last executing test programs: 3.9413493s ago: executing program 0 (id=71): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) 3.757952127s ago: executing program 0 (id=75): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0x0, 0x0) 3.738360412s ago: executing program 2 (id=76): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) 3.679794443s ago: executing program 2 (id=77): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x318, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x2, "00cd"}, @local=@item_012={0x1, 0x2, 0x5, "04"}, @local=@item_012={0x1, 0x2, 0x2, "d0"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @local=@item_4={0x3, 0x2, 0x2, "2d9ff802"}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 3.334962537s ago: executing program 1 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000440}, 0x0) 3.289602367s ago: executing program 1 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x2a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.294089616s ago: executing program 1 (id=83): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.218333044s ago: executing program 0 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000000000000280012800b00010062726964676500001800028005001900020000000c002300070000000000001a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x20000040}, 0x20008000) 2.213814159s ago: executing program 3 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 2.069763103s ago: executing program 3 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.933826277s ago: executing program 3 (id=90): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001540), 0x189100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001580)=0x11) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, 0x0) 1.922598691s ago: executing program 0 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x400000, 0x1a, "0200d8ffffffffffffffe910000000040100"}) 1.908996026s ago: executing program 2 (id=92): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) 1.867275139s ago: executing program 1 (id=93): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1b0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.69739031s ago: executing program 0 (id=95): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0x35889000) 1.694212552s ago: executing program 1 (id=96): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') exit(0x3) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1, 0x5, 0x0) 1.553050358s ago: executing program 0 (id=97): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x68, 0xba, 0x20, 0x2040, 0xb210, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x9, 0x20, 0xd2, "", [{{0x9, 0x4, 0xe0, 0x1, 0x0, 0x37, 0xcc, 0xf2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000021c0)={0x14, 0x0, &(0x7f0000002180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000005080)={0x44, &(0x7f0000004d80)={0x0, 0xf, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.47902974s ago: executing program 3 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x45, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.46119817s ago: executing program 2 (id=100): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x380) 1.31563956s ago: executing program 4 (id=102): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26}, 0x28) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) 1.224153725s ago: executing program 2 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.204705459s ago: executing program 4 (id=104): syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) 984.295385ms ago: executing program 4 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 760.045893ms ago: executing program 4 (id=106): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x5521, 0x0) 664.026304ms ago: executing program 1 (id=107): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0x0) 482.305673ms ago: executing program 4 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b8f, 0x10c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 292.438864ms ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 139.2999ms ago: executing program 4 (id=110): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x80000000, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0xd0258000) 26.197988ms ago: executing program 3 (id=111): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="7efb88692638abcc4b1dacc55d180a532f5373e91c41190020e87f75a7ad6e7d3145ec8a4344b2132d3b5f1eef"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001414"], 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) 0s ago: executing program 2 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 65.794769][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 65.794787][ T31] audit: type=1400 audit(1789455431.063:129): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.796621][ T31] audit: type=1400 audit(1789455431.063:130): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.798719][ T5587] cgroup: Unknown subsys name 'net' [ 65.800093][ T31] audit: type=1400 audit(1789455431.063:131): avc: denied { unmount } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.964917][ T5587] cgroup: Unknown subsys name 'cpuset' [ 65.967276][ T5587] cgroup: Unknown subsys name 'rlimit' [ 66.053882][ T31] audit: type=1400 audit(1789455431.323:132): avc: denied { setattr } for pid=5587 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.054380][ T31] audit: type=1400 audit(1789455431.323:133): avc: denied { create } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.054602][ T31] audit: type=1400 audit(1789455431.323:134): avc: denied { write } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.054852][ T31] audit: type=1400 audit(1789455431.323:135): avc: denied { read } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.102058][ T31] audit: type=1400 audit(1789455431.363:136): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.102155][ T31] audit: type=1400 audit(1789455431.363:137): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.183592][ T5591] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.185243][ T31] audit: type=1400 audit(1789455431.453:138): avc: denied { relabelto } for pid=5591 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.156602][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.144984][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.151225][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.152019][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.152308][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.160931][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.161073][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.169669][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.170452][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.177925][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.179532][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.188126][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.194714][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.208990][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.211362][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.214026][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.257292][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.272622][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.287087][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.298855][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.299352][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.299877][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.301980][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.316829][ T4918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.338430][ T4918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.339860][ T4918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.715371][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.715489][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.715591][ T5609] bridge_slave_0: entered allmulticast mode [ 70.717442][ T5609] bridge_slave_0: entered promiscuous mode [ 70.773984][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.774071][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.774150][ T5609] bridge_slave_1: entered allmulticast mode [ 70.775041][ T5609] bridge_slave_1: entered promiscuous mode [ 70.803648][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.844446][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.886801][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.886878][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.887153][ T5605] bridge_slave_0: entered allmulticast mode [ 70.888439][ T5605] bridge_slave_0: entered promiscuous mode [ 70.932354][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.932469][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.933358][ T5605] bridge_slave_1: entered allmulticast mode [ 70.934274][ T5605] bridge_slave_1: entered promiscuous mode [ 70.960314][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.960436][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.961295][ T5598] bridge_slave_0: entered allmulticast mode [ 70.963428][ T5598] bridge_slave_0: entered promiscuous mode [ 70.994250][ T5609] team0: Port device team_slave_0 added [ 71.001922][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.002054][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.002470][ T5598] bridge_slave_1: entered allmulticast mode [ 71.004008][ T5598] bridge_slave_1: entered promiscuous mode [ 71.011670][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.011755][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.011849][ T5606] bridge_slave_0: entered allmulticast mode [ 71.013698][ T5606] bridge_slave_0: entered promiscuous mode [ 71.020126][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.024311][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.026304][ T5609] team0: Port device team_slave_1 added [ 71.070619][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.070750][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.070843][ T5606] bridge_slave_1: entered allmulticast mode [ 71.073784][ T5606] bridge_slave_1: entered promiscuous mode [ 71.113598][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.113781][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.113912][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.114014][ T5597] bridge_slave_0: entered allmulticast mode [ 71.115100][ T5597] bridge_slave_0: entered promiscuous mode [ 71.150003][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.150023][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.150047][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.158253][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.188575][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.188662][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.188764][ T5597] bridge_slave_1: entered allmulticast mode [ 71.191763][ T5597] bridge_slave_1: entered promiscuous mode [ 71.205473][ T4918] Bluetooth: hci1: command tx timeout [ 71.206451][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206510][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.217435][ T5605] team0: Port device team_slave_0 added [ 71.220296][ T5605] team0: Port device team_slave_1 added [ 71.220842][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.220853][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.220874][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.261930][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.282403][ T4918] Bluetooth: hci2: command tx timeout [ 71.286031][ T5598] team0: Port device team_slave_0 added [ 71.289701][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.293276][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.299334][ T4918] Bluetooth: hci0: command