last executing test programs: 18.427461994s ago: executing program 1 (id=567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/80, 0x50}], 0x1}, 0x6}], 0x1, 0x2160, 0x0) 18.377245171s ago: executing program 1 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x29, 0x0, @broadcast, @multicast2}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 18.323656178s ago: executing program 1 (id=569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 18.234873424s ago: executing program 1 (id=578): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 18.147376617s ago: executing program 1 (id=571): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3, 0xffffffffffffffff}) close_range(r0, r4, 0x0) 17.707688685s ago: executing program 1 (id=579): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) 17.678074971s ago: executing program 32 (id=579): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) 2.188912938s ago: executing program 3 (id=895): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) 2.06014628s ago: executing program 3 (id=900): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x8, 0x9bc, 0x10001, 0x0, 0x6, 0x5, 0x0, 0x0, 0xa, 0xffffffbb}) 1.890652538s ago: executing program 0 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x3}, @device_b}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 1.783722316s ago: executing program 0 (id=908): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1.677248858s ago: executing program 0 (id=913): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.458735702s ago: executing program 3 (id=915): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) shmctl$SHM_UNLOCK(r0, 0xc) 1.3698745s ago: executing program 3 (id=919): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.363916766s ago: executing program 0 (id=920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 1.310567997s ago: executing program 3 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000280)="0b6d16df3ce972afa911719571a7", 0xe}], 0x3) 1.114305615s ago: executing program 3 (id=927): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 817.497478ms ago: executing program 0 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x1214040, 0x0) chdir(&(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r0, r0) stat(&(0x7f0000000140)='./file3\x00', 0x0) 775.694692ms ago: executing program 0 (id=933): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') 655.834487ms ago: executing program 4 (id=934): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 527.218407ms ago: executing program 4 (id=935): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0xd43) 455.263073ms ago: executing program 4 (id=936): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 419.447452ms ago: executing program 4 (id=937): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 417.932392ms ago: executing program 2 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 325.007657ms ago: executing program 2 (id=939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x2, 0x2}}]}) 324.792611ms ago: executing program 4 (id=940): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 290.899091ms ago: executing program 4 (id=941): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 233.401102ms ago: executing program 2 (id=942): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 145.804816ms ago: executing program 2 (id=943): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 124.325865ms ago: executing program 2 (id=944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x12a102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=945): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f00000005c0)="a50dafd420eb8e3705e0a5d6796dc8d44b5b043fb599dbdb450d4c8af4f84e9aed36c1092e750a2f4937dc3b565b63a2eafddca1e023f482421f8a0d94f9b79b", 0x40}, {&(0x7f0000000600)="1c08", 0x2}], 0x2, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48436' (ED25519) to the list of known hosts. [ 46.506463][ T40] audit: type=1400 audit(1768084026.926:62): avc: denied { name_bind } for pid=5849 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.554368][ T40] audit: type=1400 audit(1768084026.976:63): avc: denied { execute } for pid=5850 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.561060][ T40] audit: type=1400 audit(1768084026.976:64): avc: denied { execute_no_trans } for pid=5850 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.111678][ T40] audit: type=1400 audit(1768084029.526:65): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.119450][ T40] audit: type=1400 audit(1768084029.536:66): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.122194][ T5850] cgroup: Unknown subsys name 'net' [ 49.275142][ T5850] cgroup: Unknown subsys name 'cpuset' [ 49.279285][ T5850] cgroup: Unknown subsys name 'rlimit' [ 49.465114][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 49.465126][ T40] audit: type=1400 audit(1768084029.886:68): avc: denied { setattr } for pid=5850 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.475970][ T40] audit: type=1400 audit(1768084029.886:69): avc: denied { create } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.483615][ T40] audit: type=1400 audit(1768084029.886:70): avc: denied { write } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.491408][ T40] audit: type=1400 audit(1768084029.886:71): avc: denied { read } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.499200][ T40] audit: type=1400 audit(1768084029.886:72): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.509205][ T40] audit: type=1400 audit(1768084029.886:73): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.518678][ T40] audit: type=1400 audit(1768084029.896:74): avc: denied { read } for pid=5640 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.527005][ T40] audit: type=1400 audit(1768084029.906:75): avc: denied { read } for pid=5640 comm="dhcpcd" name="n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.528649][ T5910] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.535046][ T40] audit: type=1400 audit(1768084029.906:76): avc: denied { open } for pid=5640 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.545932][ T40] audit: type=1400 audit(1768084029.906:77): avc: denied { getattr } for pid=5640 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.263892][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.903703][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.907053][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.907965][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.910105][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.912846][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.914711][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.916686][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.916962][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.917808][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.918306][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.919157][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.919356][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.919709][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.920906][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.924646][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.934105][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.941628][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.942675][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.948068][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.951466][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.203957][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 54.269681][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 54.311677][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.314487][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.316973][ T5928] bridge_slave_0: entered allmulticast mode [ 54.319573][ T5928] bridge_slave_0: entered promiscuous mode [ 54.323273][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 54.356773][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.359133][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.361493][ T5928] bridge_slave_1: entered allmulticast mode [ 54.364942][ T5928] bridge_slave_1: entered promiscuous mode [ 54.386986][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 54.453860][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.482854][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.501879][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.504854][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.507885][ T5939] bridge_slave_0: entered allmulticast mode [ 54.511414][ T5939] bridge_slave_0: entered promiscuous mode [ 54.536633][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.539715][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.542460][ T5939] bridge_slave_1: entered allmulticast mode [ 54.546353][ T5939] bridge_slave_1: entered promiscuous mode [ 54.565960][ T5928] team0: Port device team_slave_0 added [ 54.568248][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.570621][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.572997][ T5926] bridge_slave_0: entered allmulticast mode [ 54.576014][ T5926] bridge_slave_0: entered promiscuous mode [ 54.595994][ T5928] team0: Port device team_slave_1 added [ 54.607037][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.609973][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.613346][ T5926] bridge_slave_1: entered allmulticast mode [ 54.617167][ T5926] bridge_slave_1: entered promiscuous mode [ 54.668837][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.683714][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.686620][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.698323][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.703940][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.707939][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.711048][ T5931] bridge_slave_0: entered allmulticast mode [ 54.715327][ T5931] bridge_slave_0: entered promiscuous mode [ 54.722165][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.733344][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.738468][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.741502][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.753254][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.757812][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.760180][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.762741][ T5931] bridge_slave_1: entered allmulticast mode [ 54.765352][ T5931] bridge_slave_1: entered promiscuous mode [ 54.777842][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.804072][ T5939] team0: Port device team_slave_0 added [ 54.822075][ T5926] team0: Port device team_slave_0 added [ 54.825693][ T5939] team0: Port device team_slave_1 added [ 54.830171][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.835678][ T5926] team0: Port device team_slave_1 added [ 