. [ 199.675282][ T8747] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4227'. [ 199.768361][ T8769] netlink: 'syz.3.4238': attribute type 46 has an invalid length. [ 199.962330][ T8805] netlink: 'syz.3.4255': attribute type 2 has an invalid length. [ 199.970327][ T8805] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4255'. [ 200.065761][ T8830] netlink: 'syz.1.4267': attribute type 4 has an invalid length. [ 200.084618][ T8830] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.4267'. [ 200.185631][ T8860] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4282'. [ 200.194972][ T8860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.405905][ T8909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4308'. [ 200.588608][ T8951] team_slave_1: entered promiscuous mode [ 200.595045][ T8951] team_slave_1: entered allmulticast mode [ 200.660939][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 200.669446][ T8973] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4335'. [ 201.239364][ T9104] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.4386'. [ 201.273973][ T1829] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 201.437640][ T1829] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 201.450693][ T1829] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 201.477208][ T1829] usb 5-1: config 220 has no interface number 2 [ 201.488529][ T1829] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 201.515840][ T1829] usb 5-1: config 220 interface 0 has no altsetting 0 [ 201.524272][ T1829] usb 5-1: config 220 interface 76 has no altsetting 0 [ 201.532215][ T1829] usb 5-1: config 220 interface 1 has no altsetting 0 [ 201.548202][ T1829] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 201.559225][ T1829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.568292][ T1829] usb 5-1: Product: syz [ 201.577453][ T1829] usb 5-1: Manufacturer: syz [ 201.582122][ T1829] usb 5-1: SerialNumber: syz [ 201.677976][ T9190] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 201.823363][ T1829] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 201.834616][ T1829] usb 5-1: No valid video chain found. [ 201.844971][ T1829] usb 5-1: selecting invalid altsetting 0 [ 201.853835][ T1829] usb 5-1: USB disconnect, device number 95 [ 201.973527][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 201.973538][ T9257] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 201.973548][ T36] audit: type=1400 audit(196.392:583): avc: denied { mac_admin } for pid=9256 comm="syz.0.4463" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.021389][ T36] audit: type=1400 audit(196.401:584): avc: denied { relabelto } for pid=9256 comm="syz.0.4463" name="ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_lock_t:s0" [ 202.048296][ T36] audit: type=1400 audit(196.401:585): avc: denied { associate } for pid=9256 comm="syz.0.4463" name="ublk-control" dev="devtmpfs" ino=82 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_lock_t:s0" [ 202.268098][ T9312] random: crng reseeded on system resumption [ 202.613687][ T36] audit: type=1400 audit(196.982:586): avc: denied { read } for pid=9394 comm="syz.0.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.034720][ T36] audit: type=1400 audit(197.370:587): avc: denied { setopt } for pid=9502 comm="syz.3.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.137319][ T9526] overlayfs: conflicting options: userxattr,redirect_dir=on [ 203.215901][ T9545] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 203.790495][ T9668] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 203.801037][ T5655] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 203.843264][ T9676] validate_nla: 10 callbacks suppressed [ 203.843281][ T9676] netlink: 'syz.1.4668': attribute type 27 has an invalid length. [ 203.884572][ T9683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 203.894496][ T9683] SELinux: failed to load policy [ 203.973985][ T5655] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.983825][ T5655] usb 5-1: not running at top speed; connect to a high speed hub [ 203.993198][ T5655] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 204.001575][ T5655] usb 5-1: config 0 has no interface number 0 [ 204.007867][ T5655] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 204.019315][ T5655] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 204.029589][ T5655] usb 5-1: config 0 interface 88 has no altsetting 0 [ 204.039367][ T5655] usb 5-1: string descriptor 0 read error: -22 [ 204.045658][ T5655] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 204.055110][ T5655] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 204.064348][ T9702] netlink: 'syz.0.4680': attribute type 30 has an invalid length. [ 204.075805][ T5655] usb 5-1: config 0 descriptor?? [ 204.084251][ T5655] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input25 [ 204.128281][ T5127] udevd[5127]: Error opening device "/dev/input/event3": Input/output error [ 204.137113][ T5127] udevd[5127]: Unable to EVIOCGABS device "/dev/input/event3" [ 204.144693][ T5127] udevd[5127]: Unable to EVIOCGABS device "/dev/input/event3" [ 204.152458][ T5127] udevd[5127]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 204.176748][ T110] udevd[110]: worker [5127] terminated by signal 6 (Aborted) [ 204.184507][ T110] udevd[110]: worker [5127] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input25/event3' [ 204.305150][ T833] usb 5-1: USB disconnect, device number 96 [ 204.471999][ T9735] : port 2(bridge_slave_1) entered disabled state [ 204.478854][ T9735] netlink: 'syz.3.4703': attribute type 1 has an invalid length. [ 204.490686][ T9735] __nla_validate_parse: 13 callbacks suppressed [ 204.490710][ T9735] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4703'. [ 204.752918][ T833] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 204.916722][ T833] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 204.931767][ T833] usb 2-1: config 0 has no interface number 0 [ 204.945305][ T833] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 204.959003][ T833] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 56221, setting to 64 [ 204.971986][ T833] usb 2-1: config 0 interface 200 has no altsetting 0 [ 204.984982][ T833] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 204.996570][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.005468][ T833] usb 2-1: Product: syz [ 205.009727][ T833] usb 2-1: Manufacturer: syz [ 205.014769][ T833] usb 2-1: SerialNumber: syz [ 205.024235][ T833] usb 2-1: config 0 descriptor?? [ 205.029553][ T9737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.139564][ T9788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9788 comm=syz.3.4724 [ 205.153088][ T9788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=9788 comm=syz.3.4724 [ 205.265849][ T833] usb 2-1: USB disconnect, device number 97 [ 205.352286][ T9830] netlink: 'syz.3.4744': attribute type 3 has an invalid length. [ 205.475187][ T9854] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4756'. [ 205.510671][ T9864] netlink: 'syz.3.4760': attribute type 16 has an invalid length. [ 205.587326][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4769'. [ 205.616608][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 205.631734][ T9889] netlink: 'syz.3.4774': attribute type 25 has an invalid length. [ 205.865831][ T9948] : renamed from bond_slave_0 [ 205.934526][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4812'. [ 206.174082][T10025] rust_binder: Write failure EFAULT in pid:2328 [ 206.177138][T10026] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.443175][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4875'. [ 206.483018][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 206.572391][T10124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4890'. [ 206.583020][T10124] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4890'. [ 206.607477][T10128] netlink: 'syz.3.4892': attribute type 27 has an invalid length. [ 206.660063][T10137] bridge0: port 4(dummy0) entered blocking state [ 206.672366][T10140] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 206.677475][T10137] bridge0: port 4(dummy0) entered disabled state [ 206.684173][ T36] audit: type=1400 audit(200.747:588): avc: denied { relabelto } for pid=10139 comm="syz.1.4897" name="file0" dev="tmpfs" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 206.700251][T10137] dummy0: entered allmulticast mode [ 206.724656][T10137] dummy0: entered promiscuous mode [ 206.730021][T10137] bridge0: port 4(dummy0) entered blocking state [ 206.736443][T10137] bridge0: port 4(dummy0) entered forwarding state [ 206.744337][ T36] audit: type=1400 audit(200.747:589): avc: denied { associate } for pid=10139 comm="syz.1.4897" name="file0" dev="tmpfs" ino=5913 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 206.774964][ T36] audit: type=1400 audit(200.802:590): avc: denied { unlink } for pid=536 comm="syz-executor" name="file0" dev="tmpfs" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 206.856396][T10158] netlink: 'syz.3.4906': attribute type 46 has an invalid length. [ 207.083535][T10215] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4935'. [ 207.353859][T10287] netlink: 'syz.1.4970': attribute type 16 has an invalid length. [ 207.364930][T10286] netlink: 'syz.0.4968': attribute type 4 has an invalid length. [ 207.545342][T10321] ip6gretap0: entered promiscuous mode [ 207.550938][T10321] ip6gretap0: entered allmulticast mode [ 207.596812][T10340] x_tables: duplicate entry at hook 1 [ 207.659034][ T36] audit: type=1400 audit(201.642:591): avc: denied { getattr } for pid=10348 comm="syz.1.5001" path="cgroup:[4026532586]" dev="nsfs" ino=4026532586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.717019][T10361] rust_binder: Write failure EFAULT in pid:2396 [ 207.736421][ T36] audit: type=1400 audit(201.716:592): avc: denied { wake_alarm } for pid=10366 comm="syz.1.5009" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.917521][ T5655] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 208.002999][ T36] audit: type=1400 audit(201.956:593): avc: denied { write } for pid=10428 comm="syz.3.5041" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.060597][ T36] audit: type=1400 audit(202.011:594): avc: granted { setsecparam } for pid=10440 comm="syz.1.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 208.099136][ T5655] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.109500][ T5655] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.120554][ T5655] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 208.129906][ T5655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.140570][ T5655] usb 1-1: Product: syz [ 208.144805][ T5655] usb 1-1: Manufacturer: syz [ 208.149692][ T5655] usb 1-1: SerialNumber: syz [ 208.384241][ T5655] usb 1-1: unit 5 not found! [ 208.395303][ T5655] usb 1-1: USB disconnect, device number 97 [ 208.412339][ T4898] udevd[4898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.741652][T10586] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 208.820592][T10603] : port 1(bridge_slave_0) entered disabled state [ 209.098836][ T833] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 209.123171][ T36] audit: type=1400 audit(202.998:595): avc: denied { read } for pid=10660 comm="syz.4.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.172570][T10671] tc_dump_action: action bad kind [ 209.269290][ T833] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 209.279064][ T833] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 209.301050][ T833] usb 2-1: config 220 has no interface number 2 [ 209.311987][ T833] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.327984][ T833] usb 2-1: config 220 interface 0 has no altsetting 0 [ 209.341610][ T833] usb 2-1: config 220 interface 76 has no altsetting 0 [ 209.357745][ T833] usb 2-1: config 220 interface 1 has no altsetting 0 [ 209.366266][ T833] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.375594][ T833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.390628][ T833] usb 2-1: Product: syz [ 209.400472][ T833] usb 2-1: Manufacturer: syz [ 209.408483][ T833] usb 2-1: SerialNumber: syz [ 209.551323][ T36] audit: type=1400 audit(203.386:596): avc: denied { read } for pid=10742 comm="syz.3.