tx timeout [ 71.320671][ T5598] team0: Port device team_slave_1 added [ 71.347777][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.360311][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.360327][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.360348][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.362548][ T4918] Bluetooth: hci4: command tx timeout [ 71.368556][ T4918] Bluetooth: hci3: command tx timeout [ 71.424262][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.424290][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.424311][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.426401][ T5606] team0: Port device team_slave_0 added [ 71.487422][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.487434][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.487447][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.488576][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.488584][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.488597][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.490082][ T5597] team0: Port device team_slave_0 added [ 71.508692][ T5606] team0: Port device team_slave_1 added [ 71.543420][ T5609] hsr_slave_0: entered promiscuous mode [ 71.544473][ T5609] hsr_slave_1: entered promiscuous mode [ 71.548008][ T5597] team0: Port device team_slave_1 added [ 71.607621][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.607637][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.607654][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.655971][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.655984][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.655997][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.677626][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.677642][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.677663][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.702028][ T5598] hsr_slave_0: entered promiscuous mode [ 71.703511][ T5598] hsr_slave_1: entered promiscuous mode [ 71.704350][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 71.704450][ T5598] Cannot create hsr debugfs directory [ 71.705657][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.705676][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.705698][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.718881][ T5605] hsr_slave_0: entered promiscuous mode [ 71.721235][ T5605] hsr_slave_1: entered promiscuous mode [ 71.721854][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 71.721870][ T5605] Cannot create hsr debugfs directory [ 71.872511][ T5597] hsr_slave_0: entered promiscuous mode [ 71.873038][ T5597] hsr_slave_1: entered promiscuous mode [ 71.873369][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 71.873386][ T5597] Cannot create hsr debugfs directory [ 71.950320][ T5606] hsr_slave_0: entered promiscuous mode [ 71.950897][ T5606] hsr_slave_1: entered promiscuous mode [ 71.951242][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 71.951258][ T5606] Cannot create hsr debugfs directory [ 72.263363][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.267918][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.268782][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.274076][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.281554][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.291329][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.292589][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.298190][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.388687][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.391855][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.398713][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.407025][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.410298][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.419494][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.434712][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.444383][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.513154][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.517424][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.528981][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.540364][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.541145][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.545788][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.561784][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.572992][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.595418][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.671365][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.680795][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.688918][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.709112][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.720145][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.726533][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.726749][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.746695][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.749788][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.770172][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.776560][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.781067][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.781153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.842963][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.881302][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.881530][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.891179][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.891882][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.898767][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.914810][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.923785][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.935030][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.938385][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.949671][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.956890][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.956987][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.989216][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.989270][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.059524][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.088451][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.088534][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.117261][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.117344][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.124422][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.278029][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.285453][ T4918] Bluetooth: hci1: command tx timeout [ 73.330087][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.364456][ T4918] Bluetooth: hci0: command tx timeout [ 73.364466][ T5599] Bluetooth: hci2: command tx timeout [ 73.389970][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 73.389986][ T31] audit: type=1400 audit(1789455438.653:152): avc: denied { sys_module } for pid=5605 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.442517][ T5599] Bluetooth: hci3: command tx timeout [ 73.442548][ T5599] Bluetooth: hci4: command tx timeout [ 73.471987][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.499793][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.500686][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.506747][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.530177][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.530290][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.569308][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.569394][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.578026][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.578114][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.816912][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.058403][ T5609] veth0_vlan: entered promiscuous mode [ 74.106943][ T5609] veth1_vlan: entered promiscuous mode [ 74.181396][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.228380][ T5609] veth0_macvtap: entered promiscuous mode [ 74.254227][ T5609] veth1_macvtap: entered promiscuous mode [ 74.376919][ T5605] veth0_vlan: entered promiscuous mode [ 74.389188][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.410611][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.424860][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.425582][ T5605] veth1_vlan: entered promiscuous mode [ 74.465628][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465877][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.466004][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.472244][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.665156][ T5605] veth0_macvtap: entered promiscuous mode [ 74.700550][ T5605] veth1_macvtap: entered promiscuous mode [ 74.758467][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.799593][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.799633][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.804802][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.855521][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.861480][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.901491][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.901512][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.954053][ T31] audit: type=1400 audit(1789455440.223:153): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.DYBqp6/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.954411][ T31] audit: type=1400 audit(1789455440.223:154): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.956594][ T31] audit: type=1400 audit(1789455440.223:155): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.DYBqp6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.958054][ T31] audit: type=1400 audit(1789455440.223:156): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.964612][ T31] audit: type=1400 audit(1789455440.223:157): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.DYBqp6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.966001][ T31] audit: type=1400 audit(1789455440.233:158): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.DYBqp6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.971860][ T31] audit: type=1400 audit(1789455440.233:159): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.000529][ T31] audit: type=1400 audit(1789455440.263:160): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.005290][ T31] audit: type=1400 audit(1789455440.273:161): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=6850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.048718][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059973][ T5606] veth0_vlan: entered promiscuous mode [ 75.071788][ T5606] veth1_vlan: entered promiscuous mode [ 75.180998][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.195984][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196051][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196111][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287864][ T5606] veth0_macvtap: entered promiscuous mode [ 75.319015][ T5788] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 75.362457][ T4918] Bluetooth: hci1: command tx timeout [ 75.367729][ T5606] veth1_macvtap: entered promiscuous mode [ 75.389914][ T5790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 75.399413][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.399433][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.415162][ T5597] veth0_vlan: entered promiscuous mode [ 75.442743][ T4918] Bluetooth: hci2: command tx timeout [ 75.442776][ T4918] Bluetooth: hci0: command tx timeout [ 75.498013][ T5598] veth0_vlan: entered