last executing test programs: 2.739760841s ago: executing program 0 (id=670): syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400403afffc000000000000000000000000000001ff02000000000000000000000000000101"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x340a) 2.627023687s ago: executing program 1 (id=673): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) accept4(r2, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 2.5831333s ago: executing program 4 (id=674): syz_open_dev$swradio(0x0, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) 2.540506141s ago: executing program 0 (id=675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x89, &(0x7f00000001c0)=""/137, 0x41100, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="01"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.181115162s ago: executing program 0 (id=678): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3e"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.013312536s ago: executing program 1 (id=680): r0 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x10, 0x2a4}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) 1.951910227s ago: executing program 0 (id=681): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/msg\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.232630983s ago: executing program 0 (id=683): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.074934294s ago: executing program 1 (id=685): syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400403afffc000000000000000000000000000001ff02000000000000000000000000000101"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x340a) 1.074495914s ago: executing program 2 (id=686): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f00000000c0)=0x8) 952.078817ms ago: executing program 2 (id=687): syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x8, 0x38, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@noop, @lsrr={0x83, 0x3, 0xe7}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0xfffb, 0x0, 0x3, 0x1, 0x2, 0x3, 0x400, 0x1, 0x4, 0x4e21, 0x4e24}, 0x0, 0x3}}}}}}}, 0x0) 943.771447ms ago: executing program 3 (id=688): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140008f03f00019a05682d854483af021c5be6"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(0xffffffffffffffff) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 866.983926ms ago: executing program 3 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xbf4}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd700000000246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0cc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0x9c}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 865.872087ms ago: executing program 4 (id=690): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) accept4(r2, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 777.608143ms ago: executing program 2 (id=691): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3e"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 776.895898ms ago: executing program 3 (id=692): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r3}}, 0x18) 685.599073ms ago: executing program 1 (id=693): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0603, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 640.231532ms ago: executing program 2 (id=694): io_uring_setup(0x403f, &(0x7f00000003c0)={0x0, 0x9358, 0x0, 0x3, 0x211}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 640.000309ms ago: executing program 3 (id=695): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088fb4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x8864}, 0x14) 568.284752ms ago: executing program 2 (id=696): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 557.468463ms ago: executing program 1 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xfff4b000, 0xffff1000, 0x9, 0x9, 0x82, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0x8}, {0xd000, 0x8080000, 0xe, 0x13, 0x6, 0x8, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xdc}, {0xf000, 0x8000000, 0x9, 0x4, 0x4, 0x81, 0x4, 0x13, 0x4, 0x4, 0x92, 0x80}, {0x26000, 0x83df2d722bf3839a, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0x2, 0xdddd0000, 0xf, 0x8, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x7e, 0x0, 0x8}, {0x8000000, 0x10000, 0xe, 0x8, 0x7, 0x2, 0x25, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x200000, 0x8, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x9, 0x7, 0xff, 0x6}, {0x1, 0x2000, 0x1b, 0xe, 0x10, 0x3f, 0x3, 0x0, 0x7f, 0x5, 0x0, 0x4}, {0x8000000, 0x1}, {0x7000, 0xff81}, 0x80000013, 0x0, 0x4, 0x4200, 0x4, 0x0, 0x8000900, 0x0, [0x6, 0x7, 0x2000f, 0x1]}) 449.8868ms ago: executing program 2 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 449.110118ms ago: executing program 3 (id=699): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140008f03f00019a05682d854483af021c5be6"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(0xffffffffffffffff) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 411.015148ms ago: executing program 4 (id=700): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2142, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x7, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xb, 0x10000002, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 315.872121ms ago: executing program 3 (id=701): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 193.871951ms ago: executing program 4 (id=702): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/118, 0x76}], 0x1) 135.631396ms ago: executing program 1 (id=703): syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f86dd6100272400403afffc000000000000000000000000000001ff02000000000000000000000000000101"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x340a) 80.312366ms ago: executing program 4 (id=704): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 30.745202ms ago: executing program 4 (id=705): r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x34) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xe5) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) fallocate(r0, 0x3, 0x6ae8, 0x8100c60) 0s ago: executing program 0 (id=706): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b', @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 63.221387][ T29] audit: type=1400 audit(1773702088.561:62): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.244789][ T29] audit: type=1400 audit(1773702088.591:63): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.269753][ T5792] cgroup: Unknown subsys name 'net' [ 63.276842][ T29] audit: type=1400 audit(1773702088.621:64): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.386504][ T5792] cgroup: Unknown subsys name 'cpuset' [ 63.394349][ T5792] cgroup: Unknown subsys name 'rlimit' [ 63.524692][ T29] audit: type=1400 audit(1773702088.871:65): avc: denied { setattr } for pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.558186][ T29] audit: type=1400 audit(1773702088.871:66): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.587303][ T29] audit: type=1400 audit(1773702088.871:67): avc: denied { write } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.615506][ T29] audit: type=1400 audit(1773702088.871:68): avc: denied { read } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.630618][ T5794] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.636195][ T29] audit: type=1400 audit(1773702088.871:69): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 63.669914][ T29] audit: type=1400 audit(1773702088.871:70): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.693430][ T29] audit: type=1400 audit(1773702088.991:71): avc: denied { relabelto } for pid=5794 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.606881][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.521499][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.529854][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.537664][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.545467][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.552996][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.600884][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.608912][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.635163][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.644027][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.645474][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.659123][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.668514][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.677025][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.688437][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.698211][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.709306][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.720465][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.738860][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.750889][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.760664][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.768912][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.783846][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.792070][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.810458][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.823975][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.994972][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 67.120478][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.128353][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.135698][ T5804] bridge_slave_0: entered allmulticast mode [ 67.142430][ T5804] bridge_slave_0: entered promiscuous mode [ 67.154620][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.161720][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.168937][ T5804] bridge_slave_1: entered allmulticast mode [ 67.175627][ T5804] bridge_slave_1: entered promiscuous mode [ 67.254219][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.288853][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.302166][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 67.363561][ T5804] team0: Port device team_slave_0 added [ 67.409863][ T5804] team0: Port device team_slave_1 added [ 67.420472][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 67.445888][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 67.491157][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 67.501302][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.508298][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.534591][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.569072][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.576041][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.601946][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.640183][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.647540][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.654814][ T5807] bridge_slave_0: entered allmulticast mode [ 67.661611][ T5807] bridge_slave_0: entered promiscuous mode [ 67.698167][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.705407][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.712526][ T5807] bridge_slave_1: entered allmulticast mode [ 67.719549][ T5807] bridge_slave_1: entered promiscuous mode [ 67.768063][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.775891][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.783216][ T5809] bridge_slave_0: entered allmulticast mode [ 67.790255][ T5809] bridge_slave_0: entered promiscuous mode [ 67.813314][ T5804] hsr_slave_0: entered promiscuous mode [ 67.819816][ T5804] hsr_slave_1: entered promiscuous mode [ 67.833638][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.840801][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.848194][ T5809] bridge_slave_1: entered allmulticast mode [ 67.854917][ T5809] bridge_slave_1: entered promiscuous mode [ 67.867463][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.878798][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.888514][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.895872][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.903066][ T5812] bridge_slave_0: entered allmulticast mode [ 67.909905][ T5812] bridge_slave_0: entered promiscuous mode [ 67.959512][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.966915][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.974257][ T5812] bridge_slave_1: entered allmulticast mode [ 67.980987][ T5812] bridge_slave_1: entered promiscuous mode [ 67.997211][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.017608][ T5807] team0: Port device team_slave_0 added [ 68.038074][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.045316][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.052473][ T5814] bridge_slave_0: entered allmulticast mode [ 68.059381][ T5814] bridge_slave_0: entered promiscuous mode [ 68.067665][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.078289][ T5807] team0: Port device team_slave_1 added [ 68.096352][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.103725][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.110870][ T5814] bridge_slave_1: entered allmulticast mode [ 68.117994][ T5814] bridge_slave_1: entered promiscuous mode [ 68.154256][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.188377][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.195380][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.221471][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.234949][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.246042][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.256615][ T5809] team0: Port device team_slave_0 added [ 68.263755][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.277165][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.284689][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.311206][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.335250][ T5809] team0: Port device team_slave_1 added [ 68.370505][ T5812] team0: Port device team_slave_0 added [ 68.400027][ T5814] team0: Port device team_slave_0 added [ 68.407189][ T5812] team0: Port device team_slave_1 added [ 68.413250][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.420348][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.446438][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.458196][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.465273][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.491496][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.508539][ T5814] team0: Port device team_slave_1 added [ 68.557754][ T5807] hsr_slave_0: entered promiscuous mode [ 68.563963][ T5807] hsr_slave_1: entered promiscuous mode [ 68.569845][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 68.575668][ T5807] Cannot create hsr debugfs directory [ 68.594389][ T5805] Bluetooth: hci0: command tx timeout [ 68.600579][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.607721][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.633628][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.645403][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.652331][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.678739][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.693909][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.700844][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.727600][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.753593][ T5805] Bluetooth: hci1: command tx timeout [ 68.753602][ T5816] Bluetooth: hci2: command tx timeout [ 68.774474][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.781415][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.807520][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.834193][ T5805] Bluetooth: hci3: command tx timeout [ 68.849235][ T5809] hsr_slave_0: entered promiscuous mode [ 68.855433][ T5809] hsr_slave_1: entered promiscuous mode [ 68.861385][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 68.867259][ T5809] Cannot create hsr debugfs directory [ 68.913484][ T5805] Bluetooth: hci4: command tx timeout [ 68.939012][ T5812] hsr_slave_0: entered promiscuous mode [ 68.945538][ T5812] hsr_slave_1: entered promiscuous mode [ 68.951408][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 68.957454][ T5812] Cannot create hsr debugfs directory [ 69.027415][ T5814] hsr_slave_0: entered promiscuous mode [ 69.033808][ T5814] hsr_slave_1: entered promiscuous mode [ 69.039693][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 69.045495][ T5814] Cannot create hsr debugfs directory [ 69.139404][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.176824][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.214740][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.245167][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.325541][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.338787][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.358905][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.377123][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.436631][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.463273][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.475423][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.492158][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.586241][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.606034][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.635382][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.645052][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.711201][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.726717][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.740633][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.751159][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.761548][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.782496][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.798421][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.822962][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.830331][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.866640][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.873821][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.893563][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.902962][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.950815][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.957941][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.970913][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.995875][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.002943][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.011933][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.019014][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.040623][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.047749][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.110904][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 70.110921][ T29] audit: type=1400 audit(1773702095.451:84): avc: denied { sys_module } for pid=5807 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.116457][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.163026][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.179621][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.207233][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.214361][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.245424][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.252517][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.302097][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.325366][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.341330][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.348492][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.382908][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.394995][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.419625][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.426781][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.509082][ T5807] veth0_vlan: entered promiscuous mode [ 70.560903][ T5807] veth1_vlan: entered promiscuous mode [ 70.641041][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.668341][ T5807] veth0_macvtap: entered promiscuous mode [ 70.674425][ T5805] Bluetooth: hci0: command tx timeout [ 70.686312][ T5807] veth1_macvtap: entered promiscuous mode [ 70.759404][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.784361][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.808093][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.828686][ T4934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834195][ T5805] Bluetooth: hci1: command tx timeout [ 70.839691][ T5816] Bluetooth: hci2: command tx timeout [ 70.850839][ T4934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.868489][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.881143][ T4934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.891147][ T4934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.913832][ T5816] Bluetooth: hci3: command tx timeout [ 70.938031][ T5804] veth0_vlan: entered promiscuous mode [ 70.978295][ T5804] veth1_vlan: entered promiscuous mode [ 70.993651][ T5816] Bluetooth: hci4: command tx timeout [ 71.038927][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.083234][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.101562][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.126684][ T5804] veth0_macvtap: entered promiscuous mode [ 71.146809][ T5812] veth0_vlan: entered promiscuous mode [ 71.168908][ T5804] veth1_macvtap: entered promiscuous mode [ 71.175741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.185519][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.207864][ T5809] veth0_vlan: entered promiscuous mode [ 71.209643][ T29] audit: type=1400 audit(1773702096.551:85): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.bnHYlr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.219419][ T5809] veth1_vlan: entered promiscuous mode [ 71.257426][ T29] audit: type=1400 audit(1773702096.591:86): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.280318][ T29] audit: type=1400 audit(1773702096.591:87): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.bnHYlr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.306966][ T29] audit: type=1400 audit(1773702096.591:88): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.330144][ T29] audit: type=1400 audit(1773702096.601:89): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.bnHYlr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.361973][ T29] audit: type=1400 audit(1773702096.601:90): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.bnHYlr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.363668][ T5812] veth1_vlan: entered promiscuous mode [ 71.394653][ T29] audit: type=1400 audit(1773702096.601:91): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.419610][ T29] audit: type=1400 audit(1773702096.621:92): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.422116][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.443901][ T29] audit: type=1400 audit(1773702096.631:93): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="gadgetfs" ino=7433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.475118][ T5814] veth0_vlan: entered promiscuous mode [ 71.500518][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.526127][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.565402][ T4934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.588170][ T4934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.601608][ T5814] veth1_vlan: entered promiscuous mode [ 71.616993][ T4934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.634510][ T4934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.666167][ T5812] veth0_macvtap: entered promiscuous mode [ 71.701204][ T5812] veth1_macvtap: entered promiscuous mode [ 71.719456][ T5809] veth0_macvtap: entered promiscuous mode [ 71.745699][ T5809] veth1_macvtap: entered promiscuous mode [ 71.802067][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.817898][ T5814] veth0_macvtap: entered promiscuous mode [ 71.832166][ T5814] veth1_macvtap: entered promiscuous mode [ 71.845487][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.854520][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.862384][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.879608][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.887940][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.907168][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.929408][ T4934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939266][ T4934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.978444][ T4934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.989520][ T4934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004629][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.036087][ T4934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.039175][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.044042][ T4934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.070632][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.079806][ T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.100708][ T4934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110767][ T4934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128547][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.199222][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.218606][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232351][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.233826][ T2149] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.267535][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.280914][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.290460][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.359969][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.374783][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.420125][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.430969][ T2149] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 72.433996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.497673][ T2149] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 72.516993][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.524362][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.545049][ T2149] usb 4-1: Product: syz [ 72.547757][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.549264][ T2149] usb 4-1: Manufacturer: syz [ 72.549281][ T2149] usb 4-1: SerialNumber: syz [ 72.576077][ T4934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.598449][ T4934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.643098][ T2149] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 72.717163][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.727376][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.755131][ T5816] Bluetooth: hci0: command tx timeout [ 73.000944][ T5805] Bluetooth: hci1: command tx timeout [ 73.006638][ T5805] Bluetooth: hci3: command tx timeout [ 73.012284][ T5816] Bluetooth: hci2: command tx timeout [ 73.063496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.073655][ T5816] Bluetooth: hci4: command tx timeout [ 73.103386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.123411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.193988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 73.263966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.370538][ T2149] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 73.411616][ T2149] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 73.475153][ T5947] loop6: detected capacity change from 0 to 7 [ 73.487921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.488229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.513454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 73.590678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.606453][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.616304][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.628327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.717261][ T2149] usb 4-1: media controller created [ 73.735259][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.744919][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.757543][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.767173][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.776518][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.786126][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.814275][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.823909][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.870349][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.880017][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.920612][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.930316][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.019849][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.029527][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.037462][ T5947] ldm_validate_partition_table(): Disk read failed. [ 74.249820][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.259467][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.274408][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.284072][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.302335][ T2149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.367156][ T5947] Dev loop6: unable to read RDB block 0 [ 74.482738][ T5947] loop6: unable to read partition table [ 74.502979][ T5947] loop6: partition table beyond EOD, truncated [ 74.546998][ T5947] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 74.723003][ T2149] usb 4-1: USB disconnect, device number 2 [ 74.958923][ T5131] Bluetooth: hci0: command tx timeout [ 74.982750][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.986465][ T5977] netlink: 260 bytes leftover after parsing attributes in process `syz.3.21'. [ 75.087146][ T5131] Bluetooth: hci2: command tx timeout [ 75.093419][ T5805] Bluetooth: hci1: command tx timeout [ 75.098948][ T5816] Bluetooth: hci3: command tx timeout [ 75.153509][ T5816] Bluetooth: hci4: command tx timeout [ 75.217541][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 75.217571][ T29] audit: type=1400 audit(1773702100.411:153): avc: denied { create } for pid=5970 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.430491][ T29] audit: type=1400 audit(1773702100.421:154): avc: denied { bind } for pid=5970 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.453670][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 75.472425][ T5859] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 75.481027][ T5859] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 75.495146][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 75.516626][ T29] audit: type=1400 audit(1773702100.751:155): avc: denied { write } for pid=5979 comm="syz.3.22" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.523574][ T5859] usb 5-1: config 1 has no interface number 0 [ 76.684572][ T29] audit: type=1400 audit(1773702101.211:156): avc: denied { read } for pid=5981 comm="syz.0.23" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.731886][ T5859] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.743614][ T5859] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 76.757750][ T5859] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 76.768513][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.796699][ T5859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 76.804783][ T29] audit: type=1400 audit(1773702101.211:157): avc: denied { open } for pid=5981 comm="syz.0.23" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.894108][ T29] audit: type=1400 audit(1773702102.141:158): avc: denied { perfmon } for pid=5985 comm="syz.3.24" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.000346][ T29] audit: type=1400 audit(1773702102.341:159): avc: denied { listen } for pid=5987 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.016099][ T5859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 77.029355][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 77.040537][ T5816] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 77.050531][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 77.050558][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.050571][ T5816] Workqueue: hci1 hci_rx_work [ 77.050598][ T5816] Call Trace: [ 77.050604][ T5816] [ 77.050618][ T5816] dump_stack_lvl+0x100/0x190 [ 77.050650][ T5816] sysfs_warn_dup.cold+0x1c/0x28 [ 77.050678][ T5816] sysfs_create_dir_ns+0x24b/0x2b0 [ 77.050708][ T5816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 77.050735][ T5816] ? find_held_lock+0x2b/0x80 [ 77.050760][ T5816] ? kobject_add_internal+0x25f/0x930 [ 77.050787][ T5816] ? kobject_add_internal+0x25f/0x930 [ 77.050815][ T5816] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.050838][ T5816] kobject_add_internal+0x2c8/0x930 [ 77.050867][ T5816] kobject_add+0x16a/0x1e0 [ 77.050894][ T5816] ? __pfx_kobject_add+0x10/0x10 [ 77.050919][ T5816] ? class_to_subsys+0x10f/0x150 [ 77.050943][ T5816] ? kobject_put+0xb9/0x640 [ 77.050965][ T5816] ? _raw_spin_unlock+0x28/0x50 [ 77.050993][ T5816] device_add+0x294/0x1950 [ 77.051014][ T5816] ? __pfx_dev_set_name+0x10/0x10 [ 77.051038][ T5816] ? __pfx_device_add+0x10/0x10 [ 77.051057][ T5816] ? mgmt_send_event_skb+0x2fb/0x460 [ 77.051084][ T5816] hci_conn_add_sysfs+0x1a3/0x260 [ 77.051109][ T5816] le_conn_complete_evt+0x11cb/0x1f40 [ 77.051135][ T5816] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 77.051162][ T5816] hci_le_conn_complete_evt+0x23c/0x3a0 [ 77.051189][ T5816] ? skb_pull_data+0x15f/0x1e0 [ 77.051222][ T5816] hci_le_meta_evt+0x34a/0x5f0 [ 77.051244][ T5816] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 77.051270][ T5816] hci_event_packet+0x682/0x11c0 [ 77.051291][ T5816] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 77.051315][ T5816] ? __pfx_hci_event_packet+0x10/0x10 [ 77.051336][ T5816] ? kcov_remote_start+0x374/0x660 [ 77.051361][ T5816] ? lockdep_hardirqs_on+0x78/0x100 [ 77.051390][ T5816] hci_rx_work+0x451/0xfc0 [ 77.051415][ T5816] process_one_work+0xa23/0x19a0 [ 77.051447][ T5816] ? __pfx_process_one_work+0x10/0x10 [ 77.051474][ T5816] ? __pfx_hci_rx_work+0x10/0x10 [ 77.051495][ T5816] worker_thread+0x5ef/0xe50 [ 77.051521][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 77.051541][ T5816] ? kthread+0x13a/0x450 [ 77.051557][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 77.051574][ T5816] kthread+0x370/0x450 [ 77.051591][ T5816] ? __pfx_kthread+0x10/0x10 [ 77.051615][ T5816] ret_from_fork+0x754/0xd80 [ 77.051635][ T5816] ? __pfx_ret_from_fork+0x10/0x10 [ 77.051656][ T5816] ? __switch_to+0x7b4/0x1120 [ 77.051678][ T5816] ? __pfx_kthread+0x10/0x10 [ 77.051699][ T5816] ret_from_fork_asm+0x1a/0x30 [ 77.051735][ T5816] [ 77.051787][ T5816] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.350243][ T5816] Bluetooth: hci1: failed to register connection device [ 77.379909][ T5989] nbd: socks must be embedded in a SOCK_ITEM attr [ 77.603621][ T5859] usb 5-1: USB disconnect, device number 2 [ 77.615603][ T5859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 77.714248][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 77.952417][ T29] audit: type=1400 audit(1773702103.291:160): avc: denied { create } for pid=6004 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.010694][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 78.020800][ T29] audit: type=1400 audit(1773702103.291:161): avc: denied { write } for pid=6004 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.070182][ T6011] Zero length message leads to an empty skb [ 78.123630][ T5929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.256004][ T29] audit: type=1400 audit(1773702103.591:162): avc: denied { read } for pid=6020 comm="syz.0.39" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.303551][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 78.370147][ T5929] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.413453][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.421290][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.471735][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.539732][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.582727][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.643905][ T5929] usb 3-1: Product: syz [ 78.681346][ T5929] usb 3-1: Manufacturer: syz [ 78.730758][ T5929] usb 3-1: SerialNumber: syz [ 79.278703][ T5929] usb 3-1: 0:2 : does not exist [ 79.309114][ T5884] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.317897][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 79.328456][ T5884] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.353706][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.362781][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.382863][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.404949][ T5884] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.414589][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.432778][ T5884] usb 4-1: Product: syz [ 79.440853][ T5884] usb 4-1: Manufacturer: syz [ 79.457490][ T5884] cdc_wdm 4-1:1.0: skipping garbage [ 79.462887][ T5884] cdc_wdm 4-1:1.0: skipping garbage [ 79.491681][ T5884] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 79.507526][ T5884] cdc_wdm 4-1:1.0: Unknown control protocol [ 79.689992][ T5929] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 79.790376][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.797056][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.803346][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.809937][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.816641][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.823251][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.829530][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.831117][ T5929] usb 3-1: USB disconnect, device number 2 [ 