54.871720][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.901256][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.904194][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.914804][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.921389][ T5928] hsr_slave_0: entered promiscuous mode [ 54.924780][ T5928] hsr_slave_1: entered promiscuous mode [ 54.934530][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.937022][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.946027][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.951308][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.954547][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.964752][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.976320][ T5931] team0: Port device team_slave_0 added [ 54.979256][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.982146][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.992736][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.016132][ T5931] team0: Port device team_slave_1 added [ 55.052864][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.055188][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.063340][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.091379][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.093686][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.101475][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.109994][ T5926] hsr_slave_0: entered promiscuous mode [ 55.112769][ T5926] hsr_slave_1: entered promiscuous mode [ 55.114862][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 55.116751][ T5926] Cannot create hsr debugfs directory [ 55.169185][ T5939] hsr_slave_0: entered promiscuous mode [ 55.171404][ T5939] hsr_slave_1: entered promiscuous mode [ 55.174220][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 55.176610][ T5939] Cannot create hsr debugfs directory [ 55.214863][ T5931] hsr_slave_0: entered promiscuous mode [ 55.218021][ T5931] hsr_slave_1: entered promiscuous mode [ 55.221068][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 55.223115][ T5931] Cannot create hsr debugfs directory [ 55.437928][ T5928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.446825][ T5928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.455970][ T5928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.460563][ T5928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.485715][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.491309][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.498525][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.509699][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.548130][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.553718][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.558384][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.566249][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.618497][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.623951][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.630547][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.637009][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.671577][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.705161][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.714606][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.728861][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.731451][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.745505][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.748080][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.757584][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.767057][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.782192][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.784542][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.797997][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.800841][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.817521][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.827846][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.843705][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.845951][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.854517][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 55.854526][ T40] audit: type=1400 audit(1768084036.276:91): avc: denied { sys_module } for pid=5928 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.866046][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.871199][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.873604][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.881895][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.884224][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.904995][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.907376][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.943953][ T64] Bluetooth: hci1: command tx timeout [ 55.953023][ T64] Bluetooth: hci0: command tx timeout [ 55.997549][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.023417][ T5289] Bluetooth: hci3: command tx timeout [ 56.025819][ T64] Bluetooth: hci2: command tx timeout [ 56.061167][ T5928] veth0_vlan: entered promiscuous mode [ 56.067586][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.082428][ T5928] veth1_vlan: entered promiscuous mode [ 56.120405][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.149755][ T5926] veth0_vlan: entered promiscuous mode [ 56.156512][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.163265][ T5928] veth0_macvtap: entered promiscuous mode [ 56.170734][ T5928] veth1_macvtap: entered promiscuous mode [ 56.180816][ T5926] veth1_vlan: entered promiscuous mode [ 56.205552][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.219646][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.237410][ T5939] veth0_vlan: entered promiscuous mode [ 56.240200][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.249720][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.257028][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.266977][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.284505][ T5939] veth1_vlan: entered promiscuous mode [ 56.288529][ T5931] veth0_vlan: entered promiscuous mode [ 56.291416][ T5926] veth0_macvtap: entered promiscuous mode [ 56.311024][ T5926] veth1_macvtap: entered promiscuous mode [ 56.314978][ T5931] veth1_vlan: entered promiscuous mode [ 56.345183][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.349451][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.361844][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.365597][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.365915][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.380050][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.384713][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.399328][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.418255][ T5939] veth0_macvtap: entered promiscuous mode [ 56.424673][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.427200][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.430680][ T5931] veth0_macvtap: entered promiscuous mode [ 56.437457][ T5939] veth1_macvtap: entered promiscuous mode [ 56.439460][ T40] audit: type=1400 audit(1768084036.856:92): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.447979][ T40] audit: type=1400 audit(1768084036.866:93): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/syzkaller.uIihEB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.451691][ T5931] veth1_macvtap: entered promiscuous mode [ 56.460560][ T40] audit: type=1400 audit(1768084036.866:94): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.469568][ T40] audit: type=1400 audit(1768084036.886:95): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/syzkaller.uIihEB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.479690][ T40] audit: type=1400 audit(1768084036.886:96): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/syzkaller.uIihEB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.489856][ T40] audit: type=1400 audit(1768084036.886:97): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.499904][ T40] audit: type=1400 audit(1768084036.886:98): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.508280][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.509441][ T40] audit: type=1400 audit(1768084036.886:99): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="gadgetfs" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.510917][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.520438][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.520535][ T40] audit: type=1400 audit(1768084036.896:100): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.538066][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.541407][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.550443][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.583455][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.585755][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.589572][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.592018][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.604914][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.613416][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.616170][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.627930][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.644359][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.647085][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.660672][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.704697][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.707044][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.707165][ T6021] Zero length message leads to an empty skb [ 56.707259][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.772145][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.780745][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.784686][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.788659][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.822391][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.825904][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.022166][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 57.034437][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 57.078559][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.085838][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 57.088650][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 57.099634][ T6053] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 57.099634][ T6053] cct.usage_percpu_sys' [ 57.108609][ T1216] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.108749][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 57.116673][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 57.119173][ T1216] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.134534][ T1216] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.138992][ T1216] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.286517][ T6065] Bluetooth: MGMT ver 1.23 [ 57.379351][ T6072] netlink: 'syz.3.22': attribute