last executing test programs: 1.007707254s ago: executing program 2 (id=986): r0 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r0, 0x0, 0x0, 0x80800) 990.907302ms ago: executing program 1 (id=987): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000440)=0x2) 941.439256ms ago: executing program 1 (id=988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, r0, 0x2f, 0x30, 0x4, @void, @void, @void, @value}, 0x20) 888.191819ms ago: executing program 2 (id=989): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x14) 866.39083ms ago: executing program 1 (id=991): syz_io_uring_setup(0x1911, &(0x7f00000003c0)={0x0, 0x4bf1, 0x10100, 0x2000}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 833.054897ms ago: executing program 2 (id=993): syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xd}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{0x0, 0x2, 0x4}, {}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x88, 0x3f}}, @void, @void, @void, @void}}]]}, 0x58}}, 0x0) syz_genetlink_get_family_id$auto(0x0, r0) 767.578085ms ago: executing program 1 (id=994): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x205) 677.164183ms ago: executing program 1 (id=997): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 647.680517ms ago: executing program 4 (id=998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086201, &(0x7f0000000440)=0x2) 556.184489ms ago: executing program 4 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xf6}]}]}, 0x3c}}, 0x0) 555.966952ms ago: executing program 3 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0xfdb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 538.911803ms ago: executing program 4 (id=1001): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 534.630779ms ago: executing program 1 (id=1002): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 467.78288ms ago: executing program 4 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000f0200000031000000f7"]) 451.573105ms ago: executing program 3 (id=1005): read$msr(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 451.250693ms ago: executing program 0 (id=1006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="070000000100"}) 389.339295ms ago: executing program 3 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 312.267769ms ago: executing program 0 (id=1008): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1b) 312.101318ms ago: executing program 0 (id=1009): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086201, &(0x7f0000000440)=0x2) 297.89789ms ago: executing program 3 (id=1010): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x4000000004, 0x6b8) 274.513341ms ago: executing program 0 (id=1011): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @local, 0x401}, 0x18) 188.206201ms ago: executing program 0 (id=1012): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 188.060687ms ago: executing program 2 (id=1013): sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="98010000", @ANYRES16], 0x198}}, 0x40) r0 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x300, 0x0, 0x0) 187.969658ms ago: executing program 4 (id=1014): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000970000005d000000000000009500000000000000e5fabe61bfeae4099c6ad05a5bf2c08ac9adf703203fe486bba09e9fd3ad97c17dc13dadbde480f9376823e96ff4112684a7034e01e7ce0f1aa06f97939f0cd8e445115ccf1285c9ee74e08f140d32244ad6e3847490ef8fa5f379ad11d6bed6de347e1e00af080ac1cb849b95c1813e817ab89dfd3126662c0cc4242e105d00"/161], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 149.0496ms ago: executing program 0 (id=1015): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x2, 0x3, 0x1}, 0x8) 139.806302ms ago: executing program 2 (id=1016): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 115.631127ms ago: executing program 3 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c80031000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r2, r1) 115.432906ms ago: executing program 4 (id=1018): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(0x0, 0x1, 0x2000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0xa}) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f000022d000/0x3000)=nil, &(0x7f0000508000/0x4000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 216.087µs ago: executing program 2 (id=1019): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000640)="b11ec96736a1c3", 0x7}, {&(0x7f00000006c0)}], 0x2}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x68}}], 0x2, 0x4040845) listen(0xffffffffffffffff, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): to 0x83 [ 112.544058][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.556520][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.565440][ T8] usb 1-1: config 179 has no interface number 0 [ 112.571771][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.582990][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.594741][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.606198][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.618000][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.631312][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.640430][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.651784][ T968] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 112.661178][ T6664] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 112.670446][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.678482][ T968] usb 4-1: Product: syz [ 112.682660][ T968] usb 4-1: Manufacturer: syz [ 112.687353][ T968] usb 4-1: SerialNumber: syz [ 112.699155][ T968] usb 4-1: config 0 descriptor?? [ 112.707899][ T968] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 112.714467][ T968] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22 [ 112.934048][ T6663] pimreg: left allmulticast mode [ 112.944475][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 112.965769][ T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 112.978698][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input15 [ 113.095264][ T968] usb 4-1: USB disconnect, device number 4 [ 113.104402][ T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 113.176788][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.186854][ T5873] usb 1-1: USB disconnect, device number 10 [ 113.186912][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 113.202495][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 113.206694][ T5873] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 113.260211][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.397206][ T29] audit: type=1326 audit(1730580931.183:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.2.