79.836123][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.836334][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.854615][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.861692][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.868267][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.874745][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.881330][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.887580][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.893158][ T2149] usb 4-1: USB disconnect, device number 3 [ 79.894181][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.894199][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.933604][ T6051] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 80.233187][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.292185][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 80.292201][ T29] audit: type=1400 audit(1773702105.631:185): avc: denied { connect } for pid=6057 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.366623][ T29] audit: type=1400 audit(1773702105.671:186): avc: denied { bind } for pid=6057 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.579719][ T29] audit: type=1400 audit(1773702105.921:187): avc: denied { read write } for pid=6065 comm="syz.2.58" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.648320][ T6068] fuse: Bad value for 'fd' [ 80.689899][ T29] audit: type=1400 audit(1773702105.971:188): avc: denied { open } for pid=6065 comm="syz.2.58" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.914746][ T29] audit: type=1400 audit(1773702105.991:189): avc: denied { mounton } for pid=6065 comm="syz.2.58" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.203784][ T29] audit: type=1400 audit(1773702106.501:190): avc: denied { ioctl } for pid=6071 comm="syz.2.60" path="socket:[9047]" dev="sockfs" ino=9047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.592659][ T29] audit: type=1400 audit(1773702106.501:191): avc: denied { write } for pid=6071 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.660629][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 81.678365][ T29] audit: type=1400 audit(1773702106.501:192): avc: denied { accept } for pid=6071 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 81.749163][ T29] audit: type=1400 audit(1773702106.971:193): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.913694][ T2149] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.945804][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 81.968193][ T6096] bond0: entered promiscuous mode [ 81.981114][ T6098] netlink: 3 bytes leftover after parsing attributes in process `syz.3.71'. [ 81.992376][ T6096] bond_slave_0: entered promiscuous mode [ 82.001629][ T6096] bond_slave_1: entered promiscuous mode [ 82.010340][ T6096] gretap0: entered promiscuous mode [ 82.015960][ T6098] netlink: 3 bytes leftover after parsing attributes in process `syz.3.71'. [ 82.026872][ T6096] hsr1: entered promiscuous mode [ 82.076684][ T2149] usb 2-1: Using ep0 maxpacket: 16 [ 82.103885][ T2149] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.142236][ T2149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.153190][ T10] cfg80211: failed to load regulatory.db [ 82.203388][ T2149] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.217601][ T2149] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.227522][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.254707][ T2149] usb 2-1: Product: syz [ 82.258974][ T2149] usb 2-1: Manufacturer: syz [ 82.263636][ T2149] usb 2-1: SerialNumber: syz [ 82.477267][ T29] audit: type=1400 audit(1773702107.821:194): avc: denied { name_bind } for pid=6114 comm="syz.3.79" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.707653][ T2149] usb 2-1: 0:2 : does not exist [ 82.879294][ T6123] netlink: 'syz.3.83': attribute type 15 has an invalid length. [ 83.111771][ T2149] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 83.270981][ T2149] usb 2-1: USB disconnect, device number 2 [ 83.328416][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.566472][ T6147] program syz.3.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.736311][ T6180] hugetlbfs: syz.1.102 (6180): Using mlock ulimits for SHM_HUGETLB is obsolete [ 86.081878][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 86.081897][ T29] audit: type=1400 audit(1773702111.421:205): avc: denied { write } for pid=6200 comm="syz.4.113" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.259959][ T29] audit: type=1400 audit(1773702111.571:206): avc: denied { bind } for pid=6207 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.349448][ T29] audit: type=1400 audit(1773702111.571:207): avc: denied { connect } for pid=6207 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.510298][ T6218] syz.4.119 uses obsolete (PF_INET,SOCK_PACKET) [ 86.519123][ T29] audit: type=1400 audit(1773702111.861:208): avc: denied { create } for pid=6216 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.706251][ T29] audit: type=1400 audit(1773702111.861:209): avc: denied { read } for pid=6216 comm="syz.2.118" path="socket:[9727]" dev="sockfs" ino=9727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.820098][ T6229] netlink: 240 bytes leftover after parsing attributes in process `syz.2.118'. [ 86.970565][ T29] audit: type=1400 audit(1773702112.121:210): avc: denied { write } for pid=6216 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.011701][ T29] audit: type=1400 audit(1773702112.151:211): avc: denied { wake_alarm } for pid=6220 comm="syz.3.122" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.040492][ T29] audit: type=1400 audit(1773702112.311:212): avc: denied { read } for pid=6230 comm="syz.1.124" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.067371][ T29] audit: type=1400 audit(1773702112.311:213): avc: denied { open } for pid=6230 comm="syz.1.124" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.091656][ T29] audit: type=1400 audit(1773702112.351:214): avc: denied { write } for pid=6230 comm="syz.1.124" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.457269][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.285014][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 88.299176][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.341224][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.414524][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.722099][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.934061][ T10] usb 2-1: Product: syz [ 88.939049][ T10] usb 2-1: Manufacturer: syz [ 88.944546][ T10] usb 2-1: SerialNumber: syz [ 89.178881][ T10] usb 2-1: 0:2 : does not exist [ 89.194321][ T10] usb 2-1: unit 6 not found! [ 89.795484][ T6259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.133'. [ 89.838475][ T10] usb 2-1: USB disconnect, device number 3 [ 89.905709][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.368145][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 91.368160][ T29] audit: type=1400 audit(1773702116.711:223): avc: denied { write } for pid=6290 comm="syz.0.149" name="unix" dev="proc" ino=4026532837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.405793][ T6291] Bluetooth: MGMT ver 1.23 [ 91.570561][ T29] audit: type=1400 audit(1773702116.911:224): avc: denied { create } for pid=6287 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.647642][ T29] audit: type=1400 audit(1773702116.991:225): avc: denied { append } for pid=6300 comm="syz.1.152" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.711443][ T29] audit: type=1400 audit(1773702117.051:226): avc: denied { setopt } for pid=6287 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.874338][ T29] audit: type=1400 audit(1773702117.211:227): avc: denied { create } for pid=6303 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.951645][ T6305] mmap: syz.1.152 (6305) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.997232][ T29] audit: type=1400 audit(1773702117.311:228): avc: denied { setopt } for pid=6300 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.013731][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.023400][ T6322] netlink: 11 bytes leftover after parsing attributes in process `syz.1.158'. [ 93.175229][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.214144][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.234655][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.255622][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.273799][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.310999][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.336365][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.348094][ T24] usb 3-1: Product: syz [ 93.352715][ T24] usb 3-1: Manufacturer: syz [ 93.386508][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 93.395993][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 93.404914][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 93.410888][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 93.523861][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.694203][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.114432][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.118426][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 94.125100][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 94.141630][ T5883] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 94.152974][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.175466][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.188119][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 94.190869][ T5883] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 94.209653][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.210081][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.230486][ T5883] usb 1-1: Product: syz [ 94.234886][ T5883] usb 1-1: Manufacturer: syz [ 94.246271][ T9] usb 2-1: config 0 descriptor?? [ 94.249880][ T5883] usb 1-1: SerialNumber: syz [ 94.330547][ T5883] usb 1-1: config 0 descriptor?? [ 94.595829][ T6333] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.606548][ T29] audit: type=1400 audit(1773702119.941:229): avc: denied { read write } for pid=6332 comm="syz.1.163" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.632056][ T29] audit: type=1400 audit(1773702119.941:230): avc: denied { open } for pid=6332 comm="syz.1.163" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.656648][ T9] usb 2-1: string descriptor 0 read error: -71 [ 94.664910][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 94.683891][ T9] usb 2-1: USB disconnect, device number 4 [ 94.751495][ T5929] usb 1-1: USB disconnect, device number 2 [ 94.793182][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 94.812637][ T6350] bond0: entered promiscuous mode [ 94.818008][ T6350] bond_slave_0: entered promiscuous mode [ 94.838396][ T6350] bond_slave_1: entered promiscuous mode [ 94.852635][ T6350] gretap0: entered promiscuous mode [ 94.859573][ T6350] debugfs: 'hsr1' already exists in 'hsr' [ 94.872897][ T6350] Cannot create hsr debugfs directory [ 94.891831][ T6350] hsr1: entered promiscuous mode [ 94.959705][ T29] audit: type=1400 audit(1773702120.301:231): avc: denied { bind } for pid=6355 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.192612][ T6370] overlayfs: failed to resolve './file0': -2 [ 95.505478][ T29] audit: type=1400 audit(1773702120.841:232): avc: denied { mount } for pid=6367 comm="syz.4.178" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.831186][ T5883] usb 3-1: USB disconnect, device number 3 [ 96.539491][ T29] audit: type=1400 audit(1773702121.631:233): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.572937][ T6381] loop6: detected capacity change from 0 to 7 [ 96.593666][ C0] blk_print_req_error: 11 callbacks suppressed [ 96.593683][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.609435][ C0] buffer_io_error: 11 callbacks suppressed [ 96.609457][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.685385][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.695089][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.765505][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.775201][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.784467][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.794122][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.803389][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.813037][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.822398][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.832065][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.871012][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.880711][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.888696][ T6381] ldm_validate_partition_table(): Disk read failed. [ 96.908233][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.917817][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.959593][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.969202][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.994115][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 97.003719][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.021029][ T6381] Dev loop6: unable to read RDB block 0 [ 97.125100][ T6381] loop6: unable to read partition table [ 97.130820][ T6381] loop6: partition table beyond EOD, truncated [ 97.172651][ T6381] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 97.209080][ T29] audit: type=1400 audit(1773702122.541:234): avc: denied { unlink } for pid=6399 comm="syz.3.191" name="#1" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.301648][ T29] audit: type=1400 audit(1773702122.551:235): avc: denied { mount } for pid=6399 comm="syz.3.191" name="/" dev="overlay" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.335650][ T29] audit: type=1400 audit(1773702122.571:236): avc: denied { watch } for pid=6404 comm="syz.4.192" path="/42" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.364653][ T29] audit: type=1400 audit(1773702122.571:237): avc: denied { watch_sb watch_reads } for pid=6404 comm="syz.4.192" path="/42" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.481356][ T29] audit: type=1400 audit(1773702122.601:238): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.541533][ T29] audit: type=1400 audit(1773702122.881:239): avc: denied { create } for pid=6417 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.579515][ T29] audit: type=1400 audit(1773702122.911:240): avc: denied { setopt } for pid=6417 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.602166][ T29] audit: type=1400 audit(1773702122.911:241): avc: denied { name_connect } for pid=6420 comm="syz.3.199" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.979174][ T6449] capability: warning: `syz.4.213' uses 32-bit capabilities (legacy support in use) [ 99.024118][ T6454] program syz.4.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.616752][ T29] audit: type=1400 audit(1773702126.951:242): avc: denied { shutdown } for pid=6505 comm="syz.3.234" lport=48373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.083696][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.132523][ T5816] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 102.243427][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 102.255425][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.271176][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.284585][ T5883] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 102.300047][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.309391][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.317689][ T24] usb 1-1: Product: syz [ 102.321852][ T24] usb 1-1: Manufacturer: syz [ 102.327682][ T24] usb 1-1: SerialNumber: syz [ 102.338694][ T24] usb 1-1: config 0 descriptor?? [ 102.355398][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.367631][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 102.383804][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.444694][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.455697][ T5883] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 102.466563][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.481153][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.490393][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.498416][ T5883] usb 5-1: SerialNumber: syz [ 102.507469][ T5883] cdc_acm 5-1:1.0: skipping garbage [ 102.553485][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 102.559851][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.572032][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.581135][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.590973][ T10] usb 4-1: config 0 descriptor?? [ 102.673661][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.731811][ T9] usb 5-1: USB disconnect, device number 3 [ 102.784672][ T29] audit: type=1400 audit(1773702128.131:243): avc: denied { create } for pid=6558 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.808746][ T29] audit: type=1400 audit(1773702128.131:244): avc: denied { ioctl } for pid=6558 comm="syz.2.255" path="socket:[11374]" dev="sockfs" ino=11374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.834400][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 102.834680][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.841798][ T29] audit: type=1400 audit(1773702128.131:245): avc: denied { bind } for pid=6558 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.872077][ T29] audit: type=1400 audit(1773702128.131:246): avc: denied { connect } for pid=6558 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.893745][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.905058][ T5883] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.907607][ T6563] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 102.914165][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.923724][ T5883] usb 2-1: config 0 descriptor?? [ 102.952324][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (244) [ 103.019898][ T6568] syzkaller0: entered promiscuous mode [ 103.024958][ T9] usb 4-1: USB disconnect, device number 4 [ 103.026882][ T6568] syzkaller0: entered allmulticast mode [ 103.046457][ T29] audit: type=1400 audit(1773702128.391:247): avc: denied { create } for pid=6567 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.070176][ T29] audit: type=1400 audit(1773702128.411:248): avc: denied { setopt } for pid=6567 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.090956][ T29] audit: type=1400 audit(1773702128.411:249): avc: denied { write } for pid=6567 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.143119][ T5883] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.154008][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 103.386260][ T5883] usb 2-1: USB disconnect, device number 5 [ 103.462816][ T29] audit: type=1400 audit(1773702128.801:250): avc: denied { create } for pid=6581 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.465252][ T6582] syzkaller1: entered promiscuous mode [ 103.488453][ T29] audit: type=1400 audit(1773702128.801:251): avc: denied { ioctl } for pid=6581 comm="syz.4.266" path="socket:[12332]" dev="sockfs" ino=12332 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.492739][ T6582] syzkaller1: entered allmulticast mode [ 103.515736][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.568371][ T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 103.579297][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 103.599883][ T24] usb 1-1: USB disconnect, device number 3 [ 103.616290][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 103.652457][ T24] em28xx 1-1:0.0: Freeing device [ 103.675627][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 103.697947][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.716547][ T9] usb 3-1: config 0 has no interface number 0 [ 103.735456][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.755946][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.757447][ T6591] syzkaller0: entered promiscuous mode [ 103.766191][ T9] usb 3-1: Product: syz [ 103.774679][ T9] usb 3-1: Manufacturer: syz [ 103.780880][ T6591] syzkaller0: entered allmulticast mode [ 103.790495][ T9] usb 3-1: SerialNumber: syz [ 103.809320][ T9] usb 3-1: config 0 descriptor?? [ 103.824411][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.057523][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.107351][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.260167][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 104.811256][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.820660][ T9] usb 3-1: USB disconnect, device number 4 [ 105.066886][ T6619] syzkaller0: entered promiscuous mode [ 105.094769][ T6619] syzkaller0: entered allmulticast mode [ 105.123526][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 105.213921][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.244270][ T9] quatech2 3-1:0.51: device disconnected [ 106.309324][ T6642] process 'syz.0.288' launched './file0' with NULL argv: empty string added [ 107.283287][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 107.283320][ T29] audit: type=1400 audit(1773702132.491:264): avc: denied { watch_sb watch_reads } for pid=6671 comm="syz.3.303" path="/71/file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.643430][ T29] audit: type=1400 audit(1773702132.981:265): avc: denied { lock } for pid=6683 comm="syz.4.307" path="socket:[12645]" dev="sockfs" ino=12645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 107.887663][ T29] audit: type=1400 audit(1773702133.231:266): avc: denied { connect } for pid=6690 comm="syz.2.312" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.251682][ T29] audit: type=1400 audit(1773702133.261:267): avc: denied { write } for pid=6690 comm="syz.2.312" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.626667][ T29] audit: type=1400 audit(1773702133.531:268): avc: denied { create } for pid=6689 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.769514][ T29] audit: type=1400 audit(1773702133.531:269): avc: denied { bind } for pid=6689 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.798578][ T5816] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 108.931054][ T29] audit: type=1400 audit(1773702134.271:270): avc: denied { ioctl } for pid=6710 comm="syz.1.318" path="socket:[11827]" dev="sockfs" ino=11827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.001879][ T29] audit: type=1400 audit(1773702134.301:271): avc: denied { bind } for pid=6710 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.043409][ T5883] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.144326][ T29] audit: type=1400 audit(1773702134.491:272): avc: denied { append } for pid=6721 comm="syz.1.323" name="sg0" dev="devtmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.256065][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 109.272409][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.314257][ T5883] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.350684][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.388224][ T5883] usb 4-1: config 0 descriptor?? [ 109.724485][ T5883] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 109.761975][ T6737] overlayfs: missing 'lowerdir' [ 109.901328][ T29] audit: type=1400 audit(1773702135.241:273): avc: denied { mount } for pid=6744 comm="syz.4.333" name="/" dev="autofs" ino=11964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 110.142775][ T9] usb 4-1: USB disconnect, device number 5 [ 110.694749][ T6773] overlayfs: failed to resolve './file0': -2 [ 111.404468][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.355'. [ 111.760605][ T6803] overlayfs: failed to resolve './file0': -2 [ 111.908553][ T6812] syzkaller0: entered promiscuous mode [ 111.924418][ T6812] syzkaller0: entered allmulticast mode [ 113.607657][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 113.627573][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 113.948402][ T6870] overlayfs: failed to resolve './file0': -2 [ 114.354856][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 114.354871][ T29] audit: type=1400 audit(1773702139.701:277): avc: denied { ioctl } for pid=6875 comm="syz.4.390" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.387734][ T6877] binder: 6875:6877 ioctl c0306201 200000000640 returned -22 [ 114.428940][ T29] audit: type=1400 audit(1773702139.731:278): avc: denied { set_context_mgr } for pid=6875 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.548658][ T6883] evm: overlay not supported [ 114.572380][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 114.590937][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 115.454633][ T29] audit: type=1400 audit(1773702140.381:279): avc: denied { create } for pid=6893 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.525032][ T29] audit: type=1400 audit(1773702140.391:280): avc: denied { write } for pid=6893 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.282551][ T6920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.332324][ T29] audit: type=1400 audit(1773702142.671:281): avc: denied { create } for pid=6944 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.535292][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.703499][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 117.717915][ T9] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 117.874593][ T9] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 117.922568][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 117.971028][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.594573][ T6984] loop6: detected capacity change from 0 to 7 [ 118.607283][ C1] blk_print_req_error: 10 callbacks suppressed [ 118.607299][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.623059][ C1] buffer_io_error: 10 callbacks suppressed [ 118.623076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.638917][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.648001][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.690050][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.699711][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.730104][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.739701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.791004][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.800633][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.811786][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.821417][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.833103][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.842707][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.856166][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.865790][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.878221][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.887823][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.895800][ T6984] ldm_validate_partition_table(): Disk read failed. [ 118.905071][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.914646][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.935418][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.945029][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.958432][ T6984] Dev loop6: unable to read RDB block 0 [ 118.973941][ T6984] loop6: unable to read partition table [ 118.986768][ T6984] loop6: partition table beyond EOD, truncated [ 118.986797][ T6984] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 119.814358][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.135954][ T5929] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.159438][ T5929] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.173987][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.185543][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 120.220901][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 120.251658][ T5929] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.312325][ T9] usb 4-1: USB disconnect, device number 6 [ 120.326079][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.337674][ T5929] usb 3-1: Product: syz [ 120.344033][ T5929] usb 3-1: Manufacturer: syz [ 120.382898][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 120.401734][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 120.413925][ T5929] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 120.433504][ T5929] cdc_wdm 3-1:1.0: Unknown control protocol [ 120.734997][ T7030] overlayfs: missing 'lowerdir' [ 120.782953][ T29] audit: type=1400 audit(1773702146.121:282): avc: denied { create } for pid=7031 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.832698][ T7032] tipc: Failed to remove unknown binding: 66,0,0/0:3928737662/3928737664 [ 120.846050][ T7032] tipc: Failed to remove unknown binding: 66,0,0/0:3928737662/3928737663 [ 120.863880][ T29] audit: type=1400 audit(1773702146.151:283): avc: denied { write } for pid=7031 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.890908][ T7032] tipc: Failed to remove unknown binding: 66,0,0/0:3928737662/3928737664 [ 120.919121][ T7032] tipc: Failed to remove unknown binding: 66,0,0/0:3928737662/3928737663 [ 120.945893][ T29] audit: type=1400 audit(1773702146.151:284): avc: denied { bind } for pid=7031 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.965401][ T29] audit: type=1400 audit(1773702146.151:285): avc: denied { setopt } for pid=7031 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.103538][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.205808][ T5816] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 121.264947][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.270441][ T29] audit: type=1400 audit(1773702146.611:286): avc: denied { bind } for pid=7058 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.281791][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.312019][ T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.323287][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.332909][ T9] usb 4-1: Product: syz [ 121.340692][ T9] usb 4-1: Manufacturer: syz [ 121.346882][ T9] usb 4-1: SerialNumber: syz [ 121.351861][ T7060] netlink: 164 bytes leftover after parsing attributes in process `syz.0.466'. [ 121.376184][ T9] usb 4-1: config 0 descriptor?? [ 121.381935][ T7034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.391838][ T7034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.463437][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.619194][ T7034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.626743][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 121.633066][ T7034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.641423][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.654276][ T5929] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.665947][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.684706][ T5929] usb 2-1: config 0 descriptor?? [ 121.949512][ T5929] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 122.588105][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 122.598947][ T7069] overlayfs: missing 'lowerdir' [ 122.624841][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 122.631460][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 122.637945][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 122.644538][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 122.650773][ T5924] usb 3-1: USB disconnect, device number 5 [ 122.657386][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 122.657407][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 122.657422][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 123.217470][ T9] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 123.269152][ T9] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 46:fd:e8:25:da:68 [ 123.337250][ T9] usb 4-1: USB disconnect, device number 7 [ 123.378560][ T9] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 123.428004][ T29] audit: type=1400 audit(1773702148.761:287): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.455446][ T7066] syz.0.468 (7066): drop_caches: 2 [ 123.545515][ T29] audit: type=1400 audit(1773702148.761:288): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.624870][ T29] audit: type=1400 audit(1773702148.761:289): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.733242][ T29] audit: type=1400 audit(1773702148.771:290): avc: denied { read } for pid=5474 comm="dhcpcd" name="n100" dev="tmpfs" ino=3556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.875977][ T29] audit: type=1400 audit(1773702148.771:291): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.085952][ T7088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.634482][ T5859] usb 2-1: USB disconnect, device number 6 [ 124.770547][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.476'. [ 125.323960][ T7118] program syz.1.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.634415][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.642838][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.669747][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.900194][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.945786][ T5924] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.316234][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 126.316261][ T29] audit: type=1400 audit(1773702151.661:302): avc: denied { listen } for pid=7140 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.369600][ T5924] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.465936][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.475136][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 126.496994][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 126.513259][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.524578][ T9] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 126.536449][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.539524][ T29] audit: type=1400 audit(1773702151.881:303): avc: denied { name_bind } for pid=7143 comm="syz.1.488" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 126.569235][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 126.578816][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.587778][ T5924] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.597016][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.607568][ T9] usb 3-1: Product: syz [ 126.611738][ T9] usb 3-1: Manufacturer: syz [ 126.638926][ T5924] usb 4-1: Product: syz [ 126.643116][ T5924] usb 4-1: Manufacturer: syz [ 126.653381][ T9] usb 3-1: SerialNumber: syz [ 126.685669][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.699356][ T5924] cdc_wdm 4-1:1.0: skipping garbage [ 126.724284][ T5924] cdc_wdm 4-1:1.0: skipping garbage [ 126.756173][ T5924] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 126.772408][ T5924] cdc_wdm 4-1:1.0: Unknown control protocol [ 126.917963][ T9] usb 3-1: USB disconnect, device number 6 [ 127.011531][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.018163][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.024658][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.031246][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.037561][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.044149][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.051120][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.057715][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.064409][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.070999][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.077238][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.083842][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.090101][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 127.096687][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 127.126355][ T5924] usb 4-1: USB disconnect, device number 8 [ 127.132267][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 127.888325][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.959093][ T29] audit: type=1400 audit(1773702153.301:304): avc: denied { create } for pid=7161 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.029192][ T29] audit: type=1400 audit(1773702153.301:305): avc: denied { bind } for pid=7161 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.171211][ T29] audit: type=1400 audit(1773702153.331:306): avc: denied { mounton } for pid=7161 comm="syz.0.493" path="/98/file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.408720][ T7172] syzkaller1: entered promiscuous mode [ 128.415997][ T7172] syzkaller1: entered allmulticast mode [ 128.595459][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.627061][ T29] audit: type=1400 audit(1773702153.971:307): avc: denied { read write } for pid=7182 comm="syz.3.501" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.657043][ T29] audit: type=1400 audit(1773702153.971:308): avc: denied { open } for pid=7182 comm="syz.3.501" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.771034][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 128.780554][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.791602][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.834342][ T9] usb 5-1: Product: syz [ 128.838593][ T9] usb 5-1: Manufacturer: syz [ 128.843224][ T9] usb 5-1: SerialNumber: syz [ 129.320761][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.329734][ T9] usb 5-1: config 0 descriptor?? [ 129.473699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.532448][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.750820][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 130.074778][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 130.084475][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 130.193513][ T29] audit: type=1400 audit(1773702155.531:309): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 130.193723][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 130.229430][ T9] dib0700: firmware download failed at 7 with -22 [ 130.384206][ T9] usb 5-1: USB disconnect, device number 4 [ 130.629823][ T5816] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 130.641275][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.933433][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.133473][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 131.174148][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.188103][ T976] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.198341][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.359653][ T976] usb 2-1: config 0 descriptor?? [ 131.495119][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 131.504185][ T7215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.509'. [ 131.585401][ T7217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.614749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.632127][ T7217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.686451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.700043][ T7216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.709587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.718893][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.727434][ T7216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.781617][ T976] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.318426][ T7227] tipc: Failed to remove unknown binding: 66,0,0/0:3944321560/3944321562 [ 132.327659][ T7227] tipc: Failed to remove unknown binding: 66,0,0/0:3944321560/3944321561 [ 132.567770][ T29] audit: type=1400 audit(1773702157.911:310): avc: denied { read write } for pid=7239 comm="syz.3.519" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.593242][ T7236] program syz.2.