type 9 has an invalid length. [ 57.384358][ T6072] netlink: 'syz.3.22': attribute type 11 has an invalid length. [ 57.387692][ T6072] netlink: 'syz.3.22': attribute type 12 has an invalid length. [ 57.390353][ T6072] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.22'. [ 57.394460][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 57.440005][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 57.467242][ T6074] hsr_slave_1 (unregistering): left promiscuous mode [ 57.911581][ T6085] overlayfs: failed to set uuid (9/file0, err=-1); falling back to uuid=null. [ 57.919090][ T6085] overlayfs: failed to verify upper root origin [ 58.022853][ T5289] Bluetooth: hci1: command tx timeout [ 58.025342][ T64] Bluetooth: hci0: command tx timeout [ 58.103061][ T5289] Bluetooth: hci3: command tx timeout [ 58.104992][ T64] Bluetooth: hci2: command tx timeout [ 58.296401][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.305430][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.307610][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.309853][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.311973][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.314174][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.316308][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.318446][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.320605][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.322775][ T6101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 59.511305][ T6146] kAFS: unable to lookup cell '(,' [ 59.590517][ T6150] smc: net device bond0 applied user defined pnetid SYZ2 [ 59.604418][ T6150] smc: removing net device bond0 with user defined pnetid SYZ2 [ 59.610194][ T6150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.619015][ T6150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.623925][ T6150] bond0 (unregistering): Released all slaves [ 59.759849][ T6152] netlink: 'syz.0.60': attribute type 14 has an invalid length. [ 59.766134][ T6152] netlink: 'syz.0.60': attribute type 14 has an invalid length. [ 60.092510][ T6156] input: syz1 as /devices/virtual/input/input5 [ 60.102726][ T5289] Bluetooth: hci1: command tx timeout [ 60.105683][ T64] Bluetooth: hci0: command tx timeout [ 60.182781][ T5289] Bluetooth: hci2: command tx timeout [ 60.182959][ T64] Bluetooth: hci3: command tx timeout [ 60.246933][ T6164] evm: overlay not supported [ 60.498845][ T6186] netlink: 'syz.1.73': attribute type 18 has an invalid length. [ 60.509894][ T1144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.509997][ T6186] netlink: 'syz.1.73': attribute type 18 has an invalid length. [ 60.513253][ T1144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.520034][ T1144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.522882][ T1144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.706622][ T6192] netlink: 'syz.1.76': attribute type 8 has an invalid length. [ 61.165901][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 61.165912][ T40] audit: type=1400 audit(1768084041.586:212): avc: denied { append } for pid=6209 comm="syz.0.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.267037][ T40] audit: type=1400 audit(1768084041.686:213): avc: denied { write } for pid=6209 comm="syz.0.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.296668][ T6217] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 61.305419][ T6217] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 61.366507][ T40] audit: type=1400 audit(1768084041.786:214): avc: denied { read write } for pid=6222 comm="syz.3.90" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.376779][ T40] audit: type=1400 audit(1768084041.786:215): avc: denied { open } for pid=6222 comm="syz.3.90" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.413222][ T40] audit: type=1400 audit(1768084041.786:216): avc: denied { map } for pid=6222 comm="syz.3.90" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.435714][ T40] audit: type=1400 audit(1768084041.846:217): avc: denied { execute } for pid=6226 comm="syz.2.92" path="/5/blkio.bfq.group_wait_time" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.444869][ T40] audit: type=1400 audit(1768084041.846:218): avc: denied { ioctl } for pid=6222 comm="syz.3.90" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.907686][ T40] audit: type=1400 audit(1768084042.326:219): avc: denied { listen } for pid=6257 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.193238][ T5289] Bluetooth: hci1: command tx timeout [ 62.193573][ T64] Bluetooth: hci0: command tx timeout [ 62.202941][ T143] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.212279][ T40] audit: type=1326 audit(1768084042.626:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6278 comm="syz.3.114" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8bc38f7c9 code=0x0 [ 62.263316][ T64] Bluetooth: hci2: command tx timeout [ 62.263510][ T5289] Bluetooth: hci3: command tx timeout [ 62.312803][ T6018] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 62.354255][ T143] usb 5-1: Using ep0 maxpacket: 32 [ 62.361661][ T143] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 62.367019][ T143] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 62.371999][ T143] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.377120][ T143] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 62.386244][ T143] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 62.390122][ T143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.393854][ T143] usb 5-1: Product: syz [ 62.395574][ T143] usb 5-1: Manufacturer: syz [ 62.397188][ T143] usb 5-1: SerialNumber: syz [ 62.411287][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 62.418245][ T143] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input6 [ 62.432635][ T40] audit: type=1400 audit(1768084042.836:221): avc: denied { mount } for pid=6285 comm="syz.2.116" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.632727][ T143] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 62.636435][ T143] (id 0x00) [ 62.693486][ T143] rc_core: IR keymap rc-imon-pad not found [ 62.695585][ T143] Registered IR keymap rc-empty [ 62.697670][ T143] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 62.701540][ T143] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 62.841999][ T143] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 62.847245][ T143] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input7 [ 62.856265][ T143] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:2> initialized [ 63.024727][ T6018] usb 5-1: USB disconnect, device number 2 [ 63.361842][ T6309] __nla_validate_parse: 10 callbacks suppressed [ 63.361858][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 63.381156][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'. [ 64.361085][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 64.392466][ T6352] smc: adding net device bond0 with user defined pnetid SYZ2 [ 64.532655][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.548707][ T6363] capability: warning: `syz.1.148' uses 32-bit capabilities (legacy support in use) [ 64.704359][ T5933] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.707909][ T5933] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 64.712016][ T5933] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 64.716386][ T5933] usb 5-1: config 220 has no interface number 1 [ 64.718935][ T5933] usb 5-1: config 220 interface 0 has no altsetting 0 [ 64.721708][ T5933] usb 5-1: config 220 interface 76 has no altsetting 0 [ 64.726905][ T5933] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.730249][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.733308][ T5933] usb 5-1: Product: syz [ 64.734722][ T5933] usb 5-1: Manufacturer: syz [ 64.736238][ T5933] usb 5-1: SerialNumber: syz [ 64.965676][ T5933] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 64.968890][ T5933] uvcvideo 5-1:220.0: No valid video chain found. [ 64.976044][ T5933] usb 5-1: USB disconnect, device number 3 [ 65.281723][ T6389] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.160'. [ 65.369183][ T6394] net_ratelimit: 3321 callbacks suppressed [ 65.369200][ T6394] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.411981][ T6397] validate_nla: 2 callbacks suppressed [ 65.411999][ T6397] netlink: 'syz.3.164': attribute type 9 has an invalid length. [ 65.418328][ T6397] netlink: 'syz.3.164': attribute type 11 has an invalid length. [ 65.421817][ T6397] netlink: 'syz.3.164': attribute type 12 has an invalid length. [ 65.427060][ T6397] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.164'. [ 65.430999][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 65.754569][ T6425] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.175'. [ 65.757556][ T6425] netlink: Conntrack attr has 4 unknown bytes [ 66.084760][ T6447] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.181'. [ 66.497352][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 66.497362][ T40] audit: type=1326 audit(1768084046.916:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.3.186" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8bc38f7c9 code=0x0 [ 66.633231][ T40] audit: type=1400 audit(1768084047.046:257): avc: denied { create } for pid=6468 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.640829][ T40] audit: type=1400 audit(1768084047.056:258): avc: denied { setopt } for pid=6468 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.751699][ T40] audit: type=1400 audit(1768084047.166:259): avc: denied { execute } for pid=6473 comm="syz.1.192" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.063899][ T143] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.212714][ T143] usb 6-1: Using ep0 maxpacket: 8 [ 67.215624][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.219004][ T143] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.221829][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.227147][ T143] usb 6-1: config 0 descriptor?? [ 67.364818][ T40] audit: type=1400 audit(1768084047.786:260): avc: denied { ioctl } for pid=6486 comm="syz.3.197" path="socket:[11210]" dev="sockfs" ino=11210 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.442242][ T143] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 67.906372][ T5962] usb 6-1: USB disconnect, device number 2 [ 68.172906][ T6509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.178164][ T6509] netlink: 'syz.3.204': attribute type 12 has an invalid length. [ 68.181419][ T6509] netlink: 'syz.3.204': attribute type 29 has an invalid length. [ 68.185824][ T6509] netlink: 148 bytes leftover after parsing attributes in process `syz.3.204'. [ 68.189644][ T6509] netlink: 'syz.3.204': attribute type 2 has an invalid length. [ 68.192902][ T6509] netlink: 'syz.3.204': attribute type 3 has an invalid length. [ 68.196075][ T6509] netlink: 15 bytes leftover after parsing attributes in process `syz.3.204'. [ 68.249723][ T40] audit: type=1400 audit(1768084048.666:261): avc: denied { read write } for pid=6516 comm="syz.0.207" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.258437][ T40] audit: type=1400 audit(1768084048.666:262): avc: denied { open } for pid=6516 comm="syz.0.207" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.292793][ T40] audit: type=1400 audit(1768084048.666:263): avc: denied { ioctl } for pid=6516 comm="syz.0.207" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.435033][ T6522] IPVS: You probably need to specify IP address on multicast interface. [ 68.438557][ T6522] IPVS: Error connecting to the multicast addr [ 68.443748][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 68.446500][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 68.489946][ T40] audit: type=1400 audit(1768084048.906:264): avc: denied { map } for pid=6535 comm="syz.2.215" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.502848][ T40] audit: type=1400 audit(1768084048.916:265): avc: denied { execute } for pid=6535 comm="syz.2.215" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.520492][ T5289] Bluetooth: hci0: unknown advertising packet type: 0x76 [ 68.520524][ T5289] Bluetooth: hci0: Malformed LE Event: 0x02 [ 68.732935][ T6552] netlink: 'syz.2.220': attribute type 7 has an invalid length. [ 68.754095][ T6552] netlink: 'syz.2.220': attribute type 7 has an invalid length. [ 69.076309][ T6573] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.225'. [ 69.817659][ T6599] input: syz0 as /devices/virtual/input/input8 [ 69.938215][ T6608] warning: `syz.1.