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.589858][ T36] audit: type=1400 audit(203.423:597): avc: denied { setcheckreqprot } for pid=10750 comm="syz.3.5199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 209.649966][ T833] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 209.659055][ T833] usb 2-1: No valid video chain found. [ 209.671856][ T833] usb 2-1: selecting invalid altsetting 0 [ 209.685784][ T833] usb 2-1: USB disconnect, device number 98 [ 209.770261][T10785] validate_nla: 5 callbacks suppressed [ 209.770283][T10785] netlink: 'syz.0.5216': attribute type 25 has an invalid length. [ 209.814418][T10794] : renamed from bond_slave_0 (while UP) [ 209.817459][T10795] netlink: 'syz.0.5219': attribute type 3 has an invalid length. [ 209.870239][T10805] netlink: 'syz.3.5226': attribute type 2 has an invalid length. [ 209.957648][T10825] netlink: 'syz.0.5235': attribute type 22 has an invalid length. [ 209.974984][T10827] incfs: Backing dir is not set, filesystem can't be mounted. [ 209.982732][T10827] incfs: mount failed -2 [ 210.012689][ T36] audit: type=1404 audit(203.810:598): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 210.027536][ T36] audit: type=1400 audit(203.829:599): avc: denied { write } for pid=10832 comm="syz.4.5240" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.054129][ T36] audit: type=1400 audit(203.829:600): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.994116][T10969] netlink: 'syz.3.5308': attribute type 4 has an invalid length. [ 211.002154][T10969] __nla_validate_parse: 10 callbacks suppressed [ 211.002178][T10969] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5308'. [ 211.116540][T10996] netlink: 'syz.3.5320': attribute type 4 has an invalid length. [ 211.125498][T10996] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5320'. [ 211.220808][T11014] netlink: 'syz.0.5330': attribute type 4 has an invalid length. [ 211.325930][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5341'. [ 211.459042][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5356'. [ 211.704115][T11124] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5385'. [ 212.019727][T11176] netlink: 'syz.1.5410': attribute type 5 has an invalid length. [ 212.063155][T11188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5417'. [ 212.563879][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5479'. [ 212.658897][T11335] netlink: 'syz.4.5491': attribute type 16 has an invalid length. [ 212.814606][T11373] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5508'. [ 212.892820][T11389] netlink: 37 bytes leftover after parsing attributes in process `syz.4.5517'. [ 213.061254][T11421] x_tables: duplicate underflow at hook 2 [ 213.087099][ T36] kauditd_printk_skb: 1293 callbacks suppressed [ 213.087121][ T36] audit: type=1400 audit(206.643:1894): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.129979][ T36] audit: type=1400 audit(206.643:1895): avc: denied { read write } for pid=535 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.153865][ T36] audit: type=1400 audit(206.680:1896): avc: denied { read write } for pid=535 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.188856][ T36] audit: type=1400 audit(206.680:1897): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.212767][ T36] audit: type=1400 audit(206.680:1898): avc: denied { read write } for pid=11430 comm="syz.0.5538" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 213.235766][ T36] audit: type=1400 audit(206.717:1899): avc: denied { read write } for pid=11428 comm="syz.4.5537" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 213.271683][ T36] audit: type=1400 audit(206.735:1900): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.295385][ T36] audit: type=1400 audit(206.744:1901): avc: denied { read write } for pid=535 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.320690][ T36] audit: type=1400 audit(206.744:1902): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.370498][ T36] audit: type=1400 audit(206.790:1903): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.409892][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5548'. [ 214.012617][T11597] netlink: 'syz.1.5616': attribute type 16 has an invalid length. [ 214.708569][T11738] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 215.358651][T11869] validate_nla: 6 callbacks suppressed [ 215.358674][T11869] netlink: 'syz.3.5751': attribute type 9 has an invalid length. [ 215.802038][T11969] TCP: TCP_TX_DELAY enabled [ 215.923023][T11996] tc_dump_action: action bad kind [ 215.950548][T12004] 8021q: VLANs not supported on ip_vti0 [ 216.032789][T12024] netlink: 'syz.4.5828': attribute type 3 has an invalid length. [ 216.311449][T12092] tc_dump_action: action bad kind [ 216.451952][T12126] __nla_validate_parse: 5 callbacks suppressed [ 216.451969][T12126] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5876'. [ 216.550053][T12146] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5889'. [ 216.614278][T12159] netlink: 'syz.0.5895': attribute type 13 has an invalid length. [ 216.756830][T12196] netlink: 'syz.4.5913': attribute type 19 has an invalid length. [ 216.909529][T12230] netlink: 'syz.1.5929': attribute type 7 has an invalid length. [ 216.969316][T12238] x_tables: duplicate underflow at hook 2 [ 217.010557][T12244] netlink: 'syz.1.5936': attribute type 16 has an invalid length. [ 217.165866][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5951'. [ 217.325511][T12303] netlink: 'syz.1.5965': attribute type 27 has an invalid length. [ 218.426392][T12549] netlink: 'syz.0.6086': attribute type 16 has an invalid length. [ 218.446658][T12554] netlink: 'syz.4.6088': attribute type 22 has an invalid length. [ 218.517731][ T36] kauditd_printk_skb: 733 callbacks suppressed [ 218.517752][ T36] audit: type=1400 audit(211.662:2637): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.551612][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6097'. [ 218.565677][ T36] audit: type=1400 audit(211.681:2638): avc: denied { read write } for pid=535 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.614682][ T36] audit: type=1400 audit(211.736:2639): avc: denied { read write } for pid=534 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.676765][ T36] audit: type=1400 audit(211.736:2640): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.704059][ T36] audit: type=1400 audit(211.736:2641): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.735005][ T36] audit: type=1400 audit(211.745:2642): avc: denied { create } for pid=12577 comm="syz.3.6103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 218.743925][T12602] netlink: 'syz.0.6111': attribute type 4 has an invalid length. [ 218.756326][ T36] audit: type=1400 audit(211.755:2643): avc: denied { read write } for pid=535 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.787356][ T36] audit: type=1400 audit(211.773:2644): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.824143][ T36] audit: type=1400 audit(211.773:2645): avc: denied { read write } for pid=534 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.876134][ T36] audit: type=1400 audit(211.773:2646): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 219.066550][T12660] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6142'. [ 219.736076][T12804] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.024803][T13138] validate_nla: 8 callbacks suppressed [ 221.024823][T13138] netlink: 'syz.3.6376': attribute type 4 has an invalid length. [ 221.046158][T13138] netlink: 