promiscuous mode [ 75.512036][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512056][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.522062][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.528000][ T5599] Bluetooth: hci4: command tx timeout [ 75.528031][ T5599] Bluetooth: hci3: command tx timeout [ 75.534536][ T5597] veth1_vlan: entered promiscuous mode [ 75.557468][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.588476][ T5598] veth1_vlan: entered promiscuous mode [ 75.607603][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607890][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755845][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.768309][ T5597] veth0_macvtap: entered promiscuous mode [ 75.788081][ T5597] veth1_macvtap: entered promiscuous mode [ 75.815331][ T5798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.824600][ T5598] veth0_macvtap: entered promiscuous mode [ 75.839828][ T5798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.860473][ T5598] veth1_macvtap: entered promiscuous mode [ 75.864169][ T5798] Zero length message leads to an empty skb [ 75.868314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.868331][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.912461][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927223][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.021988][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.035303][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.035324][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.091897][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.137953][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.194176][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194221][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194254][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194287][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194320][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194351][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194382][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194414][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.508678][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.508699][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.702791][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.702810][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.799207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.799227][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.935756][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 77.011436][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.011455][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.442495][ T4918] Bluetooth: hci1: command tx timeout [ 77.522402][ T5599] Bluetooth: hci2: command tx timeout [ 77.522449][ T4918] Bluetooth: hci0: command tx timeout [ 77.602961][ T5599] Bluetooth: hci4: command tx timeout [ 77.603147][ T4918] Bluetooth: hci3: command tx timeout [ 77.706014][ T1637] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.723763][ T5697] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.864591][ T5791] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.867110][ T5868] netlink: 'syz.0.39': attribute type 6 has an invalid length. [ 77.867131][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 77.899260][ T1637] usb 3-1: Using ep0 maxpacket: 8 [ 77.908417][ T5697] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 77.909829][ T1637] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 77.934922][ T1637] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.934969][ T1637] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 77.935016][ T1637] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.935056][ T1637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.939018][ T5697] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 77.939044][ T5697] usb 2-1: config 0 has no interface number 0 [ 77.939080][ T5697] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.015347][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.015374][ T5697] usb 2-1: Product: syz [ 78.015389][ T5697] usb 2-1: Manufacturer: syz [ 78.015404][ T5697] usb 2-1: SerialNumber: syz [ 78.049786][ T5851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.051022][ T5697] usb 2-1: config 0 descriptor?? [ 78.056101][ T5791] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 78.058669][ T5791] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.058699][ T5791] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.058721][ T5791] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.058746][ T5791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.058773][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.089345][ T5791] usb 5-1: config 0 descriptor?? [ 78.136695][ T1637] mdc800 3-1:1.0: probe fails -> wrong Interface [ 78.160663][ T5697] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 78.298106][ T5851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.301938][ T5739] usb 3-1: USB disconnect, device number 2 [ 78.319331][ C1] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 78.452236][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.505815][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 78.505864][ T31] audit: type=1400 audit(1789455443.773:194): avc: denied { allowed } for pid=5881 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.506697][ T31] audit: type=1400 audit(1789455443.773:195): avc: denied { create } for pid=5881 comm="syz.3.45" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.507426][ T31] audit: type=1400 audit(1789455443.773:196): avc: denied { map } for pid=5881 comm="syz.3.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.507591][ T31] audit: type=1400 audit(1789455443.773:197): avc: denied { read write } for pid=5881 comm="syz.3.