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.603776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.610789][ T7240] input: syz1 as /devices/virtual/input/input5 [ 132.622412][ T29] audit: type=1400 audit(1773702157.911:311): avc: denied { open } for pid=7239 comm="syz.3.519" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.753638][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.930589][ T7238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 132.937424][ T7238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.945783][ T7238] vhci_hcd vhci_hcd.0: Device attached [ 133.253532][ T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 133.260767][ T29] audit: type=1400 audit(1773702157.951:312): avc: denied { ioctl } for pid=7239 comm="syz.3.519" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.324060][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330394][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.416155][ T7245] vhci_hcd: connection reset by peer [ 133.433842][ T84] vhci_hcd vhci_hcd.0: stop threads [ 133.512307][ T84] vhci_hcd vhci_hcd.0: release socket [ 133.590196][ T84] vhci_hcd vhci_hcd.0: disconnect device [ 134.331348][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 134.373767][ T976] usb 2-1: USB disconnect, device number 7 [ 134.513653][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.521'. [ 134.597378][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 134.989262][ T29] audit: type=1400 audit(1773702160.331:313): avc: denied { append } for pid=7261 comm="syz.3.525" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.995688][ T7262] ubi31: attaching mtd0 [ 135.021538][ T7262] ubi31: scanning is finished [ 135.028893][ T7262] ubi31: empty MTD device detected [ 135.289218][ T7262] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 135.309496][ T7262] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 135.327568][ T7262] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 135.339006][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 135.348172][ T7262] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 135.360556][ T7273] bond0: entered promiscuous mode [ 135.365776][ T7262] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 135.372912][ T7262] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 135.381159][ T7273] bond_slave_0: entered promiscuous mode [ 135.387140][ T7273] bond_slave_1: entered promiscuous mode [ 135.392881][ T7262] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1385905076 [ 135.407927][ T7273] gretap0: entered promiscuous mode [ 135.414671][ T7262] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 135.426150][ T7273] debugfs: 'hsr1' already exists in 'hsr' [ 135.432001][ T7273] Cannot create hsr debugfs directory [ 135.439249][ T7273] hsr1: entered promiscuous mode [ 135.441098][ T7269] ubi31: background thread "ubi_bgt31d" started, PID 7269 [ 135.648624][ T5816] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 135.689741][ T7282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7282 comm=syz.3.532 [ 135.702313][ T29] audit: type=1400 audit(1773702161.031:314): avc: denied { ioctl } for pid=7281 comm="syz.3.532" path="socket:[14891]" dev="sockfs" ino=14891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.768043][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 135.810301][ T7282] hsr0: entered promiscuous mode [ 135.824908][ T7282] macvlan2: entered allmulticast mode [ 135.830456][ T7282] hsr0: entered allmulticast mode [ 135.836351][ T7282] hsr_slave_0: entered allmulticast mode [ 135.853132][ T7282] hsr_slave_1: entered allmulticast mode [ 135.913404][ T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.021334][ T29] audit: type=1400 audit(1773702161.361:315): avc: denied { create } for pid=7277 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.073768][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 136.079012][ T29] audit: type=1400 audit(1773702161.391:316): avc: denied { ioctl } for pid=7277 comm="syz.2.535" path="socket:[14909]" dev="sockfs" ino=14909 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.092556][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.148462][ T976] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.158470][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.442402][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.460039][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.533364][ T976] usb 2-1: config 0 descriptor?? [ 136.593541][ T5884] net_ratelimit: 4 callbacks suppressed [ 136.593565][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.646114][ T7303] netlink: 164 bytes leftover after parsing attributes in process `syz.0.542'. [ 136.679755][ T7305] ubi: mtd0 is already attached to ubi31 [ 136.723038][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 136.726589][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.744482][ T7307] bond0: entered promiscuous mode [ 136.749759][ T7307] bond_slave_0: entered promiscuous mode [ 136.756252][ T7307] bond_slave_1: entered promiscuous mode [ 136.764204][ T7307] gretap0: entered promiscuous mode [ 136.770575][ T7307] debugfs: 'hsr1' already exists in 'hsr' [ 136.780877][ T976] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.792909][ T7307] Cannot create hsr debugfs directory [ 136.808754][ T7307] hsr1: entered promiscuous mode [ 136.820413][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.829286][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.871600][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.888055][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.902803][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.911329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.963495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.193475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.227029][ T5884] usb 2-1: USB disconnect, device number 8 [ 137.282070][ T2149] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.317739][ T7332] ubi: mtd0 is already attached to ubi31 [ 137.808039][ T2149] usb 1-1: Using ep0 maxpacket: 8 [ 137.817050][ T2149] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.287065][ T2149] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.298985][ T2149] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.310868][ T2149] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 138.320440][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.328602][ T2149] usb 1-1: Product: syz [ 138.332776][ T2149] usb 1-1: Manufacturer: syz [ 138.344426][ T2149] usb 1-1: SerialNumber: syz [ 138.350516][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 138.719502][ T2149] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 138.738810][ T2149] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 138.753632][ T29] audit: type=1400 audit(1773702164.101:317): avc: denied { name_bind } for pid=7343 comm="syz.1.559" src=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 138.792560][ T2149] usb 1-1: USB disconnect, device number 4 [ 139.292288][ T5816] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 139.533399][ T976] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.554506][ T7373] input: syz1 as /devices/virtual/input/input6 [ 139.724689][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 139.756948][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.842608][ T976] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.874115][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.937201][ T976] usb 4-1: config 0 descriptor?? [ 140.013757][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.158304][ T976] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.174905][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.198536][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.229022][ T10] usb 5-1: config 220 has no interface number 2 [ 140.243043][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.268391][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 140.278550][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 140.285637][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 140.295797][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.326342][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.336099][ T7387] program syz.2.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.348514][ T10] usb 5-1: Product: syz [ 140.352770][ T10] usb 5-1: Manufacturer: syz [ 140.361003][ T10] usb 5-1: SerialNumber: syz [ 140.590699][ T2149] usb 4-1: USB disconnect, device number 9 [ 140.599069][ T10] usb 5-1: selecting invalid altsetting 0 [ 140.629253][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 140.648293][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 140.658934][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 140.672607][ T10] usb 5-1: selecting invalid altsetting 0 [ 140.679381][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 140.691480][ T7391] netlink: 'syz.1.580': attribute type 2 has an invalid length. [ 140.723060][ T10] usb 5-1: USB disconnect, device number 5 [ 140.954983][ T29] audit: type=1400 audit(1773702166.301:318): avc: denied { ioctl } for pid=7396 comm="syz.1.583" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.981030][ T29] audit: type=1326 audit(1773702166.301:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.007989][ T29] audit: type=1326 audit(1773702166.331:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.032366][ T29] audit: type=1326 audit(1773702166.331:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.055712][ T29] audit: type=1326 audit(1773702166.331:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.079644][ T29] audit: type=1326 audit(1773702166.331:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.103489][ T29] audit: type=1326 audit(1773702166.331:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.127133][ T29] audit: type=1326 audit(1773702166.331:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.155143][ T29] audit: type=1326 audit(1773702166.331:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a4d39c799 code=0x7ffc0000 [ 141.203486][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.248988][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.963520][ T976] net_ratelimit: 15 callbacks suppressed [ 141.963537][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.312107][ T7414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.467631][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.583683][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 142.928503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.003341][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.309745][ T7432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 143.349862][ T5816] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 143.382273][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.417515][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.485334][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.554690][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.662744][ T976] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 143.793589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.857028][ T7442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.865612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.903374][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 143.947946][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.013079][ T976] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.033784][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.095455][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.203880][ T976] usb 4-1: config 0 descriptor?? [ 144.337948][ T7452] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.449871][ T976] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.497164][ T7458] Cannot find set identified by id 0 to match [ 144.589220][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 144.589235][ T29] audit: type=1400 audit(1773702169.931:398): avc: denied { read } for pid=7462 comm="syz.0.609" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.673439][ T29] audit: type=1400 audit(1773702170.011:399): avc: denied { write } for pid=7462 comm="syz.0.609" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.054815][ T7476] hub 9-0:1.0: USB hub found [ 145.060115][ T7476] hub 9-0:1.0: 1 port detected [ 145.291938][ T10] usb 4-1: USB disconnect, device number 10 [ 146.702972][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 146.738138][ T29] audit: type=1400 audit(1773702172.041:400): avc: denied { create } for pid=7488 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.475002][ T29] audit: type=1400 audit(1773702172.041:401): avc: denied { ioctl } for pid=7488 comm="syz.4.620" path="socket:[15249]" dev="sockfs" ino=15249 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.507012][ T5884] net_ratelimit: 6 callbacks suppressed [ 147.507027][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.524021][ T29] audit: type=1400 audit(1773702172.061:402): avc: denied { create } for pid=7488 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.611145][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.836236][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.023728][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.031854][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.031906][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.048711][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.015678][ T29] audit: type=1400 audit(1773702173.461:403): avc: denied { write } for pid=7515 comm="syz.4.628" path="socket:[15776]" dev="sockfs" ino=15776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.041086][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.159455][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.286458][ T29] audit: type=1400 audit(1773702173.941:404): avc: denied { lock } for pid=7515 comm="syz.4.628" path="socket:[15278]" dev="sockfs" ino=15278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 151.145751][ T29] audit: type=1400 audit(1773702175.011:405): avc: denied { listen } for pid=7515 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 151.170550][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.170564][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.027590][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 152.072469][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 152.160973][ T29] audit: type=1400 audit(1773702177.501:406): avc: denied { map } for pid=7552 comm="syz.1.641" path="socket:[17232]" dev="sockfs" ino=17232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 153.175171][ T5929] net_ratelimit: 5 callbacks suppressed [ 153.175184][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.237723][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.313714][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.412557][ T29] audit: type=1400 audit(1773702178.751:407): avc: denied { watch_mount } for pid=7574 comm="syz.3.649" path="/121" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.413066][ T7575] overlayfs: failed to resolve './file2': -2 [ 153.467884][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 153.480468][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 153.646268][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.656003][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.666044][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.676289][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.685124][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.696031][ T7593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.227395][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 154.282716][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.539182][ T7623] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 155.102556][ T29] audit: type=1400 audit(1773702180.441:408): avc: denied { connect } for pid=7639 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.286995][ T29] audit: type=1400 audit(1773702180.601:409): avc: denied { map } for pid=7636 comm="syz.4.674" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.836989][ T29] audit: type=1400 audit(1773702182.181:410): avc: denied { connect } for pid=7688 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.333410][ T5884] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.419431][ T7709] ------------[ cut here ]------------ [ 157.425695][ T7709] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 157.425711][ T7709] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#0: syz.4.705/7709 [ 157.445363][ T7709] Modules linked in: [ 157.449485][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.4.705 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.460928][ T7709] Tainted: [L]=SOFTLOCKUP [ 157.465880][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.476033][ T7709] RIP: 0010:path_noexec+0x1cf/0x230 [ 157.481244][ T7709] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba d6 7d ff 83 e3 01 e8 d2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 c2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea [ 157.501067][ T7709] RSP: 0018:ffffc9000d0cfbd8 EFLAGS: 00010287 [ 157.507173][ T7709] RAX: 00000000000000cf RBX: 0000000000000000 RCX: ffffc900056c3000 [ 157.515222][ T7709] RDX: 0000000000080000 RSI: ffffffff828af0be RDI: ffff88802f890000 [ 157.523198][ T7709] RBP: ffff88801f6b3a60 R08: 0000000000000007 R09: 0000000000000000 [ 157.523381][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 157.531257][ T7709] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 157.544454][ T7709] R13: 0000000000000001 R14: ffff8880350a4588 R15: 0000000000000000 [ 157.552526][ T7709] FS: 00007f74de5846c0(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 157.562272][ T7709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.569460][ T7709] CR2: 000000110c301881 CR3: 0000000022782000 CR4: 00000000003526f0 [ 157.569825][ T5884] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 157.577487][ T7709] Call Trace: [ 157.577497][ T7709] [ 157.577506][ T7709] do_mmap+0x857/0x12f0 [ 157.588298][ T5884] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 157.588778][ T7709] ? __pfx_do_mmap+0x10/0x10 [ 157.591952][ T5884] usb 4-1: config 6 has no interface number 0 [ 157.595901][ T7709] ? __pfx_down_write_killable+0x10/0x10 [ 157.607027][ T5884] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 157.610683][ T7709] vm_mmap_pgoff+0x29e/0x470 [ 157.610719][ T7709] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.617788][ T5884] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 157.622461][ T7709] ? __fget_files+0x215/0x3d0 [ 157.622493][ T7709] ? __fget_files+0x21f/0x3d0 [ 157.622514][ T7709] ksys_mmap_pgoff+0x3c8/0x650 [ 157.622536][ T7709] ? __x64_sys_futex+0x34f/0x4d0 [ 157.622552][ T7709] ? __x64_sys_futex+0x358/0x4d0 [ 157.622573][ T7709] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 157.622591][ T7709] ? xfd_validate_state+0x129/0x190 [ 157.622624][ T7709] __x64_sys_mmap+0x125/0x190 [ 157.622647][ T7709] do_syscall_64+0x106/0xf80 [ 157.622671][ T7709] ? clear_bhb_loop+0x40/0x90 [ 157.622695][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.622714][ T7709] RIP: 0033:0x7f74dd79c799 [ 157.622733][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.641538][ T5884] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.643976][ T7709] RSP: 002b:00007f74de584028 EFLAGS: 00000246 [ 157.655743][ T5884] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 157.658359][ T7709] ORIG_RAX: 0000000000000009 [ 157.658370][ T7709] RAX: ffffffffffffffda RBX: 00007f74dda15fa0 RCX: 00007f74dd79c799 [ 157.658383][ T7709] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 157.669688][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.674125][ T7709] RBP: 00007f74dd832c99 R08: 0000000000000006 R09: 0000000000000000 [ 157.674140][ T7709] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 157.679128][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.684355][ T7709] R13: 00007f74dda16038 R14: 00007f74dda15fa0 R15: 00007ffdf1057c68 [ 157.690413][ T5884] usb 4-1: Product: syz [ 157.694233][ T7709] [ 157.694245][ T7709] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.694260][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.4.705 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.694284][ T7709] Tainted: [L]=SOFTLOCKUP [ 157.694291][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.694300][ T7709] Call Trace: [ 157.694306][ T7709] [ 157.694312][ T7709] dump_stack_lvl+0x100/0x190 [ 157.694342][ T7709] vpanic+0x552/0x970 [ 157.694358][ T7709] ? __pfx_vpanic+0x10/0x10 [ 157.694380][ T7709] panic+0xd1/0xe0 [ 157.694395][ T7709] ? __pfx_panic+0x10/0x10 [ 157.694420][ T7709] check_panic_on_warn.cold+0x19/0x34 [ 157.694437][ T7709] ? path_noexec+0x1cf/0x230 [ 157.694459][ T7709] __warn.cold+0x191/0x348 [ 157.694476][ T7709] __report_bug+0x296/0x3d0 [ 157.694494][ T7709] ? path_noexec+0x1cf/0x230 [ 157.694517][ T7709] ? __pfx___report_bug+0x10/0x10 [ 157.694539][ T7709] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 157.694560][ T7709] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 157.694578][ T7709] ? path_noexec+0x1cf/0x230 [ 157.694600][ T7709] report_bug+0xb2/0x220 [ 157.694617][ T7709] ? path_noexec+0x1cf/0x230 [ 157.694639][ T7709] handle_bug+0x16a/0x2a0 [ 157.694662][ T7709] exc_invalid_op+0x17/0x50 [ 157.694684][ T7709] asm_exc_invalid_op+0x1a/0x20 [ 157.694699][ T7709] RIP: 0010:path_noexec+0x1cf/0x230 [ 157.694722][ T7709] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba d6 7d ff 83 e3 01 e8 d2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 c2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea [ 157.694737][ T7709] RSP: 0018:ffffc9000d0cfbd8 EFLAGS: 00010287 [ 157.694751][ T7709] RAX: 00000000000000cf RBX: 0000000000000000 RCX: ffffc900056c3000 [ 157.694761][ T7709] RDX: 0000000000080000 RSI: ffffffff828af0be RDI: ffff88802f890000 [ 157.694772][ T7709] RBP: ffff88801f6b3a60 R08: 0000000000000007 R09: 0000000000000000 [ 157.694782][ T7709] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 157.694792][ T7709] R13: 0000000000000001 R14: ffff8880350a4588 R15: 0000000000000000 [ 157.694809][ T7709] ? path_noexec+0x1ce/0x230 [ 157.694833][ T7709] ? path_noexec+0x1ce/0x230 [ 157.694856][ T7709] do_mmap+0x857/0x12f0 [ 157.694878][ T7709] ? __pfx_do_mmap+0x10/0x10 [ 157.694894][ T7709] ? __pfx_down_write_killable+0x10/0x10 [ 157.694921][ T7709] vm_mmap_pgoff+0x29e/0x470 [ 157.694943][ T7709] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.694958][ T7709] ? __fget_files+0x215/0x3d0 [ 157.694985][ T7709] ? __fget_files+0x21f/0x3d0 [ 157.695005][ T7709] ksys_mmap_pgoff+0x3c8/0x650 [ 157.695021][ T7709] ? __x64_sys_futex+0x34f/0x4d0 [ 157.695037][ T7709] ? __x64_sys_futex+0x358/0x4d0 [ 157.695053][ T7709] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 157.695069][ T7709] ? xfd_validate_state+0x129/0x190 [ 157.695099][ T7709] __x64_sys_mmap+0x125/0x190 [ 157.695118][ T7709] do_syscall_64+0x106/0xf80 [ 157.695136][ T7709] ? clear_bhb_loop+0x40/0x90 [ 157.695155][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.695171][ T7709] RIP: 0033:0x7f74dd79c799 [ 157.695185][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.695200][ T7709] RSP: 002b:00007f74de584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.695214][ T7709] RAX: ffffffffffffffda RBX: 00007f74dda15fa0 RCX: 00007f74dd79c799 [ 157.695225][ T7709] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 157.695235][ T7709] RBP: 00007f74dd832c99 R08: 0000000000000006 R09: 0000000000000000 [ 157.695244][ T7709] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 157.695254][ T7709] R13: 00007f74dda16038 R14: 00007f74dda15fa0 R15: 00007ffdf1057c68 [ 157.695276][ T7709] [ 157.699037][ T7709] Kernel Offset: disabled