'syz.3.6376': attribute type 5 has an invalid length. [ 221.054810][T13138] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6376'. [ 221.168974][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6391'. [ 221.226753][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'. [ 221.275543][T13193] netlink: 'syz.0.6403': attribute type 7 has an invalid length. [ 221.293295][T13193] netlink: 'syz.0.6403': attribute type 5 has an invalid length. [ 221.301169][T13193] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6403'. [ 221.392262][T13219] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6415'. [ 221.595564][T13269] netlink: 'syz.1.6441': attribute type 25 has an invalid length. [ 221.722053][T13292] netlink: 'syz.1.6452': attribute type 13 has an invalid length. [ 221.907147][T13334] sit0: entered promiscuous mode [ 221.919701][T13334] netlink: 'syz.0.6473': attribute type 1 has an invalid length. [ 221.931955][T13334] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6473'. [ 222.067447][T13356] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6484'. [ 222.089776][T13360] netlink: 37 bytes leftover after parsing attributes in process `syz.1.6486'. [ 222.134626][T13370] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6491'. [ 222.144977][T13370] z00X: renamed from gretap0 (while UP) [ 222.152427][T13370] z00X: entered allmulticast mode [ 222.211610][T13386] : renamed from lo (while UP) [ 222.491274][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6529'. [ 222.722745][T13491] netlink: 'syz.4.6550': attribute type 6 has an invalid length. [ 222.800865][T13507] netlink: 'syz.4.6561': attribute type 7 has an invalid length. [ 222.813035][T13507] netlink: 'syz.4.6561': attribute type 5 has an invalid length. [ 222.820882][T13507] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6561'. [ 223.733445][T13670] bridge_slave_1: left allmulticast mode [ 223.748683][T13670] bridge_slave_1: left promiscuous mode [ 223.755909][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.768280][T13670] bridge_slave_0: left allmulticast mode [ 223.781500][T13670] bridge_slave_0: left promiscuous mode [ 223.787386][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.908314][T13700] sock: sock_timestamping_bind_phc: sock not bind to device [ 223.948551][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 223.948570][ T36] audit: type=1400 audit(216.673:3340): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.982656][ T36] audit: type=1400 audit(216.700:3341): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.006276][ T36] audit: type=1400 audit(216.700:3342): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.036158][ T36] audit: type=1400 audit(216.746:3343): avc: denied { create } for pid=13709 comm="syz.1.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 224.056234][ T36] audit: type=1400 audit(216.756:3344): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.080226][ T36] audit: type=1400 audit(216.774:3345): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.109123][ T36] audit: type=1400 audit(216.820:3346): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.132721][ T36] audit: type=1400 audit(216.820:3347): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.164386][ T36] audit: type=1400 audit(216.876:3348): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.188120][ T36] audit: type=1400 audit(216.876:3349): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.189413][T13722] x_tables: duplicate entry at hook 2 [ 224.434362][T13772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.441648][T13772] IPv6: NLM_F_CREATE should be set when creating new route [ 224.448946][T13772] IPv6: NLM_F_CREATE should be set when creating new route [ 224.651401][ T46] bridge0: port 3(veth0_to_team) entered blocking state [ 224.658435][ T46] bridge0: port 3(veth0_to_team) entered forwarding state [ 224.691725][T13831] x_tables: unsorted entry at hook 2 [ 224.749351][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6724'. [ 225.013391][T13909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6758'. [ 225.073975][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6763'. [ 225.580069][T14056] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6829'. [ 226.568251][T14227] x_tables: unsorted underflow at hook 1 [ 227.643933][T14354] __nla_validate_parse: 1 callbacks suppressed [ 227.643957][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 229.378222][ T36] kauditd_printk_skb: 562 callbacks suppressed [ 229.378244][ T36] audit: type=1400 audit(221.683:3912): avc: denied { read } for pid=14558 comm="syz.0.7073" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 229.411826][ T36] audit: type=1400 audit(221.711:3913): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.445796][ T36] audit: type=1400 audit(221.747:3914): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.473139][ T36] audit: type=1400 audit(221.747:3915): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.497117][ T36] audit: type=1400 audit(221.766:3916): avc: denied { create } for pid=14562 comm="syz.1.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 229.518865][ T36] audit: type=1400 audit(221.784:3917): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.554469][ T36] audit: type=1400 audit(221.830:3918): avc: denied { watch } for pid=14566 comm="syz.1.7077" path="/1796" dev="tmpfs" ino=9047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 229.576174][ T36] audit: type=1400 audit(221.830:3919): avc: denied { read write } for pid=533 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.599777][ T36] audit: type=1400 audit(221.840:3920): avc: denied { read write } for pid=536 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.634796][ T36] audit: type=1400 audit(221.867:3921): avc: denied { read append } for pid=14570 comm="syz.1.7079" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.830513][T14588] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7086'. [ 230.176781][T14650] validate_nla: 7 callbacks suppressed [ 230.176804][T14650] netlink: 'syz.3.7116': attribute type 11 has an invalid length. [ 231.112767][T14765] netlink: 316 bytes leftover after parsing attributes in process `syz.1.7171'. [ 232.087226][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'. [ 232.294560][T14930] can0: slcan on ttynull. [ 232.359571][T14928] can0 (unregistered): slcan off ttynull. [ 233.251372][T15001] netlink: 'syz.4.7284': attribute type 16 has an invalid length. [ 233.266107][T15001] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.7284'. [ 