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.404985][ T6635] SELinux: ebitmap start bit (1) is not a multiple of the map unit size (64) [ 70.411910][ T6635] SELinux: failed to load policy [ 70.622280][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 70.629376][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 70.632200][ T6648] netlink: 'syz.1.252': attribute type 20 has an invalid length. [ 70.637046][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 70.640856][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 70.644596][ T6648] netlink: 'syz.1.252': attribute type 20 has an invalid length. [ 70.703294][ T6583] Set syz1 is full, maxelem 65536 reached [ 70.812261][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 70.820229][ T6660] process 'syz.1.258' launched '/dev/fd/4' with NULL argv: empty string added [ 71.007945][ T6677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.266'. [ 71.118462][ T6692] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 71.128093][ T6692] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 71.130933][ T6692] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.273'. [ 71.702294][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 71.702305][ T40] audit: type=1400 audit(1768084052.106:297): avc: denied { prog_run } for pid=6731 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.767250][ T40] audit: type=1400 audit(1768084052.186:298): avc: denied { ioctl } for pid=6735 comm="syz.3.293" path="socket:[14348]" dev="sockfs" ino=14348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.939137][ T40] audit: type=1400 audit(1768084052.356:299): avc: denied { write } for pid=6745 comm="syz.0.298" path="socket:[11600]" dev="sockfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.967871][ T40] audit: type=1400 audit(1768084052.386:300): avc: denied { write } for pid=6748 comm="syz.0.300" name="vbi1" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.977483][ T40] audit: type=1400 audit(1768084052.386:301): avc: denied { append } for pid=6748 comm="syz.0.300" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.035090][ T40] audit: type=1400 audit(1768084052.456:302): avc: denied { bind } for pid=6754 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.047321][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.050955][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.063448][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.065974][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.269944][ T6775] input: syz1 as /devices/virtual/input/input9 [ 72.337571][ T40] audit: type=1400 audit(1768084052.756:303): avc: denied { allowed } for pid=6783 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.352727][ T40] audit: type=1400 audit(1768084052.756:304): avc: denied { map } for pid=6784 comm="syz.0.314" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.384652][ T6791] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 72.956440][ T6797] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 73.477269][ T143] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.636908][ T143] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.640486][ T143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.667610][ T143] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.670665][ T40] audit: type=1400 audit(1768084054.086:305): avc: denied { node_bind } for pid=6826 comm="syz.0.335" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.672817][ T143] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.681606][ T143] usb 7-1: Manufacturer: syz [ 73.689387][ T143] usb 7-1: config 0 descriptor?? [ 73.712392][ T6830] syz.0.336 uses obsolete (PF_INET,SOCK_PACKET) [ 73.752696][ T143] rc_core: IR keymap rc-hauppauge not found [ 73.754717][ T143] Registered IR keymap rc-empty [ 73.757555][ T143] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 73.761669][ T143] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 73.830864][ T60] nci: nci_rsp_packet: unsupported rsp opcode 0xf03 [ 73.909664][ T6014] usb 7-1: USB disconnect, device number 2 [ 74.393819][ T40] audit: type=1400 audit(1768084054.816:306): avc: denied { write } for pid=6856 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.509617][ T6865] __nla_validate_parse: 2 callbacks suppressed [ 74.509629][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 74.682134][ T6870] overlayfs: failed to verify upper (120/file0, ino=646, err=-116) [ 74.685570][ T6870] overlayfs: failed to verify index dir 'upper' xattr [ 74.688474][ T6870] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 74.816428][ T6883] netlink: 'syz.0.355': attribute type 29 has an invalid length. [ 74.822198][ T6883] netlink: 'syz.0.355': attribute type 29 has an invalid length. [ 74.827976][ T6883] netlink: 500 bytes leftover after parsing attributes in process `syz.0.355'. [ 75.072633][ T5933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.235019][ T5933] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.239602][ T5933] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.243851][ T5933] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.247634][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.254971][ T6885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.260048][ T5933] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.470342][ T5962] usb 6-1: USB disconnect, device number 3 [ 75.591490][ T6892] netlink: 'syz.2.359': attribute type 8 has an invalid length. [ 75.595140][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 75.822624][ T6906] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.366'. [ 76.186894][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.192656][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.834186][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 76.834198][ T40] audit: type=1400 audit(1768084057.256:318): avc: denied { read } for pid=6949 comm="syz.1.384" laddr=::1 lport=255 faddr=::1 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.876123][ T40] audit: type=1400 audit(1768084057.296:319): avc: denied { unlink } for pid=6953 comm="syz.1.386" name="#c" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.008503][ T6960] ip6gre1: entered promiscuous mode [ 77.010323][ T6960] ip6gre1: entered allmulticast mode [ 77.112435][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 77.112683][ T5962] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.118602][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 77.125442][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 77.129063][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 77.263911][ T5962] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 77.267139][ T5962] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 77.270498][ T5962] usb 5-1: config 220 interface 0 has no altsetting 0 [ 77.274533][ T5962] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 77.277374][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.279885][ T5962] usb 5-1: Product: syz [ 77.281232][ T5962] usb 5-1: Manufacturer: syz [ 77.283482][ T5962] usb 5-1: SerialNumber: syz [ 77.305211][ T6971] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 77.342305][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 77.426602][ T6977] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.433788][ T6977] bond1: (slave lo): speed changed to 0 on port 1 [ 77.437023][ T6977] bond1: (slave lo): Enslaving as a backup interface with an up link [ 77.441345][ T6977] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 77.502697][ T5962] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 77.505053][ T5962] uvcvideo 5-1:220.0: No valid video chain found. [ 77.511635][ T5962] usb 5-1: USB disconnect, device number 4 [ 77.525456][ T40] audit: type=1400 audit(1768084057.936:320): avc: denied { bind } for pid=6986 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.533962][ T40] audit: type=1400 audit(1768084057.946:321): avc: denied { setopt } for pid=6986 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.690976][ T6997] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 77.699333][ T6997] kvm: Disabled LAPIC found during irq injection [ 77.778541][ T40] audit: type=1400 audit(1768084058.196:322): avc: denied { create } for pid=6999 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.789310][ T40] audit: type=1400 audit(1768084058.196:323): avc: denied { read } for pid=6999 comm="syz.3.405" path="socket:[14657]" dev="sockfs" ino=14657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.816753][ T7002] netlink: 'syz.1.406': attribute type 21 has an invalid length. [ 77.819142][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 77.821981][ T7002] netlink: 'syz.1.406': attribute type 21 has an invalid length. [ 77.869631][ T40] audit: type=1400 audit(1768084058.286:324): avc: denied { listen } for pid=7003 comm="syz.1.407" lport=52267 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.880209][ T40] audit: type=1400 audit(1768084058.286:325): avc: denied { accept } for pid=7003 comm="syz.1.407" lport=52267 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.901151][ T40] audit: type=1400 audit(1768084058.286:326): avc: denied { write } for pid=7003 comm="syz.1.407" lport=52267 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 77.912024][ T40] audit: type=1400 audit(1768084058.286:327): avc: denied { getopt } for pid=7003 comm="syz.1.407" lport=52267 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 77.912629][ T143] delete_channel: no stack [ 77.962806][ T7013] netlink: Unknown conntrack attr (type=2304, max=9) [ 78.254058][ T6482] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.298827][ T7036] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 78.417584][ T6482] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.422097][ T6482] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.423364][ T7040] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 78.425133][ T6482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.443154][ T6482] usb 7-1: config 0 descriptor?? [ 78.659656][ T6482] usbhid 7-1:0.0: can't add hid device: -71 [ 78.665013][ T6482] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 78.671808][ T6482] usb 7-1: USB disconnect, device number 3 [ 78.688277][ T7055] ======================================================= [ 78.688277][ T7055] WARNING: The mand mount option has been deprecated and [ 78.688277][ T7055] and is ignored by this kernel. Remove the mand [ 78.688277][ T7055] option from the mount to silence this warning. [ 78.688277][ T7055] ======================================================= [ 78.962802][ T5962] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.092630][ T6014] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.122653][ T5962] usb 8-1: Using ep0 maxpacket: 16 [ 79.125571][ T5962] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 79.128110][ T5962] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.131728][ T5962] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 229, changing to 11 [ 79.135469][ T5962] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26495, setting to 1024 [ 79.138846][ T5962] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.143732][ T5962] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 79.146685][ T5962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.150514][ T5962] usb 8-1: config 0 descriptor?? [ 79.153779][ T7057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.162806][ T5962] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 79.262622][ T6014] usb 7-1: Using ep0 maxpacket: 32 [ 79.265498][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.268915][ T6014] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 79.271802][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.275753][ T6014] usb 7-1: config 0 descriptor?? [ 79.278955][ T6014] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 79.284421][ T6014] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 79.363471][ T6028] usb 8-1: USB disconnect, device number 2 [ 79.503235][ C3] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 79.834921][ C2] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 79.982761][ T7097] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 81.016303][ T7120] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 81.026196][ T59] usb 7-1: USB disconnect, device number 4 [ 81.041506][ T59] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 81.134921][ T7128] netlink: 'syz.1.460': attribute type 7 has an invalid length. [ 81.138636][ T7128] netlink: 'syz.1.460': attribute type 7 has an invalid length. [ 81.459796][ T7139] syzkaller1: entered promiscuous mode [ 81.461629][ T7139] syzkaller1: entered allmulticast mode [ 81.465651][ T7139] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 81.550241][ T7141] __nla_validate_parse: 4 callbacks suppressed [ 81.550253][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 81.934582][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 81.934593][ T40] audit: type=1400 audit(1768084062.356:343): avc: denied { write } for pid=7148 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.951085][ T40] audit: type=1400 audit(1768084062.376:344): avc: denied { setopt } for pid=7152 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.041623][ T40] audit: type=1400 audit(1768084062.456:345): avc: denied { create } for pid=7159 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.057647][ T40] audit: type=1400 audit(1768084062.476:346): avc: denied { ioctl } for pid=7159 comm="syz.3.473" path="socket:[14745]" dev="sockfs" ino=14745 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.285371][ T7173] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 82.308053][ T7173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.334470][ T7173] bond1: (slave erspan1): making interface the new active one [ 82.338779][ T7173] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 82.403264][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.564076][ T59] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.567571][ T59] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.570957][ T59] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.576372][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.580572][ T7164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.588039][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.686513][ T40] audit: type=1400 audit(1768084063.106:347): avc: denied { override_creds } for pid=7195 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.774326][ T40] audit: type=1400 audit(1768084063.196:348): avc: denied { create } for pid=7197 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.785891][ T40] audit: type=1400 audit(1768084063.206:349): avc: denied { ioctl } for pid=7197 comm="syz.3.486" path="socket:[13070]" dev="sockfs" ino=13070 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.800620][ T59] usb 5-1: USB disconnect, device number 5 [ 82.862020][ T7200] netlink: 'syz.3.487': attribute type 5 has an invalid length. [ 82.892680][ T6028] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.989256][ T7202] ref_ctr_offset mismatch. inode: 0x1d7 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 83.052737][ T6028] usb 6-1: Using ep0 maxpacket: 8 [ 83.057938][ T6028] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 83.061346][ T6028] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.065178][ T6028] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.068219][ T6028] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.071651][ T6028] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.076623][ T6028] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.079571][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.155387][ T40] audit: type=1400 audit(1768084063.576:350): avc: denied { execute } for pid=7207 comm="syz.3.491" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 83.290669][ T6028] usb 6-1: usb_control_msg returned -32 [ 83.293053][ T6028] usbtmc 6-1:16.0: can't read capabilities [ 83.678140][ T40] audit: type=1400 audit(1768084064.096:351): avc: denied { sqpoll } for pid=7225 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.723171][ T7226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.760468][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 83.763504][ T7229] netlink: 'syz.0.499': attribute type 5 has an invalid length. [ 83.765887][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 83.834171][ T40] audit: type=1400 audit(1768084064.256:352): avc: denied { shutdown } for pid=7232 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.022646][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 84.022705][ T5289] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.122720][ T143] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.268433][ T5933] usb 6-1: USB disconnect, device number 4 [ 84.272737][ T143] usb 5-1: Using ep0 maxpacket: 8 [ 84.276335][ T143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.278488][ T143] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.293115][ T143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.298520][ T143] usb 5-1: config 0 descriptor?? [ 84.522492][ T7260] sctp: [Deprecated]: syz.2.513 (pid 7260) Use of int in max_burst socket option deprecated. [ 84.522492][ T7260] Use struct sctp_assoc_value instead [ 84.687345][ T7270] binder: 7265:7270 ioctl 4018620d 0 returned -22 [ 84.690118][ T7270] binder: 7265:7270 ioctl c0306201 0 returned -14 [ 84.714539][ T143] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.717341][ T143] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.719659][ T143] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.721964][ T143] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.725388][ T143] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.731636][ T143] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 84.830507][ T7277] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 84.879371][ T7282] netlink: 'syz.1.522': attribute type 12 has an invalid length. [ 84.946028][ T143] usb 5-1: USB disconnect, device number 6 [ 85.672635][ T6028] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.678559][ T7306] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.531'. [ 85.842632][ T6028] usb 7-1: Using ep0 maxpacket: 8 [ 85.846243][ T6028] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 85.848965][ T6028] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.852102][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.856876][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.860303][ T6028] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.866117][ T6028] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.870331][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.078098][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 86.082693][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 86.106666][ T6028] usb 7-1: usb_control_msg returned -32 [ 86.109152][ T6028] usbtmc 7-1:16.0: can't read capabilities [ 86.426172][ T938] cfg80211: failed to load regulatory.db [ 86.827924][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 86.831934][ T7378] netlink: 'syz.0.560': attribute type 7 has an invalid length. [ 86.836333][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 86.840169][ T7378] netlink: 'syz.0.560': attribute type 7 has an invalid length. [ 87.075549][ T143] usb 7-1: USB disconnect, device number 5 [ 87.644183][ T7386] trusted_key: syz.2.565 sent an empty control message without MSG_MORE. [ 87.922758][ T938] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 88.085761][ T938] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.090491][ T938] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.095057][ T938] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.098951][ T938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.106114][ T7388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.111813][ T938] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.164511][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 88.164523][ T40] audit: type=1400 audit(1768084068.586:373): avc: denied { mount } for pid=7403 comm="syz.3.573" name="/" dev="autofs" ino=15620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 88.175583][ T40] audit: type=1400 audit(1768084068.586:374): avc: denied { ioctl } for pid=7403 comm="syz.3.573" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.188614][ T40] audit: type=1400 audit(1768084068.596:375): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 88.245178][ T40] audit: type=1400 audit(1768084068.666:376): avc: denied { mounton } for pid=7407 