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.585537][ T5791] hid-rmi 0003:1532:011D.0001: unbalanced collection at end of report description [ 78.588535][ T5791] hid-rmi 0003:1532:011D.0001: parse failed [ 78.589924][ T5791] hid-rmi 0003:1532:011D.0001: probe with driver hid-rmi failed with error -22 [ 78.636808][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 78.639125][ T5711] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.641494][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.641520][ T5711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.641622][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 78.641652][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 78.641695][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.686852][ T5711] hub 1-1:1.0: bad descriptor, ignoring hub [ 78.686887][ T5711] hub 1-1:1.0: probe with driver hub failed with error -5 [ 78.696917][ T5711] cdc_wdm 1-1:1.0: skipping garbage [ 78.696943][ T5711] cdc_wdm 1-1:1.0: skipping garbage [ 78.725057][ T5711] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 78.725078][ T5711] cdc_wdm 1-1:1.0: Unknown control protocol [ 78.795525][ T5711] usb 5-1: USB disconnect, device number 2 [ 78.910436][ T5791] usb 2-1: USB disconnect, device number 2 [ 78.915470][ T5791] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 78.982162][ T5739] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.998355][ T5711] usb 1-1: USB disconnect, device number 2 [ 79.048589][ T31] audit: type=1400 audit(1789455444.313:198): avc: denied { read write } for pid=5887 comm="syz.2.48" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.048965][ T31] audit: type=1400 audit(1789455444.313:199): avc: denied { open } for pid=5887 comm="syz.2.48" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.182306][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 79.185258][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.185303][ T5739] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 79.206226][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.206252][ T5739] usb 4-1: Product: syz [ 79.206265][ T5739] usb 4-1: Manufacturer: syz [ 79.206278][ T5739] usb 4-1: SerialNumber: syz [ 79.393035][ T31] audit: type=1400 audit(1789455444.663:200): avc: denied { write } for pid=5897 comm="syz.4.53" name="event2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.393276][ T31] audit: type=1400 audit(1789455444.663:201): avc: denied { open } for pid=5897 comm="syz.4.53" path="/dev/input/event2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.396992][ T31] audit: type=1400 audit(1789455444.663:202): avc: denied { ioctl } for pid=5897 comm="syz.4.53" path="/dev/input/event2" dev="devtmpfs" ino=980 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.634977][ T5908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.57'. [ 79.641508][ T5910] netlink: 80 bytes leftover after parsing attributes in process `syz.0.59'. [ 79.641552][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 79.790889][ T31] audit: type=1400 audit(1789455445.053:203): avc: denied { create } for pid=5911 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.169257][ T5739] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 80.334993][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.367008][ T5937] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 80.552996][ T5697] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.583292][ T5791] usb 4-1: USB disconnect, device number 2 [ 80.702181][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 80.703005][ T5697] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 80.704219][ T5697] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.704248][ T5697] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.704323][ T5697] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.704350][ T5697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.704382][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.710332][ T5697] usb 5-1: config 0 descriptor?? [ 80.763594][ T5739] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.822194][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.915858][ T5739] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 80.919214][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.919263][ T5739] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.919302][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.982889][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 80.984059][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.984098][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.988086][ T25] usb 3-1: config 0 descriptor?? [ 81.165516][ T5739] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2 [ 81.328539][ T5697] hid-alps 0003:044E:120B.0002: failed to read command (-71) [ 81.328620][ T5697] hid-alps 0003:044E:120B.0002: failed U1_DEV_CTRL_1 (-71) [ 81.353115][ T5955] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 81.379452][ T5711] usb 1-1: USB disconnect, device number 3 [ 81.394710][ T5697] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 81.455021][ T5697] usb 5-1: USB disconnect, device number 3 [ 81.472860][ T25] wacom 0003:056A:0318.0003: ignoring exceeding usage max [ 81.479841][ T25] wacom 0003:056A:0318.0003: unbalanced collection at end of report description [ 81.480602][ T25] wacom 0003:056A:0318.0003: parse failed [ 81.480698][ T25] wacom 0003:056A:0318.0003: probe with driver wacom failed with error -22 [ 81.532966][ T9] cfg80211: failed to load regulatory.db [ 81.606900][ T5956] fido_id[5956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 81.700032][ T5711] usb 3-1: USB disconnect, device number 3 [ 82.131462][ T5966] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 82.177322][ T5970] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 82.462246][ T5980] can0: slcan on ttyprintk. [ 82.617479][ T5976] can0 (unregistered): slcan off ttyprintk. [ 