233.801345][T15078] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7323'. [ 233.815360][T15078] netlink: 'syz.0.7323': attribute type 4 has an invalid length. [ 234.806003][ T36] kauditd_printk_skb: 18390 callbacks suppressed [ 234.806023][ T36] audit: type=1400 audit(2000000000.249:22273): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.833764][ T36] audit: type=1400 audit(2000000000.249:22274): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.846622][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.861460][ T149] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 234.869272][ T149] audit: backlog limit exceeded [ 234.873697][ T36] audit: type=1400 audit(2000000000.249:22275): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.874992][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.898260][ T536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.903521][ T149] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 234.909305][ T536] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 235.157565][T15162] netlink: 'syz.1.7362': attribute type 17 has an invalid length. [ 235.432784][T15193] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7377'. [ 235.447179][T15193] netlink: 'syz.4.7377': attribute type 4 has an invalid length. [ 235.694003][T15217] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7388'. [ 235.722602][T15217] netlink: 'syz.1.7388': attribute type 4 has an invalid length. [ 235.746072][T15219] netlink: 'syz.1.7389': attribute type 16 has an invalid length. [ 235.753981][T15219] netlink: 'syz.1.7389': attribute type 25 has an invalid length. [ 235.762005][T15219] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.7389'. [ 236.042353][T15248] netlink: 'syz.3.7403': attribute type 10 has an invalid length. [ 236.634125][T15305] can0: slcan on ptm0. [ 236.705100][T15304] can0 (unregistered): slcan off ptm0. [ 236.856082][T15333] netlink: 'syz.0.7442': attribute type 11 has an invalid length. [ 237.011668][T15352] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7451'. [ 237.635210][T15379] can0: slcan on ttyS3. [ 237.691737][T15378] can0 (unregistered): slcan off ttyS3. [ 239.066233][T15530] netlink: 'syz.4.7536': attribute type 16 has an invalid length. [ 239.327614][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7545'. [ 240.235735][ T36] kauditd_printk_skb: 33119 callbacks suppressed [ 240.235755][ T36] audit: type=1400 audit(2000000005.259:55087): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.256981][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.269172][ T536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.270615][ T149] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 240.276237][ T536] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 240.284425][ T149] audit: backlog limit exceeded [ 240.293023][ T36] audit: type=1400 audit(2000000005.259:55088): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.297851][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.319115][ T36] audit: type=1400 audit(2000000005.259:55089): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.324757][ T536] audit: backlog limit exceeded [ 240.602750][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7607'. [ 240.817604][T15690] netlink: 'syz.1.7615': attribute type 27 has an invalid length. [ 240.866950][T15696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15696 comm=syz.0.7618 [ 241.374205][T15709] netlink: 'syz.3.7624': attribute type 49 has an invalid length. [ 241.648594][T15735] netlink: 'syz.1.7635': attribute type 4 has an invalid length. [ 241.656422][T15735] netlink: 'syz.1.7635': attribute type 5 has an invalid length. [ 241.664222][T15735] netlink: 'syz.1.7635': attribute type 5 has an invalid length. [ 241.672211][T15735] netlink: 3269 bytes leftover after parsing attributes in process `syz.1.7635'. [ 242.812868][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7674'. [ 243.746974][T15918] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7723'. [ 245.143473][T15987] EXT4-fs: Conflicting test_dummy_encryption options [ 245.672965][ T36] kauditd_printk_skb: 37063 callbacks suppressed [ 245.672986][ T36] audit: type=1400 audit(2000000010.269:91446): avc: denied { read write } for pid=534 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.710738][ T36] audit: type=1400 audit(2000000010.278:91447): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.729977][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.738469][ T149] audit: audit_lost=357 audit_rate_limit=0 audit_backlog_limit=64 [ 245.752074][ T149] audit: backlog limit exceeded [ 245.754212][ T536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.763310][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.764156][ T36] audit: type=1400 audit(2000000010.278:91448): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.791252][ T536] audit: audit_lost=358 audit_rate_limit=0 audit_backlog_limit=64 [ 245.799265][ T536] audit: backlog limit exceeded [ 245.945404][T16079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7802'. [ 245.985135][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7801'. [ 246.195552][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7813'. [ 246.274447][T16119] netlink: 'syz.0.7820': attribute type 16 has an invalid length. [ 246.292123][T16119] netlink: 'syz.0.7820': attribute type 2 has an invalid length. [ 246.326475][T16119] netlink: 64110 bytes leftover after parsing attributes in process `syz.0.7820'. [ 246.335738][T16124] bridge_slave_0: default FDB implementation only supports local addresses [ 247.293587][T16182] GUP no longer grows the stack in syz.3.7849 (16182): 200000005000-200000008000 (200000004000) [ 247.317914][T16182] CPU: 1 UID: 0 PID: 16182 Comm: syz.3.7849 Not tainted syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 247.317954][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.317976][T16182] Call Trace: [ 247.317985][T16182] [ 247.317996][T16182] __dump_stack+0x21/0x30 [ 247.318039][T16182] dump_stack_lvl+0x140/0x1c0 [ 247.318076][T16182] ? __cfi_dump_stack_lvl+0x10/0x10 [ 247.318111][T16182] ? find_vma+0xd3/0x120 [ 247.318145][T16182] dump_stack+0x19/0x20 [ 247.318182][T16182] fixup_user_fault+0x616/0x6a0 [ 247.318216][T16182] fault_in_user_writeable+0x75/0xe0 [ 247.318248][T16182] futex_lock_pi+0x2ed/0xa70 [ 247.318284][T16182] ? futex_unqueue+0x136/0x160 [ 247.318319][T16182] ? __cfi_futex_lock_pi+0x10/0x10 [ 247.318357][T16182] ? __cfi_futex_wake_mark+0x10/0x10 [ 247.318406][T16182] ? futex_setup_timer+0xb4/0xd0 [ 247.318439][T16182] ? __cfi_futex_wake_mark+0x10/0x10 [ 247.318482][T16182] do_futex+0x270/0x510 [ 247.318516][T16182] ? __cfi_do_futex+0x10/0x10 [ 247.318549][T16182] ? __vm_munmap+0x30d/0x3d0 [ 247.318576][T16182] __se_sys_futex+0x13c/0x320 [ 247.318611][T16182] ? __x64_sys_futex+0x110/0x110 [ 247.318645][T16182] ? __kasan_check_write+0x18/0x20 [ 247.318670][T16182] __x64_sys_futex+0xe9/0x110 [ 247.318705][T16182] x64_sys_call+0x227f/0x2ee0 [ 247.318727][T16182] do_syscall_64+0x57/0xf0 [ 247.318754][T16182] ? clear_bhb_loop+0x50/0xa0 [ 247.318788][T16182] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.318820][T16182] RIP: 0033:0x7ff62f99de99 [ 247.318854][T16182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.318878][T16182] RSP: 002b:00007ff6307c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.318910][T16182] RAX: ffffffffffffffda RBX: 00007ff62fc25fa0 RCX: 00007ff62f99de99 [ 247.318930][T16182] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 247.318948][T16182] RBP: 00007ff62fa33eaf R08: 0000000000000000 R09: 0000000000000001 [ 247.318963][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.318979][T16182] R13: 00007ff62fc26038 R14: 00007ff62fc25fa0 R15: 00007ffff8a0c4f8 [ 247.319001][T16182] [ 247.668547][T16197] netlink: 'syz.1.7855': attribute type 12 has an invalid length. [ 248.852374][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7908'. [ 248.952426][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7913'. [ 248.971500][T16315] bridge_slave_1: left allmulticast mode [ 248.985648][T16315] : port 2(bridge_slave_1) entered disabled state [ 249.003029][T16315] bridge_slave_0: left allmulticast mode [ 249.016912][T16315] bridge_slave_0: left promiscuous mode [ 249.031471][T16315] : port 1(bridge_slave_0) entered disabled state [ 249.145434][T16328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7918'. [ 249.623951][T16380] netlink: 'syz.0.7943': attribute type 46 has an invalid length. [ 249.983414][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7958'. [ 251.095174][ T36] kauditd_printk_skb: 32373 callbacks suppressed [ 251.095194][ T36] audit: type=1400 audit(2000000015.279:119008): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 251.117502][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.129476][ T149] audit: audit_lost=1965 audit_rate_limit=0 audit_backlog_limit=64 [ 251.137401][ T149] audit: backlog limit exceeded [ 251.143551][ T534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.150222][ T534] audit: audit_lost=1966 audit_rate_limit=0 audit_backlog_limit=64 [ 251.150507][T16506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.158884][ T36] audit: type=1400 audit(2000000015.279:119009): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 251.185928][ T534] audit: backlog limit exceeded [ 251.192801][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.250555][T16514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16514 comm=syz.0.8009 [ 251.655965][T16573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16573 comm=syz.3.8038 [ 251.669222][T16573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8038'. [ 253.795304][T16797] netlink: 'syz.0.8146': attribute type 27 has an invalid length. [ 253.810599][T16797] sit0: left promiscuous mode [ 253.824345][T16797] bridge0: port 4(dummy0) entered disabled state [ 253.830830][T16797] bridge0: port 3(veth0_to_team) entered disabled state [ 253.837883][T16797] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.845102][T16797] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.962240][T16911] netlink: 'syz.0.8191': attribute type 4 has an invalid length. [ 254.978616][T16911] netlink: 'syz.0.8191': attribute type 5 has an invalid length. [ 255.006653][T16911] netlink: 'syz.0.8191': attribute type 1 has an invalid length. [ 255.291454][T16961] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8214'. [ 256.533177][ T36] kauditd_printk_skb: 30201 callbacks suppressed [ 256.533198][ T36] audit: type=1400 audit(2000000020.290:147587): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 256.569717][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.576294][ T149] audit: audit_lost=2509 audit_rate_limit=0 audit_backlog_limit=64 [ 256.584473][ T149] audit: backlog limit exceeded [ 256.589498][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.596288][ T36] audit: type=1400 audit(2000000020.290:147588): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 256.617809][ T149] audit: audit_lost=2510 audit_rate_limit=0 audit_backlog_limit=64 [ 256.625893][ T149] audit: backlog limit exceeded [ 256.630931][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.637535][ T36] audit: type=1400 audit(2000000020.290:147589): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 256.742850][T17122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8293'. [ 256.925719][T17151] netlink: 51 bytes leftover after parsing attributes in process `syz.3.8307'. [ 256.990452][T17159] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8311'. [ 258.382476][T17268] netlink: 'syz.4.8363': attribute type 16 has an invalid length. [ 258.390461][T17268] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.8363'. [ 258.674950][T17294] bridge0: port 5(veth1_macvtap) entered blocking state [ 258.693602][T17294] bridge0: port 5(veth1_macvtap) entered disabled state [ 258.724939][T17294] veth1_macvtap: entered allmulticast mode [ 258.738283][T17294] veth1_macvtap: left allmulticast mode [ 259.112549][T17328] netlink: 'syz.4.8393': attribute type 12 has an invalid length. [ 259.558274][T17377] netlink: 'syz.3.8417': attribute type 12 has an invalid length. [ 260.442568][T17457] netlink: 'syz.1.8457': attribute type 4 has an invalid length. [ 260.463131][T17457] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8457'. [ 261.954637][ T36] kauditd_printk_skb: 35970 callbacks suppressed [ 261.954659][ T36] audit: type=1400 audit(2000000025.300:181190): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 261.975507][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 261.989187][ T149] audit: audit_lost=3302 audit_rate_limit=0 audit_backlog_limit=64 [ 261.997287][ T149] audit: backlog limit exceeded [ 262.003266][ T536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.006069][ T36] audit: type=1400 audit(2000000025.300:181191): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 262.011716][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.031384][ T36] audit: type=1400 audit(2000000025.300:181192): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 262.038507][ T536] audit: audit_lost=3303 audit_rate_limit=0 audit_backlog_limit=64 [ 262.059377][ T36] audit: type=1400 