comm="syz.3.575" path="/104/file1/bus" dev="autofs" ino=15626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 88.245276][ T7408] overlay: filesystem on ./bus not supported [ 88.284711][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.289230][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.315345][ T938] usb 7-1: USB disconnect, device number 6 [ 88.375537][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.379270][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.466352][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.472685][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.503809][ T40] audit: type=1400 audit(1768084068.926:377): avc: denied { execute } for pid=7414 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.512122][ T40] audit: type=1400 audit(1768084068.926:378): avc: denied { execute_no_trans } for pid=7414 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.557617][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.560763][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.563887][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.568101][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.568857][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.570859][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.574591][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.633153][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 88.645117][ T7420] bridge_slave_1: left allmulticast mode [ 88.647471][ T7420] bridge_slave_1: left promiscuous mode [ 88.650609][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.657964][ T40] audit: type=1400 audit(1768084069.076:379): avc: denied { remount } for pid=7422 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.673679][ T7420] bridge_slave_0: left allmulticast mode [ 88.676097][ T7420] bridge_slave_0: left promiscuous mode [ 88.680701][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.867673][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 88.939575][ T1144] bridge_slave_1: left allmulticast mode [ 88.942031][ T1144] bridge_slave_1: left promiscuous mode [ 88.946607][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.954071][ T1144] bridge_slave_0: left allmulticast mode [ 88.956467][ T1144] bridge_slave_0: left promiscuous mode [ 88.959004][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.089034][ T7446] io-wq is not configured for unbound workers [ 89.119988][ T40] audit: type=1400 audit(1768084069.536:380): avc: denied { create } for pid=7447 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.146268][ T40] audit: type=1400 audit(1768084069.556:381): avc: denied { create } for pid=7452 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.160708][ T40] audit: type=1400 audit(1768084069.556:382): avc: denied { write } for pid=7452 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.488966][ T1144] smc: removing net device bond0 with user defined pnetid SYZ2 [ 89.492503][ T1144] bond0 (unregistering): Released all slaves [ 89.551663][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 89.654509][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.656848][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.659111][ T7417] bridge_slave_0: entered allmulticast mode [ 89.662080][ T7417] bridge_slave_0: entered promiscuous mode [ 89.666120][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.668374][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.670677][ T7417] bridge_slave_1: entered allmulticast mode [ 89.673363][ T7417] bridge_slave_1: entered promiscuous mode [ 89.705112][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 89.712057][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.756454][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.783553][ T7417] team0: Port device team_slave_0 added [ 89.786703][ T7417] team0: Port device team_slave_1 added [ 89.812469][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.815762][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.827425][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.833540][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.836434][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.850319][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.925130][ T7417] hsr_slave_0: entered promiscuous mode [ 89.927335][ T7417] hsr_slave_1: entered promiscuous mode [ 89.929586][ T7417] debugfs: 'hsr0' already exists in 'hsr' [ 89.931501][ T7417] Cannot create hsr debugfs directory [ 89.979960][ T1144] hsr_slave_0: left promiscuous mode [ 89.983356][ T1144] hsr_slave_1: left promiscuous mode [ 89.985663][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.988101][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.991938][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.995392][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.014620][ T1144] veth1_macvtap: left promiscuous mode [ 90.017317][ T1144] veth0_macvtap: left promiscuous mode [ 90.019324][ T1144] veth1_vlan: left promiscuous mode [ 90.021130][ T1144] veth0_vlan: left promiscuous mode [ 90.120251][ T7498] kvm: user requested TSC rate below hardware speed [ 90.133403][ T7498] kvm: user requested TSC rate below hardware speed [ 90.435865][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 90.461849][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 90.497782][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 90.585334][ T5289] Bluetooth: hci0: command tx timeout [ 90.755714][ T7518] bridge_slave_1: left allmulticast mode [ 90.758134][ T7518] bridge_slave_1: left promiscuous mode [ 90.760672][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.769072][ T7518] bridge_slave_0: left allmulticast mode [ 90.770953][ T7518] bridge_slave_0: left promiscuous mode [ 90.773002][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.946910][ T7417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.953585][ T7417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.965525][ T7417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.970903][ T7417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.057389][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.077730][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.087040][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089524][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.108170][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.110660][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.281384][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.448338][ T7417] veth0_vlan: entered promiscuous mode [ 91.457529][ T7417] veth1_vlan: entered promiscuous mode [ 91.482064][ T7417] veth0_macvtap: entered promiscuous mode [ 91.488346][ T7417] veth1_macvtap: entered promiscuous mode [ 91.497941][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.504877][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.511386][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.514783][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523227][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.526932][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.580483][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.585663][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.598719][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.601551][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.725377][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 91.728206][ T7574] bridge_slave_1: left allmulticast mode [ 91.730584][ T7574] bridge_slave_1: left promiscuous mode [ 91.732723][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.738644][ T7574] bridge_slave_0: left allmulticast mode [ 91.740564][ T7574] bridge_slave_0: left promiscuous mode [ 91.743207][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.987842][ T7586] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.628'. [ 92.571533][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 92.662708][ T5289] Bluetooth: hci0: command tx timeout [ 92.872847][ T7623] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.643'. [ 92.931157][ T7628] bond1: entered promiscuous mode [ 92.933978][ T7628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.949877][ T7628] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.957987][ T7628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.962749][ T7628] lo: entered promiscuous mode [ 92.964806][ T7628] bond1: (slave lo): Enslaving as a backup interface with an up link [ 92.970309][ T7628] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 93.063423][ T1150] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.068555][ T1150] bond1: (slave lo): link status up again after 0 ms [ 93.071541][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 93.173798][ T1144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.180733][ T7643] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 93.185648][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 93.195641][ T1150] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.199391][ T7643] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 93.202518][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 93.206701][ T1150] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.210825][ T1150] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.220927][ T1150] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.233518][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 93.342713][ T60] bond1: (slave lo): failed to get link speed/duplex [ 93.457673][ T1144] bond1: (slave lo): failed to get link speed/duplex [ 93.572677][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 93.692660][ T13] bond1: (slave lo): failed to get link speed/duplex [ 94.070854][ T7667] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1722710786 (220506980608 ns) > initial count (17639943808 ns). Using initial count to start timer. [ 94.090035][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 94.093344][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 94.201173][ T7679] Bluetooth: MGMT ver 1.23 [ 94.576404][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 94.576413][ T40] audit: type=1400 audit(1768084074.996:388): avc: denied { shutdown } for pid=7694 comm="syz.0.674" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.640671][ T40] audit: type=1400 audit(1768084075.056:389): avc: denied { read write } for pid=7701 comm="syz.0.677" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.653247][ T40] audit: type=1400 audit(1768084075.056:390): avc: denied { open } for pid=7701 comm="syz.0.677" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.661879][ T40] audit: type=1400 audit(1768084075.066:391): avc: denied { ioctl } for pid=7701 comm="syz.0.677" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.742809][ T5289] Bluetooth: hci0: command tx timeout [ 95.609064][ T7739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7739 comm=syz.0.693 [ 95.722309][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880551f8c00: rx timeout, send abort [ 