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f585597e719 code=0x0 [ 113.450727][ T6684] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.459579][ T6684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.498748][ T29] audit: type=1400 audit(1730580931.283:315): avc: denied { connect } for pid=6676 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.625125][ T5913] usb 2-1: USB disconnect, device number 5 [ 114.613595][ T6696] loop2: detected capacity change from 0 to 7 [ 114.622111][ T6696] loop2: [POWERTEC] p1 p2 p3 [ 114.629181][ T6696] loop2: p1 size 848045204 extends beyond EOD, truncated [ 114.640098][ T6696] loop2: p2 start 1932423285 is beyond EOD, truncated [ 114.773360][ T29] audit: type=1400 audit(1730580932.553:316): avc: denied { bind } for pid=6697 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.799596][ T6703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6703 comm=syz.2.219 [ 114.826048][ T6703] x_tables: unsorted underflow at hook 4 [ 114.847681][ T29] audit: type=1400 audit(1730580932.553:317): avc: denied { name_bind } for pid=6697 comm="syz.2.219" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.881124][ T29] audit: type=1400 audit(1730580932.553:318): avc: denied { node_bind } for pid=6697 comm="syz.2.219" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.906213][ T29] audit: type=1400 audit(1730580932.553:319): avc: denied { write } for pid=6697 comm="syz.2.219" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.942333][ T29] audit: type=1400 audit(1730580932.553:320): avc: denied { ioctl } for pid=6697 comm="syz.2.219" path="socket:[11594]" dev="sockfs" ino=11594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.023440][ T29] audit: type=1400 audit(1730580932.553:321): avc: denied { write } for pid=6697 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.318183][ T29] audit: type=1400 audit(1730580932.583:322): avc: denied { write } for pid=6697 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.340575][ T29] audit: type=1400 audit(1730580932.583:323): avc: denied { nlmsg_read } for pid=6697 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.089934][ T6731] syz.2.227: attempt to access beyond end of device [ 117.089934][ T6731] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 117.104412][ T6731] (syz.2.227,6731,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 117.111968][ T6731] (syz.2.227,6731,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 117.124560][ T6731] (syz.2.227,6731,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 117.124586][ T6731] (syz.2.227,6731,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 117.434868][ T6741] netlink: 56 bytes leftover after parsing attributes in process `syz.2.233'. [ 117.553947][ T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.714074][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 117.729989][ T968] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 117.742869][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.771395][ T968] usb 2-1: Product: syz [ 117.791421][ T968] usb 2-1: Manufacturer: syz [ 117.807710][ T968] usb 2-1: SerialNumber: syz [ 117.821980][ T968] usb 2-1: config 0 descriptor?? [ 117.862838][ T968] gspca_main: sq905-2.14.0 probing 2770:9120 [ 118.404373][ T968] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 118.413303][ T968] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 118.428184][ T968] usb 2-1: USB disconnect, device number 6 [ 120.205098][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 120.205113][ T29] audit: type=1400 audit(1730580937.993:335): avc: denied { ioctl } for pid=6778 comm="syz.3.245" path="socket:[11154]" dev="sockfs" ino=11154 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.281230][ T29] audit: type=1400 audit(1730580938.053:336): avc: denied { read } for pid=6778 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.353343][ T6787] syz.2.247 uses obsolete (PF_INET,SOCK_PACKET) [ 120.633035][ T6791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.232372][ T29] audit: type=1400 audit(1730580938.953:337): avc: denied { create } for pid=6793 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.729805][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.874491][ T29] audit: type=1400 audit(1730580939.583:338): avc: denied { setopt } for pid=6799 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.005937][ T29] audit: type=1400 audit(1730580939.593:339): avc: denied { read } for pid=6799 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.041551][ T6804] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 122.050681][ T6804] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 122.133207][ T6812] gtp0: entered promiscuous mode [ 122.138276][ T6812] gtp0: entered allmulticast mode [ 122.670283][ T1123] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 122.679936][ T1123] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 122.686487][ T1123] wlan1: authentication with 50:50:50:50:50:50 timed out [ 122.708337][ T29] audit: type=1400 audit(1730580940.443:340): avc: denied { write } for pid=6799 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.942731][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.957978][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 123.935815][ T6827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.009823][ T6830] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 124.523205][ T6832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.685410][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.717464][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 125.616717][ T29] audit: type=1400 audit(1730580943.373:341): avc: denied { getopt } for pid=6843 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.954414][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 126.028264][ T6866] overlayfs: missing 'workdir' [ 126.798582][ T29] audit: type=1400 audit(1730580944.583:342): avc: denied { write } for pid=6874 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.824439][ T6871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.024288][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.224204][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 127.376354][ T6885] Zero length message leads to an empty skb [ 127.377787][ T6885] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6885] [ 127.743090][ T968] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.744943][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.745001][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 127.745031][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.745056][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.746029][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.746058][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 127.746083][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.746108][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.747070][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.747098][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 127.747149][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.747176][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.749291][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.749317][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.749337][ T9] usb 2-1: Product: syz [ 127.749352][ T9] usb 2-1: Manufacturer: syz [ 127.749390][ T9] usb 2-1: SerialNumber: syz [ 128.353799][ T6889] capability: warning: `syz.1.268' uses deprecated v2 capabilities in a way that may be insecure [ 128.933241][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 128.951636][ T9] usb 2-1: USB disconnect, device number 7 [ 129.126628][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.138977][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.257992][ T968] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 129.267121][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.292679][ T968] usb 3-1: config 0 descriptor?? [ 129.344158][ T29] audit: type=1400 audit(1730580947.133:343): avc: denied { lock } for pid=6901 comm="syz.4.274" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.604008][ T5873] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.708348][ T968] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 129.718070][ T968] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 129.728496][ T968] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 129.776378][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.796243][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.820993][ T5873] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 129.880686][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.942813][ T5873] usb 1-1: config 0 descriptor?? [ 129.958352][ T29] audit: type=1400 audit(1730580947.733:344): avc: denied { mounton } for pid=6908 comm="syz.4.277" path="/50/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 130.474340][ T29] audit: type=1400 audit(1730580948.263:345): avc: denied { setopt } for pid=6874 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.494694][ T25] usb 3-1: USB disconnect, device number 10 [ 130.619891][ T5873] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 130.634139][ T5873] hid-led 0003:1D34:000A.0005: item fetching failed at offset 3/5 [ 130.652542][ T5873] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -22 [ 131.497440][ T968] usb 1-1: USB disconnect, device number 11 [ 131.761434][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 132.334103][ T29] audit: type=1400 audit(1730580950.053:346): avc: denied { ioctl } for pid=6934 comm="syz.1.285" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 132.398559][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.417776][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.743938][ T29] audit: type=1400 audit(1730580950.163:347): avc: denied { ioctl } for pid=6934 comm="syz.1.285" path="socket:[12362]" dev="sockfs" ino=12362 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.813955][ T29] audit: type=1400 audit(1730580950.573:348): avc: denied { setattr } for pid=6945 comm="syz.2.287" name="PPPOL2TP" dev="sockfs" ino=12380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.899542][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.2.289'. [ 132.997746][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.154677][ T6953] ebtables: ebtables: counters copy to user failed while replacing table [ 133.265234][ T968] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.450343][ T29] audit: type=1400 audit(1730580951.233:349): avc: denied { append } for pid=6971 comm="syz.0.295" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.484710][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 133.497579][ T968] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 133.510353][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.527862][ T968] usb 3-1: Product: syz [ 133.552140][ T29] audit: type=1400 audit(1730580951.313:350): avc: denied { read } for pid=6971 comm="syz.0.295" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.553663][ T968] usb 3-1: Manufacturer: syz [ 133.585637][ T6974] loop7: detected capacity change from 0 to 16384 [ 133.609350][ T968] usb 3-1: SerialNumber: syz [ 133.653144][ T29] audit: type=1400 audit(1730580951.313:351): avc: denied { open } for pid=6971 comm="syz.0.295" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.679602][ T968] usb 3-1: config 0 descriptor?? [ 133.719723][ T968] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 133.752580][ T29] audit: type=1400 audit(1730580951.313:352): avc: denied { ioctl } for pid=6971 comm="syz.0.295" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.014323][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.034851][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.629332][ T5902] usb 3-1: USB disconnect, device number 11 [ 134.983881][ T6993] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 134.993630][ T6993] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 135.377592][ T29] audit: type=1400 audit(1730580953.163:353): avc: denied { bind } for pid=6994 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.408185][ T29] audit: type=1400 audit(1730580953.183:354): avc: denied { listen } for pid=6994 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.431016][ T29] audit: type=1400 audit(1730580953.193:355): avc: denied { write } for pid=6994 comm="syz.1.300" path="socket:[13501]" dev="sockfs" ino=13501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.884777][ T968] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.516681][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 136.534966][ T968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.543023][ T968] usb 1-1: config 0 has no interface number 0 [ 136.549857][ T968] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.597808][ T7015] hpfs: Bad magic ... probably not HPFS [ 136.621843][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.840802][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.852249][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.862205][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 136.873825][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.023202][ T968] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.042834][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.045239][ T5913] usb 5-1: config 0 descriptor?? [ 137.128128][ T968] usb 1-1: config 0 descriptor?? [ 137.135594][ T968] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 137.162013][ T7018] vivid-002: disconnect [ 137.614872][ T9] usb 1-1: USB disconnect, device number 12 [ 137.663456][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 137.663471][ T29] audit: type=1400 audit(1730580955.443:358): avc: denied { setopt } for pid=7021 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.834582][ T5913] logitech-hidpp-device 0003:046D:C086.0006: item fetching failed at offset 1/5 [ 137.849661][ T5913] logitech-hidpp-device 0003:046D:C086.0006: hidpp_probe:parse failed [ 137.868233][ T5913] logitech-hidpp-device 0003:046D:C086.0006: probe with driver logitech-hidpp-device failed with error -22 [ 137.884211][ T968] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.063124][ T8] usb 5-1: USB disconnect, device number 5 [ 138.069069][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.086407][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 138.140531][ T968] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.149160][ T968] usb 4-1: can't read configurations, error -61 [ 138.203916][ T29] audit: type=1400 audit(1730580955.983:359): avc: denied { relabelfrom } for pid=7034 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 138.232708][ T29] audit: type=1400 audit(1730580955.983:360): avc: denied { relabelto } for pid=7034 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 138.314105][ T968] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.359518][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.389443][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.415760][ T7040] x_tables: duplicate underflow at hook 3 [ 138.504003][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 138.511003][ T968] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 138.526172][ T968] usb 4-1: can't read configurations, error -61 [ 138.526482][ T968] usb usb4-port1: attempt power cycle [ 138.664107][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.885619][ T968] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.100795][ T29] audit: type=1400 