audit(2000000025.300:181193): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 262.312391][T17652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17652 comm=syz.0.8550 [ 262.326053][T17652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8550'. [ 265.510883][T17914] netlink: 'syz.1.8670': attribute type 4 has an invalid length. [ 265.518684][T17914] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.8670'. [ 266.156430][T18009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8720'. [ 267.384271][ T36] kauditd_printk_skb: 35584 callbacks suppressed [ 267.384292][ T36] audit: type=1400 audit(2000000030.301:216166): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.412478][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.419138][ T149] audit: audit_lost=3508 audit_rate_limit=0 audit_backlog_limit=64 [ 267.427071][ T149] audit: backlog limit exceeded [ 267.432262][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.437796][ T534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.445355][ T149] audit: audit_lost=3509 audit_rate_limit=0 audit_backlog_limit=64 [ 267.453336][ T36] audit: type=1400 audit(2000000030.310:216167): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.453389][ T36] audit: type=1400 audit(2000000030.310:216168): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.453419][ T36] audit: type=1400 audit(2000000030.310:216169): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.696827][T18115] sock: sock_set_timeout: `syz.1.8769' (pid 18115) tries to set negative timeout [ 268.773695][T18178] netlink: 'syz.0.8800': attribute type 4 has an invalid length. [ 268.781741][T18178] netlink: 'syz.0.8800': attribute type 6 has an invalid length. [ 268.789802][T18178] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.8800'. [ 269.526974][ T537] Bluetooth: hci0: Frame reassembly failed (-84) [ 270.143609][ T12] bridge_slave_1: left allmulticast mode [ 270.150718][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.182481][ T12] bridge_slave_0: left allmulticast mode [ 270.190160][ T12] bridge_slave_0: left promiscuous mode [ 270.202167][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.292377][T18316] devtmpfs: Unknown parameter 'rootcontextnmƟ2va' [ 270.393657][ T12] : left promiscuous mode [ 270.617181][ T12] ------------[ cut here ]------------ [ 270.622748][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 270.632765][ T12] Modules linked in: [ 270.636731][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 270.648803][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.658930][ T12] Workqueue: netns cleanup_net [ 270.663776][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 270.670031][ T12] Code: e8 b1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 45 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 37 5b 7e fc 49 83 c7 08 eb c9 e8 2c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 270.689752][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 270.695885][ T12] RAX: ffffffff850916c4 RBX: ffff888102f60000 RCX: ffff888102651300 [ 270.703947][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888118de45b0 [ 270.712690][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 270.721693][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: dffffc0000000000 [ 270.729891][ T12] R13: dffffc0000000000 R14: ffff888118de4000 R15: 00000000000005b0 [ 270.738292][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 270.747403][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.754283][ T12] CR2: 0000555f58430300 CR3: 000000012f258000 CR4: 00000000003526b0 [ 270.762689][ T12] Call Trace: [ 270.766049][ T12] [ 270.769027][ T12] cleanup_net+0x6ba/0xc90 [ 270.773507][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 270.778541][ T12] ? kick_pool+0xb9/0x540 [ 270.783030][ T12] process_scheduled_works+0x7f7/0x1060 [ 270.788676][ T12] worker_thread+0xc99/0x13f0 [ 270.793419][ T12] kthread+0x2c7/0x360 [ 270.797991][ T12] ? __cfi_worker_thread+0x10/0x10 [ 270.803186][ T12] ? __cfi_kthread+0x10/0x10 [ 270.807829][ T12] ret_from_fork+0x67/0xa0 [ 270.812338][ T12] ? __cfi_kthread+0x10/0x10 [ 270.816982][ T12] ret_from_fork_asm+0x1a/0x30 [ 270.821814][ T12] [ 270.824860][ T12] ---[ end trace 0000000000000000 ]--- [ 270.846120][ T12] ------------[ cut here ]------------ [ 270.851655][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 270.861739][ T12] Modules linked in: [ 270.865703][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 270.878803][ T12] Tainted: [W]=WARN [ 270.882643][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.892760][ T12] Workqueue: netns cleanup_net [ 270.897647][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 270.903781][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 e2 5a 7e fc 49 83 c7 08 eb c5 e8 d7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 5a 7e fc 5b 41 5c 41 5e 41 [ 270.923807][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 270.930037][ T12] RAX: ffffffff85091719 RBX: ffff888118de4800 RCX: ffff888102651300 [ 270.938091][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888118de4808 [ 270.946136][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 270.954262][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: dffffc0000000000 [ 270.962393][ T12] R13: dffffc0000000000 R14: ffff888118de4000 R15: 0000000000000008 [ 270.970416][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 270.979432][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.986808][ T12] CR2: 00007f534e6d1010 CR3: 000000010c73c000 CR4: 00000000003526b0 [ 270.994858][ T12] Call Trace: [ 270.998187][ T12] [ 271.001152][ T12] cleanup_net+0x6ba/0xc90 [ 271.005641][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 271.010807][ T12] ? kick_pool+0xb9/0x540 [ 271.015197][ T12] process_scheduled_works+0x7f7/0x1060 [ 271.020794][ T12] worker_thread+0xc99/0x13f0 [ 271.025525][ T12] kthread+0x2c7/0x360 [ 271.030062][ T12] ? __cfi_worker_thread+0x10/0x10 [ 271.035230][ T12] ? __cfi_kthread+0x10/0x10 [ 271.039904][ T12] ret_from_fork+0x67/0xa0 [ 271.044455][ T12] ? __cfi_kthread+0x10/0x10 [ 271.049151][ T12] ret_from_fork_asm+0x1a/0x30 [ 271.053974][ T12] [ 271.057046][ T12] ---[ end trace 0000000000000000 ]--- [ 271.149434][ T12] ------------[ cut here ]------------ [ 271.154997][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 271.164473][ T12] Modules linked in: [ 271.168430][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 271.181548][ T12] Tainted: [W]=WARN [ 271.185440][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.195766][ T12] Workqueue: netns cleanup_net [ 