82.932258][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.082133][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 83.089183][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.089227][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 83.090259][ T25] usb 1-1: config 4 has an invalid interface number: 224 but max is 0 [ 83.090283][ T25] usb 1-1: config 4 has no interface number 0 [ 83.090310][ T25] usb 1-1: config 4 interface 224 has no altsetting 0 [ 83.105557][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.105583][ T25] usb 1-1: Product: syz [ 83.105597][ T25] usb 1-1: Manufacturer: syz [ 83.105612][ T25] usb 1-1: SerialNumber: syz [ 83.314350][ T6019] macsec1: entered promiscuous mode [ 83.562174][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 83.562192][ T31] audit: type=1400 audit(1789455448.823:229): avc: denied { append } for pid=6023 comm="syz.4.106" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.563038][ T31] audit: type=1400 audit(1789455448.833:230): avc: denied { write } for pid=6022 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.641965][ T25] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 83.706263][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.707083][ T25] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 83.707130][ T25] usb 1-1: media controller created [ 83.719784][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.862862][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.916828][ T6030] erspan0: entered promiscuous mode [ 84.022134][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 84.023516][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 84.029025][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.029052][ T10] usb 2-1: Product: syz [ 84.029066][ T10] usb 2-1: Manufacturer: syz [ 84.029090][ T10] usb 2-1: SerialNumber: syz [ 84.035170][ T10] usb 2-1: config 0 descriptor?? [ 84.038758][ T6037] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 84.054200][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 84.054246][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 84.054246][ T10] [ 84.054286][ T10] usb 2-1: selecting invalid altsetting 3 [ 84.054300][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 84.054300][ T10] [ 84.054314][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 84.080233][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.085131][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 84.085179][ T10] usb 2-1: media controller created [ 84.089913][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 84.089947][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 84.090011][ T10] dvb-usb: MAC address reading failed. [ 84.198403][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.240002][ T31] audit: type=1400 audit(1789455449.503:231): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.297183][ T31] audit: type=1400 audit(1789455449.563:232): avc: denied { append } for pid=6026 comm="syz.1.107" name="i2c-1" dev="devtmpfs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_f ** replaying previous printk message ** [ 84.297183][ T31] audit: type=1400 audit(1789455449.563:232): avc: denied { append } for pid=6026 comm="syz.1.107" name="i2c-1" dev="devtmpfs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.323261][ T6027] ------------[ cut here ]------------ [ 84.323279][ T6027] usb 1-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 84.323299][ T6027] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.1.107/6027 [ 84.375284][ T6027] Modules linked in: [ 84.379219][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 84.388504][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 84.398625][ T6027] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 84.404447][ T6027] Code: 48 89 54 24 40 e8 43 cd 7c fa 4c 89 e7 e8 2b e0 da fe 48 89 c6 48 8d 3d c1 05 c3 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 cd 7c fa 89 ee bf ff 00 00 00 [ 84.426332][ T6027] RSP: 0018:ffffc900064d7868 EFLAGS: 00010283 [ 84.433202][ T6027] RAX: ffffffff8cc86140 RBX: ffff888076bfb300 RCX: 0000000080000480 [ 84.441198][ T6027] RDX: ffff8880216d4d20 RSI: ffffffff8cc86140 RDI: ffffffff915255a0 [ 84.449250][ T6027] RBP: ffff88802991f058 R08: 00000000000000c0 R09: 0000000000000000 [ 84.457282][ T6027] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802991f0b0 [ 84.458361][ T31] audit: type=1400 audit(1789455449.643:233): avc: denied { write } for pid=6048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.476317][ T25] DVB: Unable to find symbol lgdt3305_attach() [ 84.476332][ T25] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 84.476347][ T25] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 84.492418][ T25] usb 1-1: USB disconnect, device number 4 [ 84.520148][ T6027] R13: ffff88802cd0a500 R14: ffff88802cd0a506 R15: ffff88802cd0a507 [ 84.528253][ T6027] FS: 00007ff490b886c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 84.536883][ T31] audit: type=1400 audit(1789455449.803:234): avc: denied { create } for pid=6047 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.538260][ T31] audit: type=1400 audit(1789455449.803:235): avc: denied { write } for pid=6047 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.577641][ T6027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.584482][ T6027] CR2: 00007f75c09acb4c CR3: 000000007448a000 CR4: 00000000003526f0 [ 84.592512][ T6027] Call Trace: [ 84.595801][ T6027] [ 84.598748][ T6027] ? __init_swait_queue_head+0xca/0x150 [ 84.604390][ T6027] usb_start_wait_urb+0x10e/0x580 [ 84.609433][ T6027] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 84.616222][ T6027] ? __asan_memset+0x23/0x50 [ 84.620836][ T6027] usb_control_msg+0x328/0x4b0 [ 84.626486][ T6027] ? __pfx_usb_control_msg+0x10/0x10 [ 84.631792][ T6027] ? __lock_acquire+0xe8b/0x1f40 [ 84.636793][ T6027] dib0700_i2c_xfer+0x717/0xd90 [ 84.641667][ T6027] __i2c_transfer+0x5d4/0x1740 [ 84.646639][ T6027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.652500][ T6027] ? __pfx___i2c_transfer+0x10/0x10 [ 84.657701][ T6027] ? rt_mutex_slowtrylock+0x93/0x100 [ 84.663040][ T6027] i2c_transfer+0x158/0x380 [ 84.667549][ T6027] i2c_transfer_buffer_flags+0x10c/0x190 [ 84.673231][ T6027] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 84.679385][ T6027] ? selinux_file_permission+0x8f/0x6d0 [ 84.684970][ T6027] ? i2cdev_read+0xe4/0x2b0 [ 84.689504][ T6027] i2cdev_read+0x111/0x2b0 [ 84.694002][ T6027] ? __pfx_i2cdev_read+0x10/0x10 [ 84.698953][ T6027] vfs_read+0x1e4/0xb40 [ 84.703156][ T6027] ? lock_acquire+0x1d1/0x380 [ 84.707836][ T6027] ? __fget_files+0x34/0x3d0 [ 84.712468][ T6027] ? __pfx_vfs_read+0x10/0x10 [ 84.718464][ T6027] ? find_held_lock+0x2b/0x80 [ 84.724479][ T6027] ? __fget_files+0x215/0x3d0 [ 84.729165][ T6027] ? __fget_files+0x215/0x3d0 [ 84.733883][ T6027] ? __fget_files+0x21f/0x3d0 [ 84.738572][ T6027] ksys_read+0x12a/0x250 [ 84.742848][ T6027] ? __pfx_ksys_read+0x10/0x10 [ 84.747624][ T6027] do_syscall_64+0x123/0x790 [ 84.752265][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.758161][ T6027] RIP: 0033:0x7ff48fd9e159 [ 84.762614][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.782260][ T6027] RSP: 002b:00007ff490b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.790673][ T6027] RAX: ffffffffffffffda RBX: 00007ff490025fa0 RCX: 00007ff48fd9e159 [ 84.798689][ T6027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 84.806700][ T6027] RBP: 00007ff48fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 84.814691][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.824041][ T6027] R13: 00007ff490026038 R14: 00007ff490025fa0 R15: 00007ffe32f02528 [ 84.832042][ T6027] [ 84.836018][ T6027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.843295][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 84.852462][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 84.862498][ T6027] Call Trace: [ 84.865754][ T6027] [ 84.868663][ T6027] dump_stack_lvl+0x100/0x190 [ 84.873326][ T6027] vpanic+0x553/0x970 [ 84.877284][ T6027] ? __pfx_vpanic+0x10/0x10 [ 84.881769][ T6027] panic+0xd1/0xe0 [ 84.885473][ T6027] ? __pfx_panic+0x10/0x10 [ 84.889882][ T6027] check_panic_on_warn.cold+0x19/0x34 [ 84.895250][ T6027] ? usb_submit_urb+0x15ff/0x19b0 [ 84.900252][ T6027] __warn.cold+0x191/0x318 [ 84.904651][ T6027] __report_bug+0x30f/0x440 [ 84.909141][ T6027] ? usb_submit_urb+0x15ff/0x19b0 [ 84.914158][ T6027] ? __pfx___report_bug+0x10/0x10 [ 84.919195][ T6027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.924999][ T6027] report_bug_entry+0xe2/0x290 [ 84.929755][ T6027] ? usb_submit_urb+0x160d/0x19b0 [ 84.934767][ T6027] handle_bug+0x1cd/0x2a0 [ 84.939101][ T6027] exc_invalid_op+0x17/0x50 [ 84.943601][ T6027] asm_exc_invalid_op+0x1a/0x20 [ 84.948438][ T6027] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 84.954067][ T6027] Code: 48 89 54 24 40 e8 43 cd 7c fa 4c 89 e7 e8 2b e0 da fe 48 89 c6 48 8d 3d c1 05 c3 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 cd 7c fa 89 ee bf ff 00 00 00 [ 84.973662][ T6027] RSP: 0018:ffffc900064d7868 EFLAGS: 00010283 [ 84.979748][ T6027] RAX: ffffffff8cc86140 RBX: ffff888076bfb300 RCX: 0000000080000480 [ 84.987708][ T6027] RDX: ffff8880216d4d20 RSI: ffffffff8cc86140 RDI: ffffffff915255a0 [ 84.995668][ T6027] RBP: ffff88802991f058 R08: 00000000000000c0 R09: 0000000000000000 [ 85.003633][ T6027] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802991f0b0 [ 85.011594][ T6027] R13: ffff88802cd0a500 R14: ffff88802cd0a506 R15: ffff88802cd0a507 [ 85.019571][ T6027] ? usb_submit_urb+0x15f5/0x19b0 [ 85.024640][ T6027] ? __init_swait_queue_head+0xca/0x150 [ 85.030212][ T6027] usb_start_wait_urb+0x10e/0x580 [ 85.035434][ T6027] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 85.041047][ T6027] ? __asan_memset+0x23/0x50 [ 85.045646][ T6027] usb_control_msg+0x328/0x4b0 [ 85.050418][ T6027] ? __pfx_usb_control_msg+0x10/0x10 [ 85.055706][ T6027] ? __lock_acquire+0xe8b/0x1f40 [ 85.060642][ T6027] dib0700_i2c_xfer+0x717/0xd90 [ 85.065511][ T6027] __i2c_transfer+0x5d4/0x1740 [ 85.070270][ T6027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.076076][ T6027] ? __pfx___i2c_transfer+0x10/0x10 [ 85.081269][ T6027] ? rt_mutex_slowtrylock+0x93/0x100 [ 85.086564][ T6027] i2c_transfer+0x158/0x380 [ 85.091083][ T6027] i2c_transfer_buffer_flags+0x10c/0x190 [ 85.096709][ T6027] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 85.102859][ T6027] ? selinux_file_permission+0x8f/0x6d0 [ 85.108410][ T6027] ? i2cdev_read+0xe4/0x2b0 [ 85.112920][ T6027] i2cdev_read+0x111/0x2b0 [ 85.117339][ T6027] ? __pfx_i2cdev_read+0x10/0x10 [ 85.122281][ T6027] vfs_read+0x1e4/0xb40 [ 85.126439][ T6027] ? lock_acquire+0x1d1/0x380 [ 85.131136][ T6027] ? __fget_files+0x34/0x3d0 [ 85.135745][ T6027] ? __pfx_vfs_read+0x10/0x10 [ 85.140424][ T6027] ? find_held_lock+0x2b/0x80 [ 85.145110][ T6027] ? __fget_files+0x215/0x3d0 [ 85.149792][ T6027] ? __fget_files+0x215/0x3d0 [ 85.154478][ T6027] ? __fget_files+0x21f/0x3d0 [ 85.159154][ T6027] ksys_read+0x12a/0x250 [ 85.163391][ T6027] ? __pfx_ksys_read+0x10/0x10 [ 85.168151][ T6027] do_syscall_64+0x123/0x790 [ 85.172743][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.178626][ T6027] RIP: 0033:0x7ff48fd9e159 [ 85.183026][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.202621][ T6027] RSP: 002b:00007ff490b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.211030][ T6027] RAX: ffffffffffffffda RBX: 00007ff490025fa0 RCX: 00007ff48fd9e159 [ 85.218993][ T6027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.226959][ T6027] RBP: 00007ff48fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 85.234932][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.242897][ T6027] R13: 00007ff490026038 R14: 00007ff490025fa0 R15: 00007ffe32f02528 [ 85.250882][ T6027] [ 85.254144][ T6027] Kernel Offset: disabled [ 85.258462][ T6027] Rebooting in 86400 seconds..