95.727551][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880551fa400: rx timeout, send abort [ 95.731341][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880551f8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.738249][ T40] audit: type=1400 audit(1768084076.156:392): avc: denied { read } for pid=5320 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.738822][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880551fa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.749522][ T40] audit: type=1400 audit(1768084076.166:393): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.761177][ T40] audit: type=1400 audit(1768084076.166:394): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.771564][ T40] audit: type=1400 audit(1768084076.166:395): avc: denied { add_name } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.780460][ T40] audit: type=1400 audit(1768084076.166:396): avc: denied { create } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.789245][ T40] audit: type=1400 audit(1768084076.166:397): avc: denied { append open } for pid=5320 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.088584][ T7769] syz_tun: entered allmulticast mode [ 96.091523][ T7768] syz_tun: left allmulticast mode [ 96.289210][ T7787] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 96.824178][ T5289] Bluetooth: hci0: command tx timeout [ 96.846998][ T59] IPVS: starting estimator thread 0... [ 96.929153][ T59] IPVS: starting estimator thread 0... [ 96.952907][ T7819] IPVS: using max 45 ests per chain, 108000 per kthread [ 97.013813][ T7829] IPVS: using max 24 ests per chain, 57600 per kthread [ 97.166672][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 97.170334][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 97.182434][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 97.185408][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 97.415983][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 97.420165][ T7871] netem: unknown loss type 13 [ 97.422357][ T7871] netem: change failed [ 97.667801][ T7884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.693877][ T7884] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 97.697626][ T7884] overlayfs: failed to look up (tracing) for ino (-66) [ 97.872872][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 98.012798][ T1144] net_ratelimit: 38 callbacks suppressed [ 98.012816][ T1144] bond1: (slave lo): failed to get link speed/duplex [ 98.034343][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.038595][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.044856][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.048802][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.123049][ T60] bond1: (slave lo): failed to get link speed/duplex [ 98.242705][ T46] bond1: (slave lo): failed to get link speed/duplex [ 98.272983][ T10] usb 8-1: usb_control_msg returned -32 [ 98.275876][ T10] usbtmc 8-1:16.0: can't read capabilities [ 98.358681][ T7907] ip6gre1: entered promiscuous mode [ 98.362707][ T7907] ip6gre1: entered allmulticast mode [ 98.373663][ T1173] bond1: (slave lo): failed to get link speed/duplex [ 98.483311][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 98.592757][ T60] bond1: (slave lo): failed to get link speed/duplex [ 98.649364][ T7926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 98.651815][ T7926] syzkaller1: Linktype set failed because interface is up [ 98.712817][ T60] bond1: (slave lo): failed to get link speed/duplex [ 98.822923][ T60] bond1: (slave lo): failed to get link speed/duplex [ 98.830525][ T5962] usb 8-1: USB disconnect, device number 3 [ 98.932829][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 98.933769][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 99.042811][ T1173] bond1: (slave lo): failed to get link speed/duplex [ 99.318088][ T7967] 9pnet_virtio: no channels available for device syz [ 99.489889][ T7983] macvlan0: entered allmulticast mode [ 99.492513][ T7983] veth1_vlan: entered allmulticast mode [ 99.500614][ T7983] pim6reg: entered allmulticast mode [ 99.505454][ T7983] veth1_vlan: left allmulticast mode [ 99.521609][ T7983] macvlan0 (unregistering): left allmulticast mode [ 99.577316][ T7990] input: syz0 as /devices/virtual/input/input13 [ 99.625331][ T7998] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.799'. [ 99.846672][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 99.849454][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 99.896813][ T6482] libceph: connect (1)[b::]:6789 error -101 [ 99.899690][ T6482] libceph: mon0 (1)[b::]:6789 connect error [ 100.114826][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 100.117567][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 100.173172][ T6482] libceph: connect (1)[b::]:6789 error -101 [ 100.175775][ T6482] libceph: mon0 (1)[b::]:6789 connect error [ 100.623174][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 100.625806][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 100.667716][ T8013] ceph: No mds server is up or the cluster is laggy [ 100.667724][ T8018] ceph: No mds server is up or the cluster is laggy [ 100.688076][ T6482] libceph: connect (1)[b::]:6789 error -101 [ 100.690666][ T6482] libceph: mon0 (1)[b::]:6789 connect error [ 101.073325][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 101.073341][ T40] audit: type=1400 audit(1768084081.486:409): avc: denied { name_bind 0x1000000 } for pid=8050 comm="syz.4.821" path="socket:[18812]" dev="sockfs" ino=18812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.232821][ T6482] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.382933][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 101.386168][ T6482] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 101.390562][ T6482] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 101.395124][ T6482] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.399760][ T6482] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 101.406589][ T6482] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.410222][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.413814][ T6482] usb 5-1: Product: syz [ 101.415645][ T6482] usb 5-1: Manufacturer: syz [ 101.417561][ T6482] usb 5-1: SerialNumber: syz [ 101.434609][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 101.438797][ T6482] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input14 [ 101.653416][ T6482] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 101.656837][ T6482] (id 0x00) [ 101.722711][ T6482] rc_core: IR keymap rc-imon-pad not found [ 101.728842][ T6482] Registered IR keymap rc-empty [ 101.731300][ T6482] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 101.735775][ T6482] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.863696][ T6482] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 101.874028][ T6482] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input15 [ 101.883996][ T6482] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:7> initialized [ 101.999621][ T40] audit: type=1400 audit(1768084082.416:410): avc: denied { getopt } for pid=8107 comm="syz.4.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.035964][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'. [ 102.086604][ T8049] imon:send_packet: packet tx failed (-71) [ 102.086682][ T5962] usb 5-1: USB disconnect, device number 7 [ 102.102839][ T8049] imon:vfd_write: send packet #0 failed [ 102.634860][ C3] Unknown status report in ack skb [ 102.755875][ T8167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.863'. [ 103.003365][ T8188] tipc: Started in network mode [ 103.005528][ T8188] tipc: Node identity 860991b446d9, cluster identity 4711 [ 103.008900][ T8188] tipc: Enabled bearer , priority 0 [ 103.017802][ T8188] tipc: Disabling bearer [ 103.042670][ T6454] net_ratelimit: 34 callbacks suppressed [ 103.042684][ T6454] bond1: (slave lo): failed to get link speed/duplex [ 103.152708][ T8141] bond1: (slave lo): failed to get link speed/duplex [ 103.231403][ T40] audit: type=1400 audit(1768084083.646:411): avc: denied { ioctl } for pid=8206 comm="syz.3.877" path="socket:[19997]" dev="sockfs" ino=19997 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.231446][ T8207] : renamed from bond0 (while UP) [ 103.263472][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 103.372774][ T13] bond1: (slave lo): failed to get link speed/duplex [ 103.480508][ T40] audit: type=1400 audit(1768084083.896:412): avc: denied { read write } for pid=8218 comm="syz.3.882" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.491170][ T1216] bond1: (slave lo): failed to get link speed/duplex [ 103.502696][ T40] audit: type=1400 audit(1768084083.896:413): avc: denied { open } for pid=8218 comm="syz.3.882" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.603483][ T1216] bond1: (slave lo): failed to get link speed/duplex [ 103.712757][ T12] bond1: (slave lo): failed to get link speed/duplex [ 103.794917][ T8240] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 103.795320][ T8242] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.889'. [ 103.805183][ T8240] veth0_vlan: left promiscuous mode [ 103.807896][ T8240] veth0_vlan: entered promiscuous mode [ 103.812135][ T8240] team0: Device veth0_vlan failed to register rx_handler [ 103.862697][ T46] bond1: (slave lo): failed to get link speed/duplex [ 103.972772][ T6454] bond1: (slave lo): failed to get link speed/duplex [ 103.989717][ T8246] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.894'. [ 104.028409][ T8252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.031737][ T8252] IPv6: NLM_F_CREATE should be set when creating new route [ 104.057795][ T8255] input: syz0 as /devices/virtual/input/input16 [ 104.083235][ T46] bond1: (slave lo): failed to get link speed/duplex [ 104.155052][ T8263] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 104.202228][ T40] audit: type=1400 audit(1768084084.616:414): avc: denied { accept } for pid=8267 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.362313][ T40] audit: type=1400 audit(1768084084.776:415): avc: denied { create } for pid=8281 comm="syz.0.908" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.372976][ T40] audit: type=1400 audit(1768084084.776:416): avc: denied { write } for pid=8281 comm="syz.0.908" name="file0" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.390448][ T40] audit: type=1400 audit(1768084084.776:417): avc: denied { open } for pid=8281 comm="syz.0.908" path="/247/file0" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.406759][ T40] audit: type=1400 audit(1768084084.776:418): avc: denied { ioctl } for pid=8281 comm="syz.0.908" path="/247/file0" dev="tmpfs" ino=1296 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.353078][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 105.522720][ T59] usb 8-1: Using ep0 maxpacket: 16 [ 105.526496][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.529911][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.533963][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.537853][ T59] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.540654][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.545730][ T59] usb 8-1: config 0 descriptor?? [ 105.585018][ T8342] raw_sendmsg: syz.4.934 forgot to set AF_INET. Fix it! [ 105.642379][ T8344] input: syz1 as /devices/virtual/input/input17 [ 105.704944][ T8346] netlink: 'syz.4.936': attribute type 9 has an invalid length. [ 105.708285][ T8346] netlink: 'syz.4.936': attribute type 11 has an invalid length. [ 105.711561][ T8346] netlink: 'syz.4.936': attribute type 12 has an invalid length. [ 105.716675][ T8346] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.936'. [ 105.720744][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 105.962001][ T59] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 106.007336][ T59] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 106.016348][ T59] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 106.157063][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 106.157081][ T40] audit: type=1400 audit(1768084086.576:426): avc: denied { read write } for pid=8325 comm="syz.3.927" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.157414][ T8328] random: crng reseeded on system resumption [ 106.159570][ T40] audit: type=1400 audit(1768084086.576:427): avc: denied { ioctl open } for pid=8325 comm="syz.3.927" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.187916][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 106.187933][ T5933] usb 8-1: USB disconnect, device number 4 [ 106.191614][ T5933] ------------[ cut here ]------------ [ 106.196257][ T5933] workqueue: work disable count underflowed [ 106.198363][ T5933] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#3: kworker/3:3/5933 [ 106.199406][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.201805][ T5933] Modules linked in: [ 106.201833][ T5933] CPU: 3 UID: 0 PID: 5933 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.212510][ T5933] Tainted: [L]=SOFTLOCKUP [ 106.213536][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.214375][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.218111][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.221861][ T5933] Workqueue: usb_hub_wq hub_event [ 106.221887][ T5933] RIP: 0010:enable_work+0x2ca/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.221904][ T5933] Code: ff e8 5a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 4c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 3d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 74 e7 a3 00 e9 f7 fd ff [ 106.221916][ T5933] RSP: 0018:ffffc90003f6f348 EFLAGS: 00010093 [ 106.240049][ T5933] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 106.243374][ T5933] RDX: ffff888029a78000 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 106.246650][ T5933] RBP: ffff8880555b2738 R08: 0000000000000005 R09: 0000000000000000 [ 106.249962][ T5933] R10: 0000000000000000 R11: ffff888029a78b30 R12: 1ffff920007ede6a [ 106.253276][ T5933] R13: ffffffff8fc4eb3f R14: ffff8880555b2698 R15: ffff8880555b2730 [ 106.256576][ T5933] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 106.260111][ T5933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.262274][ T5933] CR2: 000000110c3fc7d2 CR3: 0000000061525000 CR4: 0000000000352ef0 [ 106.264794][ T5933] Call Trace: [ 106.266011][ T5933] [ 106.267017][ T5933] ? __pfx_enable_work+0x10/0x10 [ 106.268594][ T5933] cancel_delayed_work_sync+0x96/0xf0 [ 106.270347][ T5933] thermal_zone_device_unregister+0x28e/0x4d0 [ 106.272460][ T5933] ? __pfx_shield_remove+0x10/0x10 [ 106.274138][ T5933] power_supply_unregister+0x10a/0x150 [ 106.276343][ T5933] shield_remove+0x75/0x130 [ 106.278146][ T5933] ? __pfx_shield_remove+0x10/0x10 [ 106.280216][ T5933] hid_device_remove+0xd1/0x260 [ 106.282082][ T5933] ? __pfx_hid_device_remove+0x10/0x10 [ 106.284234][ T5933] device_remove+0xcb/0x170 [ 106.285819][ T5933] device_release_driver_internal+0x44b/0x620 [ 106.287711][ T5933] bus_remove_device+0x22f/0x450 [ 106.289330][ T5933] device_del+0x396/0x9f0 [ 106.290699][ T5933] ? __pfx_device_del+0x10/0x10 [ 106.292308][ T5933] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.294062][ T5933] hid_destroy_device+0x19c/0x240 [ 106.295676][ T5933] usbhid_disconnect+0xa0/0xe0 [ 106.297283][ T5933] usb_unbind_interface+0x1dd/0x9e0 [ 106.298952][ T5933] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 106.300746][ T5933] ? __pfx_usb_unbind_interface+0x10/0x10 [ 106.302557][ T5933] device_remove+0x125/0x170 [ 106.304136][ T5933] device_release_driver_internal+0x44b/0x620 [ 106.306559][ T5933] bus_remove_device+0x22f/0x450 [ 106.308122][ T5933] device_del+0x396/0x9f0 [ 106.309501][ T5933] ? __pfx_device_del+0x10/0x10 [ 106.310993][ T5933] ? kobject_put+0x218/0x6f0 [ 106.312463][ T5933] usb_disable_device+0x355/0x820 [ 106.314120][ T5933] usb_disconnect+0x2e1/0x9e0 [ 106.315601][ T5933] hub_event+0x1d84/0x52f0 [ 106.316995][ T5933] ? __lock_acquire+0x436/0x2890 [ 106.318552][ T5933] ? do_raw_spin_unlock+0x172/0x230 [ 106.320206][ T5933] ? __pfx_hub_event+0x10/0x10 [ 106.321727][ T5933] ? debug_print_object+0x1e0/0x2a0 [ 106.323381][ T5933] ? finish_task_switch.isra.0+0x202/0xbd0 [ 106.325316][ T5933] ? rcu_is_watching+0x12/0xc0 [ 106.326859][ T5933] process_one_work+0x9ba/0x1b20 [ 106.328385][ T5933] ? __pfx_process_one_work+0x10/0x10 [ 106.330118][ T5933] ? assign_work+0x1a0/0x250 [ 106.331587][ T5933] worker_thread+0x6c8/0xf10 [ 106.333071][ T5933] ? __kthread_parkme+0x19e/0x250 [ 106.334693][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 106.336388][ T5933] kthread+0x3c5/0x780 [ 106.337697][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.339210][ T5933] ? rcu_is_watching+0x12/0xc0 [ 106.340750][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.342173][ T5933] ret_from_fork+0x983/0xb10 [ 106.343651][ T5933] ? __pfx_ret_from_fork+0x10/0x10 [ 106.345288][ T5933] ? __switch_to+0x7af/0x10d0 [ 106.346893][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.348373][ T5933] ret_from_fork_asm+0x1a/0x30 [ 106.350153][ T5933] [ 106.351178][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.353549][ T5933] CPU: 3 UID: 0 PID: 5933 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.357078][ T5933] Tainted: [L]=SOFTLOCKUP [ 106.358607][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.362070][ T5933] Workqueue: usb_hub_wq hub_event [ 106.363914][ T5933] Call Trace: [ 106.365356][ T5933] [ 106.366604][ T5933] dump_stack_lvl+0x3d/0x1f0 [ 106.368528][ T5933] vpanic+0x640/0x6f0 [ 106.370207][ T5933] ? enable_work+0x2ca/0x310 [ 106.372132][ T5933] panic+0xca/0xd0 [ 106.373733][ T5933] ? __pfx_panic+0x10/0x10 [ 106.375623][ T5933] ? check_panic_on_warn+0x1f/0xb0 [ 106.377632][ T5933] check_panic_on_warn+0xab/0xb0 [ 106.379774][ T5933] __warn+0x108/0x3c0 [ 106.381308][ T5933] __report_bug+0x2a0/0x520 [ 106.383172][ T5933] ? enable_work+0x2ca/0x310 [ 106.385036][ T5933] ? __pfx___report_bug+0x10/0x10 [ 106.387092][ T5933] ? __wait_for_common+0x1e0/0x4e0 [ 106.389125][ T5933] ? enable_work+0x2c3/0x310 [ 106.390888][ T5933] ? enable_work+0xf3/0x310 [ 106.392332][ T5933] ? find_held_lock+0x2b/0x80 [ 106.393838][ T5933] report_bug_entry+0xe1/0x290 [ 106.395392][ T5933] ? enable_work+0x2ca/0x310 [ 106.396877][ T5933] handle_bug+0x18a/0x260 [ 106.398345][ T5933] exc_invalid_op+0x17/0x50 [ 106.399978][ T5933] asm_exc_invalid_op+0x1a/0x20 [ 106.402009][ T5933] RIP: 0010:enable_work+0x2ca/0x310 [ 106.404199][ T5933] Code: ff e8 5a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 4c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 3d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 74 e7 a3 00 e9 f7 fd ff [ 106.412139][ T5933] RSP: 0018:ffffc90003f6f348 EFLAGS: 00010093 [ 106.414713][ T5933] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184d6e3 [ 106.417491][ T5933] RDX: ffff888029a78000 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 106.419966][ T5933] RBP: ffff8880555b2738 R08: 0000000000000005 R09: 0000000000000000 [ 106.422531][ T5933] R10: 0000000000000000 R11: ffff888029a78b30 R12: 1ffff920007ede6a [ 106.425004][ T5933] R13: ffffffff8fc4eb3f R14: ffff8880555b2698 R15: ffff8880555b2730 [ 106.427437][ T5933] ? enable_work+0xf3/0x310 [ 106.428870][ T5933] ? enable_work+0x2c3/0x310 [ 106.430316][ T5933] ? enable_work+0x2c3/0x310 [ 106.431922][ T5933] ? __pfx_enable_work+0x10/0x10 [ 106.434069][ T5933] cancel_delayed_work_sync+0x96/0xf0 [ 106.436235][ T5933] thermal_zone_device_unregister+0x28e/0x4d0 [ 106.438630][ T5933] ? __pfx_shield_remove+0x10/0x10 [ 106.440256][ T5933] power_supply_unregister+0x10a/0x150 [ 106.441991][ T5933] shield_remove+0x75/0x130 [ 106.443633][ T5933] ? __pfx_shield_remove+0x10/0x10 [ 106.445466][ T5933] hid_device_remove+0xd1/0x260 [ 106.447017][ T5933] ? __pfx_hid_device_remove+0x10/0x10 [ 106.448758][ T5933] device_remove+0xcb/0x170 [ 106.450225][ T5933] device_release_driver_internal+0x44b/0x620 [ 106.452132][ T5933] bus_remove_device+0x22f/0x450 [ 106.453871][ T5933] device_del+0x396/0x9f0 [ 106.455297][ T5933] ? __pfx_device_del+0x10/0x10 [ 106.456817][ T5933] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.458486][ T5933] hid_destroy_device+0x19c/0x240 [ 106.460096][ T5933] usbhid_disconnect+0xa0/0xe0 [ 106.461610][ T5933] usb_unbind_interface+0x1dd/0x9e0 [ 106.463226][ T5933] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 106.465445][ T5933] ? __pfx_usb_unbind_interface+0x10/0x10 [ 106.467772][ T5933] device_remove+0x125/0x170 [ 106.469668][ T5933] device_release_driver_internal+0x44b/0x620 [ 106.471721][ T5933] bus_remove_device+0x22f/0x450 [ 106.473278][ T5933] device_del+0x396/0x9f0 [ 106.474635][ T5933] ? __pfx_device_del+0x10/0x10 [ 106.476401][ T5933] ? kobject_put+0x218/0x6f0 [ 106.477924][ T5933] usb_disable_device+0x355/0x820 [ 106.479680][ T5933] usb_disconnect+0x2e1/0x9e0 [ 106.481168][ T5933] hub_event+0x1d84/0x52f0 [ 106.482543][ T5933] ? __lock_acquire+0x436/0x2890 [ 106.484079][ T5933] ? do_raw_spin_unlock+0x172/0x230 [ 106.485760][ T5933] ? __pfx_hub_event+0x10/0x10 [ 106.487687][ T5933] ? debug_print_object+0x1e0/0x2a0 [ 106.489366][ T5933] ? finish_task_switch.isra.0+0x202/0xbd0 [ 106.491163][ T5933] ? rcu_is_watching+0x12/0xc0 [ 106.492694][ T5933] process_one_work+0x9ba/0x1b20 [ 106.494308][ T5933] ? __pfx_process_one_work+0x10/0x10 [ 106.496023][ T5933] ? assign_work+0x1a0/0x250 [ 106.497541][ T5933] worker_thread+0x6c8/0xf10 [ 106.499037][ T5933] ? __kthread_parkme+0x19e/0x250 [ 106.500644][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 106.502269][ T5933] kthread+0x3c5/0x780 [ 106.503578][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.505063][ T5933] ? rcu_is_watching+0x12/0xc0 [ 106.507055][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.509084][ T5933] ret_from_fork+0x983/0xb10 [ 106.510741][ T5933] ? __pfx_ret_from_fork+0x10/0x10 [ 106.512390][ T5933] ? __switch_to+0x7af/0x10d0 [ 106.513927][ T5933] ? __pfx_kthread+0x10/0x10 [ 106.515393][ T5933] ret_from_fork_asm+0x1a/0x30 [ 106.516930][ T5933] [ 106.518628][ T5933] Kernel Offset: disabled [ 106.520092][ T5933] Rebooting in 86400 seconds..