271.200718][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 271.206346][ T12] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 271.226380][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 271.232601][ T12] RAX: ffffffff84ee56ce RBX: ffff888102f60000 RCX: ffff888102651300 [ 271.240618][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102651300 [ 271.248987][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 271.257154][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 271.265281][ T12] R13: dffffc0000000000 R14: ffff888102f60c00 R15: dffffc0000000000 [ 271.273327][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 271.282346][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.289049][ T12] CR2: 00007f8cc899e7b8 CR3: 0000000132d1e000 CR4: 00000000003526b0 [ 271.297244][ T12] Call Trace: [ 271.300559][ T12] [ 271.303519][ T12] xfrm_net_exit+0x31/0x80 [ 271.308023][ T12] cleanup_net+0x6ba/0xc90 [ 271.312666][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 271.317693][ T12] ? kick_pool+0xb9/0x540 [ 271.322101][ T12] process_scheduled_works+0x7f7/0x1060 [ 271.327697][ T12] worker_thread+0xc99/0x13f0 [ 271.332451][ T12] kthread+0x2c7/0x360 [ 271.336572][ T12] ? __cfi_worker_thread+0x10/0x10 [ 271.341834][ T12] ? __cfi_kthread+0x10/0x10 [ 271.346554][ T12] ret_from_fork+0x67/0xa0 [ 271.351045][ T12] ? __cfi_kthread+0x10/0x10 [ 271.355676][ T12] ret_from_fork_asm+0x1a/0x30 [ 271.360481][ T12] [ 271.363557][ T12] ---[ end trace 0000000000000000 ]--- [ 271.763571][ T12] dummy0: left allmulticast mode [ 271.768557][ T12] dummy0: left promiscuous mode [ 271.773572][ T12] bridge0: port 4(dummy0) entered disabled state [ 271.773601][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 271.781209][T18252] Bluetooth: hci0: command 0x1003 tx timeout [ 271.792737][ T12] veth0_to_team: left allmulticast mode [ 271.798357][ T12] veth0_to_team: left promiscuous mode [ 271.803936][ T12] bridge0: port 3(veth0_to_team) entered disabled state [ 271.811537][ T12] bridge_slave_1: left allmulticast mode [ 271.817245][ T12] bridge_slave_1: left promiscuous mode [ 271.822960][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.830560][ T12] bridge_slave_0: left allmulticast mode [ 271.836597][ T12] bridge_slave_0: left promiscuous mode [ 271.842320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.266377][ T12] ------------[ cut here ]------------ [ 272.271882][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 272.281326][ T12] Modules linked in: [ 272.285259][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 272.298339][ T12] Tainted: [W]=WARN [ 272.302176][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.312395][ T12] Workqueue: netns cleanup_net [ 272.317273][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 272.322956][ T12] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 272.342836][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 272.349076][ T12] RAX: ffffffff84ee56ce RBX: ffff888102f66a80 RCX: ffff888102651300 [ 272.357076][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102651300 [ 272.365146][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 272.373234][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 272.381308][ T12] R13: dffffc0000000000 R14: ffff888102f67680 R15: dffffc0000000000 [ 272.389299][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 272.398292][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.405037][ T12] CR2: 00007f90f9f1fbd0 CR3: 000000010b724000 CR4: 00000000003526b0 [ 272.413106][ T12] Call Trace: [ 272.416403][ T12] [ 272.419360][ T12] xfrm_net_exit+0x31/0x80 [ 272.423852][ T12] cleanup_net+0x6ba/0xc90 [ 272.428318][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 272.433271][ T12] ? kick_pool+0xb9/0x540 [ 272.437673][ T12] process_scheduled_works+0x7f7/0x1060 [ 272.443242][ T12] worker_thread+0xc99/0x13f0 [ 272.448062][ T12] kthread+0x2c7/0x360 [ 272.452169][ T12] ? __cfi_worker_thread+0x10/0x10 [ 272.457377][ T12] ? __cfi_kthread+0x10/0x10 [ 272.462265][ T12] ret_from_fork+0x67/0xa0 [ 272.466763][ T12] ? __cfi_kthread+0x10/0x10 [ 272.471443][ T12] ret_from_fork_asm+0x1a/0x30 [ 272.476340][ T12] [ 272.479626][ T12] ---[ end trace 0000000000000000 ]--- [ 272.593229][ T12] veth1_macvtap: left promiscuous mode [ 272.598872][ T12] veth0_vlan: left promiscuous mode [ 272.734128][T18350] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro. [ 272.917035][ T12] ------------[ cut here ]------------ [ 272.922593][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 272.931990][ T12] Modules linked in: [ 272.935917][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 68e3201df5fdad0ba521b4874bccf43aba0ac9cd [ 272.949004][ T12] Tainted: [W]=WARN [ 272.952819][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.962937][ T12] Workqueue: netns cleanup_net [ 272.967745][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 272.973304][ T12] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 272.992937][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 272.999055][ T12] RAX: ffffffff84ee56ce RBX: ffff888104364700 RCX: ffff888102651300 [ 273.007041][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102651300 [ 273.015041][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 273.023043][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 273.031032][ T12] R13: dffffc0000000000 R14: ffff888104365300 R15: dffffc0000000000 [ 273.039007][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 273.048034][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.054665][ T12] CR2: 00007f806f6f8e9c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 273.062659][ T12] Call Trace: [ 273.065966][ T12] [ 273.068905][ T12] xfrm_net_exit+0x31/0x80 [ 273.073337][ T12] cleanup_net+0x6ba/0xc90 [ 273.077823][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 273.082794][ T12] ? kick_pool+0xb9/0x540 [ 273.087180][ T12] process_scheduled_works+0x7f7/0x1060 [ 273.092753][ T12] worker_thread+0xc99/0x13f0 [ 273.097501][ T12] kthread+0x2c7/0x360 [ 273.101600][ T12] ? __cfi_worker_thread+0x10/0x10 [ 273.106779][ T12] ? __cfi_kthread+0x10/0x10 [ 273.111410][ T12] ret_from_fork+0x67/0xa0 [ 273.115857][ T12] ? __cfi_kthread+0x10/0x10 [ 273.120544][ T12] ret_from_fork_asm+0x1a/0x30 [ 273.125345][ T12] [ 273.128455][ T12] ---[ end trace 0000000000000000 ]--- [ 274.945099][T18351] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 274.951792][T18351] ACPI: PM: Preparing to enter system sleep state S5 [ 274.958653][T18351] kvm: exiting hardware virtualization [ 274.964272][T18351] reboot: Power down serialport: VM disconnected.