audit(1730580956.723:361): avc: denied { write } for pid=7046 comm="syz.4.318" path="socket:[12653]" dev="sockfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.429522][ T25] usb 1-1: config index 0 descriptor too short (expected 32768, got 18) [ 139.438031][ T25] usb 1-1: config 220 has too many interfaces: 136, using maximum allowed: 32 [ 139.447386][ T25] usb 1-1: config 220 has an invalid descriptor of length 12, skipping remainder of the config [ 139.457875][ T25] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 136 [ 139.461340][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 139.483356][ T968] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 139.492803][ T968] usb 4-1: can't read configurations, error -61 [ 139.509084][ T25] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 139.628935][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.700542][ T25] usb 1-1: Product: syz [ 139.704817][ T25] usb 1-1: Manufacturer: syz [ 139.709449][ T25] usb 1-1: SerialNumber: syz [ 139.789929][ T29] audit: type=1400 audit(1730580957.473:362): avc: denied { mount } for pid=7052 comm="syz.2.320" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.833076][ T7018] vivid-002: reconnect [ 139.844233][ T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.881641][ T5913] kernel write not supported for file /248/net/rt6_stats (pid: 5913 comm: kworker/1:7) [ 139.979674][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 140.067386][ T968] usb 4-1: device not accepting address 8, error -71 [ 140.091078][ T29] audit: type=1400 audit(1730580957.873:363): avc: denied { create } for pid=7058 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.163233][ T25] usb 1-1: USB disconnect, device number 13 [ 140.171371][ T968] usb usb4-port1: unable to enumerate USB device [ 140.409044][ T29] audit: type=1400 audit(1730580958.193:364): avc: denied { create } for pid=7070 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.428681][ T29] audit: type=1400 audit(1730580958.193:365): avc: denied { accept } for pid=7070 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.525514][ T7073] gtp0: entered promiscuous mode [ 140.530520][ T7073] gtp0: entered allmulticast mode [ 141.072322][ T29] audit: type=1400 audit(1730580958.853:366): avc: denied { setopt } for pid=7070 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.132627][ T7079] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.326'. [ 141.147660][ T29] audit: type=1400 audit(1730580958.853:367): avc: denied { write } for pid=7070 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.228989][ T7087] FAULT_INJECTION: forcing a failure. [ 141.228989][ T7087] name failslab, interval 1, probability 0, space 0, times 1 [ 141.258565][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.2.328 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 141.269159][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.279218][ T7087] Call Trace: [ 141.282471][ T7087] [ 141.285379][ T7087] dump_stack_lvl+0x16c/0x1f0 [ 141.290032][ T7087] should_fail_ex+0x497/0x5b0 [ 141.294692][ T7087] ? fs_reclaim_acquire+0xae/0x150 [ 141.299776][ T7087] should_failslab+0xc2/0x120 [ 141.304428][ T7087] __kmalloc_noprof+0xcb/0x400 [ 141.309169][ T7087] tomoyo_encode2+0x100/0x3e0 [ 141.313825][ T7087] tomoyo_encode+0x29/0x50 [ 141.318229][ T7087] tomoyo_mount_acl+0x314/0x880 [ 141.323065][ T7087] ? hlock_class+0x4e/0x130 [ 141.327557][ T7087] ? __lock_acquire+0x163e/0x3ce0 [ 141.332566][ T7087] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 141.337927][ T7087] ? __pfx___lock_acquire+0x10/0x10 [ 141.343108][ T7087] ? stack_trace_save+0x95/0xd0 [ 141.347945][ T7087] ? __pfx_lock_release+0x10/0x10 [ 141.352959][ T7087] ? trace_lock_acquire+0x14a/0x1d0 [ 141.358142][ T7087] ? tomoyo_mount_permission+0x146/0x410 [ 141.363758][ T7087] ? lock_acquire+0x2f/0xb0 [ 141.368244][ T7087] ? tomoyo_mount_permission+0x146/0x410 [ 141.373864][ T7087] tomoyo_mount_permission+0x16b/0x410 [ 141.379304][ T7087] ? tomoyo_mount_permission+0x146/0x410 [ 141.384920][ T7087] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 141.390889][ T7087] ? get_current_fs_domain+0x188/0x1f0 [ 141.396336][ T7087] security_sb_mount+0x9b/0x260 [ 141.401169][ T7087] path_mount+0x129/0x1f20 [ 141.405572][ T7087] ? kmem_cache_free+0x152/0x4b0 [ 141.410494][ T7087] ? __pfx_path_mount+0x10/0x10 [ 141.415338][ T7087] ? putname+0x12e/0x170 [ 141.419569][ T7087] __x64_sys_mount+0x294/0x320 [ 141.424317][ T7087] ? __pfx___x64_sys_mount+0x10/0x10 [ 141.429588][ T7087] do_syscall_64+0xcd/0x250 [ 141.434078][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.439960][ T7087] RIP: 0033:0x7f585597e719 [ 141.444358][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.463955][ T7087] RSP: 002b:00007f58566dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.472357][ T7087] RAX: ffffffffffffffda RBX: 00007f5855b35f80 RCX: 00007f585597e719 [ 141.480309][ T7087] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 141.488262][ T7087] RBP: 00007f58566dd090 R08: 0000000020000080 R09: 0000000000000000 [ 141.496215][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.504168][ T7087] R13: 0000000000000000 R14: 00007f5855b35f80 R15: 00007fff6b8040c8 [ 141.512132][ T7087] [ 142.218621][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 144.169780][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.169780][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.334004][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 144.334606][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 144.352621][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 144.352633][ T29] audit: type=1400 audit(1730580962.133:371): avc: denied { read } for pid=7127 comm="syz.0.340" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 144.384962][ T7128] netlink: 'syz.0.340': attribute type 2 has an invalid length. [ 144.395019][ T5902] usb 5-1: config 251 has an invalid interface number: 29 but max is 0 [ 144.407311][ T5902] usb 5-1: config 251 has no interface number 0 [ 144.412996][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 144.423124][ T5902] usb 5-1: config 251 interface 29 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 144.423485][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.435788][ T29] audit: type=1400 audit(1730580962.173:372): avc: denied { open } for pid=7127 comm="syz.0.340" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 144.471657][ T25] usb 4-1: Product: syz [ 144.475888][ T5902] usb 5-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 144.475916][ T5902] usb 5-1: config 251 interface 29 has no altsetting 0 [ 144.475943][ T5902] usb 5-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 144.520071][ T25] usb 4-1: Manufacturer: syz [ 144.538085][ T25] usb 4-1: SerialNumber: syz [ 144.546101][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.549307][ T25] usb 4-1: config 0 descriptor?? [ 144.569456][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 145.284126][ T25] gspca_sonixj: reg_w1 err -110 [ 145.329262][ T25] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 145.336621][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.382596][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.471567][ T29] audit: type=1400 audit(1730580963.253:373): avc: denied { create } for pid=7134 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.562996][ T29] audit: type=1400 audit(1730580963.343:374): avc: denied { ioctl } for pid=7116 comm="syz.4.337" path="/dev/sg0" dev="devtmpfs" ino=707 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.604236][ T5902] usb 5-1: string descriptor 0 read error: -71 [ 145.612959][ T5902] usb-storage 5-1:251.29: USB Mass Storage device detected [ 145.658898][ T5902] usb-storage 5-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 145.944229][ T5902] usb 5-1: USB disconnect, device number 6 [ 146.599749][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.844077][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.4.347'. [ 147.054125][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.057465][ T29] audit: type=1400 audit(1730580964.793:375): avc: denied { write } for pid=7157 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.064822][ T7163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.141150][ T7163] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.259817][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.348'. [ 147.362352][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 147.463955][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.506279][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.093643][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.144543][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.153602][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.196261][ T9] usb 2-1: Manufacturer: syz [ 148.216376][ T5873] usb 4-1: USB disconnect, device number 9 [ 148.255227][ T9] usb 2-1: config 0 descriptor?? [ 148.362496][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.420791][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.439215][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 148.603998][ T1808] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 148.689500][ T9] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 148.700025][ T9] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 148.720930][ T9] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 148.763908][ T1808] usb 3-1: Using ep0 maxpacket: 8 [ 148.770597][ T1808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.781640][ T1808] usb 3-1: config 8 has an invalid interface number: 131 but max is 0 [ 148.790739][ T1808] usb 3-1: config 8 has no interface number 0 [ 148.797081][ T1808] usb 3-1: config 8 interface 131 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 148.808560][ T1808] usb 3-1: config 8 interface 131 has no altsetting 0 [ 148.826864][ T1808] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=1e.98 [ 148.836047][ T1808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.844434][ T1808] usb 3-1: Product: syz [ 148.848751][ T1808] usb 3-1: Manufacturer: syz [ 148.853464][ T1808] usb 3-1: SerialNumber: syz [ 148.869642][ T7186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.037449][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.054724][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.210253][ T29] audit: type=1400 audit(1730580966.993:376): avc: denied { write } for pid=7183 comm="syz.2.350" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.244170][ T7149] ebt_among: src integrity fail: 300 [ 149.340557][ T7197] gtp1: entered promiscuous mode [ 149.345709][ T7197] gtp1: entered allmulticast mode [ 149.775574][ T7199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.324044][ T968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.607954][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 150.666804][ T968] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.694384][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.706701][ T968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.801566][ T5873] usb 2-1: USB disconnect, device number 9 [ 150.864043][ T968] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.873230][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.881611][ T968] usb 4-1: Product: syz [ 150.886254][ T968] usb 4-1: Manufacturer: syz [ 150.890852][ T968] usb 4-1: SerialNumber: syz [ 150.910261][ T7212] gtp0: entered promiscuous mode [ 150.916424][ T7212] gtp0: entered allmulticast mode [ 150.990093][ T29] audit: type=1400 audit(1730580968.773:377): avc: denied { read } for pid=7213 comm="syz.4.361" name="file2" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.017333][ T29] audit: type=1400 audit(1730580968.773:378): avc: denied { open } for pid=7213 comm="syz.4.361" path="/67/file2" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.167526][ T968] usb 4-1: 0:2 : does not exist [ 151.175909][ T968] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 151.196656][ T968] usb 4-1: USB disconnect, device number 10 [ 151.246840][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.586496][ T7228] gtp0: entered promiscuous mode [ 151.591511][ T7228] gtp0: entered allmulticast mode [ 152.624778][ T1808] usb 3-1: USB disconnect, device number 12 [ 152.908664][ T7246] gtp1: entered promiscuous mode [ 152.913670][ T7246] gtp1: entered allmulticast mode [ 153.740238][ T29] audit: type=1400 audit(1730580971.503:379): avc: denied { setopt } for pid=7251 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.765146][ T29] audit: type=1400 audit(1730580971.503:380): avc: denied { accept } for pid=7251 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.829475][ T29] audit: type=1400 audit(1730580971.523:381): avc: denied { write } for pid=7251 comm="syz.2.370" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.859750][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.890589][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.007940][ T29] audit: type=1400 audit(1730580971.793:382): avc: denied { mount } for pid=7261 comm="syz.2.374" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.062711][ T29] audit: type=1400 audit(1730580971.843:383): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.174014][ T968] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.359126][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 154.427977][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.618797][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.956448][ T968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.029869][ T968] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.164870][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.190526][ T968] usb 4-1: config 0 descriptor?? [ 155.871877][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 155.936546][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 156.146301][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 156.155240][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 156.163999][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 156.171390][ T968] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 156.196506][ T968] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input18 [ 156.359406][ T968] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 157.011988][ T968] usb 4-1: USB disconnect, device number 11 [ 157.274026][ T1808] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.394361][ T29] audit: type=1400 audit(1730580975.183:384): avc: denied { sqpoll } for pid=7300 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.422483][ T7301] QAT: Invalid ioctl -1006070732 [ 157.425457][ T1808] usb 5-1: Using ep0 maxpacket: 8 [ 157.434192][ T7301] QAT: Invalid ioctl 29748 [ 157.455915][ T1808] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.487372][ T1808] usb 5-1: config 179 has no interface number 0 [ 157.510359][ T1808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.566163][ T1808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.578561][ T1808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.590277][ T1808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.602433][ T1808] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.616740][ T1808] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.625876][ T1808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.648278][ T7292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.659497][ T7304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.863300][ T1808] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 158.085778][ T1808] usb 5-1: USB disconnect, device number 7 [ 158.091629][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.091653][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.122470][ T1808] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 158.423911][ T965] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.124460][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 159.131160][ T965] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 159.139425][ T965] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 159.247308][ T965] usb 2-1: config 0 has no interface number 0 [ 159.278879][ T965] usb 2-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.280327][ T7315] loop2: detected capacity change from 0 to 7 [ 159.298167][ T7315] loop2: [POWERTEC] p1 p2 p3 [ 159.304049][ T7315] loop2: p1 size 848045204 extends beyond EOD, truncated [ 159.306591][ T965] usb 2-1: config 0 interface 216 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 159.321922][ T7315] loop2: p2 start 1932423285 is beyond EOD, truncated [ 159.331108][ T965] usb 2-1: config 0 interface 216 has no altsetting 1 [ 159.380036][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 159.386333][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 159.447855][ T965] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 159.463993][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.471997][ T965] usb 2-1: Product: syz [ 159.476346][ T965] usb 2-1: Manufacturer: syz [ 159.481081][ T965] usb 2-1: SerialNumber: syz [ 159.764125][ T965] usb 2-1: config 0 descriptor?? [ 159.951305][ T7332] dlm: no local IP address has been set [ 159.956969][ T7332] dlm: cannot start dlm midcomms -107 [ 160.007830][ T965] hso 2-1:0.216: Not our interface [ 160.014305][ T965] usb-storage 2-1:0.216: USB Mass Storage device detected [ 160.404337][ T965] usb 2-1: USB disconnect, device number 10 [ 160.834096][ T7343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.413893][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 163.671918][ T7369] netlink: 52 bytes leftover after parsing attributes in process `syz.2.406'. [ 164.104356][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.337304][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 164.352884][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.367009][ T9] usb 5-1: Product: syz [ 164.372166][ T9] usb 5-1: Manufacturer: syz [ 164.378560][ T9] usb 5-1: SerialNumber: syz [ 164.386112][ T9] usb 5-1: config 0 descriptor?? [ 164.418073][ T9] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 164.431474][ T7374] vivid-000: ================= START STATUS ================= [ 164.439463][ T7374] vivid-000: Generate PTS: true [ 164.445192][ T7374] vivid-000: Generate SCR: true [ 164.450149][ T7374] tpg source WxH: 640x360 (Y'CbCr) [ 164.455332][ T7374] tpg field: 1 [ 164.458761][ T7374] tpg crop: 640x360@0x0 [ 164.462991][ T7374] tpg compose: 640x360@0x0 [ 164.467522][ T7374] tpg colorspace: 8 [ 164.471391][ T7374] tpg transfer function: 0/0 [ 164.476132][ T7374] tpg Y'CbCr encoding: 0/0 [ 164.480833][ T7374] tpg quantization: 0/0 [ 164.486418][ T7374] tpg RGB range: 0/2 [ 164.488340][ T29] audit: type=1400 audit(1730580982.213:385): avc: denied { create } for pid=7371 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.490415][ T7374] vivid-000: ================== END STATUS ================== [ 164.575549][ T29] audit: type=1400 audit(1730580982.213:386): avc: denied { bind } for pid=7371 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.638548][ T7367] mmap: syz.4.405 (7367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.774479][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 164.833094][ T29] audit: type=1400 audit(1730580982.613:387): avc: denied { create } for pid=7380 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 164.859195][ T29] audit: type=1400 audit(1730580982.633:388): avc: denied { create } for pid=7380 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 164.934208][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 164.942392][ T25] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 164.952521][ T25] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 164.962268][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 164.979154][ T25] usb 3-1: config 0 has no interface number 0 [ 164.985661][ T25] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.134737][ T25] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.146212][ T25] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 165.276727][ T29] audit: type=1400 audit(1730580983.053:389): avc: denied { create } for pid=7384 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 165.767838][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 165.777004][ T25] usb 3-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 165.785561][ T25] usb 3-1: Product: syz [ 165.789786][ T25] usb 3-1: Manufacturer: syz [ 165.806163][ T25] usb 3-1: config 0 descriptor?? [ 165.812179][ T7374] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.243623][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.252310][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.262761][ T7373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.407'. [ 166.478790][ T7403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 166.485336][ T7403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.499693][ T7403] vhci_hcd vhci_hcd.0: Device attached [ 166.761386][ T5873] vhci_hcd: vhci_device speed not set [ 166.849363][ T965] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 166.914241][ T5873] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 167.030203][ T7411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7411 comm=syz.4.416 [ 167.076270][ T5902] usb 5-1: USB disconnect, device number 8 [ 167.109406][ T965] usb 2-1: config 0 has no interfaces? [ 167.119285][ T965] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.135867][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.183337][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 167.258675][ T7412] veth0_macvtap: left promiscuous mode [ 167.267693][ T965] usb 2-1: config 0 descriptor?? [ 167.388761][ T7418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.398731][ T25] usb 3-1: USB disconnect, device number 13 [ 167.413194][ T29] audit: type=1400 audit(1730580985.163:390): avc: denied { listen } for pid=7413 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.433139][ T29] audit: type=1400 audit(1730580985.193:391): avc: denied { accept } for pid=7413 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.524582][ T7405] vhci_hcd: cannot find a urb of seqnum 46724 max seqnum 1 [ 167.537073][ T6853] vhci_hcd: stop threads [ 167.541328][ T6853] vhci_hcd: release socket [ 167.545983][ T6853] vhci_hcd: disconnect device [ 167.645939][ T9] usb 2-1: USB disconnect, device number 11 [ 168.329942][ T29] audit: type=1400 audit(1730580986.113:392): avc: denied { create } for pid=7437 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.541701][ T29] audit: type=1400 audit(1730580986.323:393): avc: denied { listen } for pid=7437 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.644254][ T29] audit: type=1400 audit(1730580986.353:394): avc: denied { bind } for pid=7437 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.716814][ T29] audit: type=1400 audit(1730580987.493:395): avc: denied { execute } for pid=7462 comm="syz.4.430" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.493289][ T7473] netlink: 5 bytes leftover after parsing attributes in process `syz.2.432'. [ 170.508677][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 170.839755][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 171.008329][ T7488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.527112][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 171.607555][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 172.624420][ T5873] vhci_hcd: vhci_device speed not set [ 173.988328][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.446'. [ 174.434905][ T7537] gtp0: entered promiscuous mode [ 174.439917][ T7537] gtp0: entered allmulticast mode [ 174.682557][ T7539] gtp2: entered promiscuous mode [ 174.687602][ T7539] gtp2: entered allmulticast mode [ 174.984117][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.378971][ T5138] Bluetooth: hci3: command 0x0406 tx timeout [ 176.385120][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 176.392312][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 176.399038][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 176.424029][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 176.568011][ T25] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 176.602550][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.642196][ T25] usb 4-1: Product: syz [ 176.663161][ T25] usb 4-1: Manufacturer: syz [ 176.682881][ T25] usb 4-1: SerialNumber: syz [ 176.824674][ T25] usb 4-1: config 0 descriptor?? [ 176.838561][ T25] gspca_main: sq905-2.14.0 probing 2770:9120 [ 176.853949][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.008206][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 177.203689][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 177.219228][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.232227][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.359263][ T7567] gtp3: entered promiscuous mode [ 177.364523][ T7567] gtp3: entered allmulticast mode [ 177.630912][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.855653][ T25] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 177.863342][ T25] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 177.876717][ T29] audit: type=1400 audit(1730580995.663:396): avc: denied { mount } for pid=7530 comm="syz.3.449" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 177.994603][ T9] usb 2-1: config 0 descriptor?? [ 178.014130][ T7562] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 178.102594][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 178.118301][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 178.274082][ T5873] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.434527][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 178.447715][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 178.466411][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 178.470753][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 178.514902][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.532511][ T5873] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.559571][ T5873] usb 3-1: config 0 has no interface number 0 [ 178.576685][ T5873] usb 3-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd [ 178.597789][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.621623][ T5873] usb 3-1: Product: syz [ 178.626061][ T5873] usb 3-1: Manufacturer: syz [ 178.630857][ T5873] usb 3-1: SerialNumber: syz [ 178.694068][ T5873] usb 3-1: config 0 descriptor?? [ 178.777471][ T51] usb 2-1: USB disconnect, device number 12 [ 178.924848][ T5873] qmi_wwan 3-1:0.1: probe with driver qmi_wwan failed with error -22 [ 179.061230][ T5873] usb 3-1: USB disconnect, device number 14 [ 179.154650][ T7590] gtp1: entered promiscuous mode [ 179.159833][ T7590] gtp1: entered allmulticast mode [ 179.654558][ T9] usb 4-1: USB disconnect, device number 12 [ 179.683204][ T29] audit: type=1400 audit(1730580997.463:397): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 179.731055][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.2.464'. [ 179.868843][ T7599] netlink: 180 bytes leftover after parsing attributes in process `syz.0.466'. [ 180.107190][ T7595] gtp1: entered promiscuous mode [ 180.112176][ T7595] gtp1: entered allmulticast mode [ 180.139490][ T29] audit: type=1400 audit(1730580997.923:398): avc: denied { execute } for pid=7606 comm="syz.2.469" path="/dev/bsg/cpuacct.usage_all" dev="devtmpfs" ino=2926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 180.254159][ T5902] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.904329][ T5902] usb 1-1: device descriptor read/64, error -71 [ 181.094103][ T968] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.143902][ T5902] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 181.324163][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 181.341999][ T968] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 181.351241][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.368225][ T968] usb 3-1: config 0 descriptor?? [ 181.383894][ T5902] usb 1-1: device descriptor read/64, error -71 [ 181.408126][ T968] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 181.494176][ T5902] usb usb1-port1: attempt power cycle [ 181.602849][ T6855] usb 3-1: Failed to submit usb control message: -71 [ 181.602986][ T51] usb 3-1: USB disconnect, device number 15 [ 181.610340][ T6855] usb 3-1: unable to send the bmi data to the device: -71 [ 181.630182][ T6855] usb 3-1: unable to get target info from device [ 181.636603][ T6855] usb 3-1: could not get target info (-71) [ 181.643161][ T6855] usb 3-1: could not probe fw (-71) [ 181.834128][ T5902] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.899778][ T5902] usb 1-1: device descriptor read/8, error -71 [ 182.505400][ T7638] overlayfs: failed to resolve './file1': -2 [ 182.569032][ T7637] xt_recent: Unsupported userspace flags (00000076) [ 182.607394][ T29] audit: type=1400 audit(1730581000.393:399): avc: denied { create } for pid=7636 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.748658][ T5902] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.835782][ T5902] usb 1-1: device descriptor read/8, error -71 [ 183.025293][ T5902] usb usb1-port1: unable to enumerate USB device [ 183.921354][ T7652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.479'. [ 183.959561][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.934024][ T5902] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 187.945096][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.999167][ T7696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.493'. [ 188.095290][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.131927][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.146910][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.155720][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 188.174387][ T8] usb 2-1: config 0 descriptor?? [ 188.189425][ T5902] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.199565][ T5902] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 188.216570][ T5902] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 188.232331][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.242900][ T5902] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 188.253748][ T7698] syzkaller0: entered promiscuous mode [ 188.259377][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.267704][ T5902] usb 4-1: Product: syz [ 188.271885][ T7698] syzkaller0: entered allmulticast mode [ 188.278536][ T5902] usb 4-1: Manufacturer: syz [ 188.284036][ T5902] usb 4-1: SerialNumber: syz [ 188.296119][ T5902] usb 4-1: config 0 descriptor?? [ 188.305840][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.534879][ T7683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.552769][ T5902] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 188.590375][ T8] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 188.617230][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input23 [ 188.920162][ T8] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 190.075142][ T8] usb 2-1: USB disconnect, device number 13 [ 190.123926][ T5902] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 190.285331][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 190.295050][ T5902] usb 3-1: config 42 has an invalid interface number: 52 but max is 1 [ 190.317847][ T5902] usb 3-1: config 42 has an invalid interface number: 181 but max is 1 [ 190.340155][ T5902] usb 3-1: config 42 has 3 interfaces, different from the descriptor's value: 2 [ 190.379485][ T5902] usb 3-1: config 42 has no interface number 0 [ 190.403164][ T5902] usb 3-1: config 42 has no interface number 2 [ 190.419630][ T5902] usb 3-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.467748][ T5902] usb 3-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 190.505957][ T5902] usb 3-1: config 42 interface 52 has no altsetting 0 [ 190.512736][ T5902] usb 3-1: config 42 interface 181 has no altsetting 0 [ 190.552812][ T5902] usb 3-1: config 42 interface 1 has no altsetting 0 [ 190.575313][ T5902] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9 [ 190.604900][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.657202][ T5902] usb 3-1: Product: syz [ 190.671453][ T5902] usb 3-1: Manufacturer: syz [ 190.688847][ T5902] usb 3-1: SerialNumber: syz [ 190.732144][ T968] usb 4-1: USB disconnect, device number 13 [ 191.618718][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.631940][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.679939][ T5902] xr_serial 3-1:42.52: xr_serial converter detected [ 191.689452][ T5902] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 191.704155][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 191.719515][ T5902] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 191.762780][ T5902] usb 3-1: USB disconnect, device number 16 [ 191.786049][ T5902] xr_serial 3-1:42.52: device disconnected [ 191.858577][ T8] usb 2-1: too many configurations: 61, using maximum allowed: 8 [ 191.891792][ T8] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 191.900987][ T8] usb 2-1: New USB device strings: Mfr=3, Product=34, SerialNumber=38 [ 191.921059][ T8] usb 2-1: Product: syz [ 191.938180][ T8] usb 2-1: Manufacturer: syz [ 191.959459][ T8] usb 2-1: SerialNumber: syz [ 191.975128][ T8] usb 2-1: config 0 descriptor?? [ 192.203218][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.254597][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.295196][ T8] mos7840 2-1:0.0: required endpoints missing [ 192.587287][ T8] usb 2-1: USB disconnect, device number 14 [ 193.037911][ T7745] gtp1: entered promiscuous mode [ 193.042933][ T7745] gtp1: entered allmulticast mode [ 194.469354][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.479475][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.806710][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.925330][ T7776] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.597487][ T7771] netlink: 'syz.3.514': attribute type 11 has an invalid length. [ 196.756939][ T7782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.516'. [ 197.306863][ T29] audit: type=1400 audit(1730581015.090:400): avc: denied { setopt } for pid=7797 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.341958][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.523450][ T29] audit: type=1400 audit(1730581017.300:401): avc: denied { mount } for pid=7819 comm="syz.4.527" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.602622][ T29] audit: type=1400 audit(1730581017.380:402): avc: denied { watch } for pid=7819 comm="syz.4.527" path="/101/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 199.883916][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.204017][ T29] audit: type=1400 audit(1730581017.980:403): avc: denied { create } for pid=7825 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 200.244119][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 200.249400][ T7824] x_tables: ip_tables: ah match: only valid for protocol 51 [ 200.250867][ T25] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 200.266075][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.299016][ T25] usb 5-1: config 0 descriptor?? [ 200.328658][ T25] as10x_usb: device has been detected [ 200.342688][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 200.404314][ T25] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 200.471009][ T25] as10x_usb: error during firmware upload part1 [ 200.478418][ T25] Registered device nBox DVB-T Dongle [ 200.901071][ T9] usb 5-1: USB disconnect, device number 9 [ 200.973983][ T9] Unregistered device nBox DVB-T Dongle [ 200.976487][ T9] as10x_usb: device has been disconnected [ 201.581068][ T29] audit: type=1400 audit(1730581019.050:404): avc: denied { write } for pid=7838 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 201.784747][ T7849] process 'syz.3.533' launched './file1' with NULL argv: empty string added [ 201.801983][ T29] audit: type=1400 audit(1730581019.580:405): avc: denied { execute_no_trans } for pid=7843 comm="syz.3.533" path="/118/file1" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.394051][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 202.645316][ T29] audit: type=1400 audit(1730581020.430:406): avc: denied { bind } for pid=7858 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.733595][ T29] audit: type=1400 audit(1730581020.510:407): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 202.826933][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.837217][ T9] usb 5-1: device not accepting address 10, error -71 [ 203.443530][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 203.471269][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 203.539120][ T29] audit: type=1326 audit(1730581021.320:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9db57e719 code=0x0 [ 203.575863][ T29] audit: type=1400 audit(1730581021.360:409): avc: denied { connect } for pid=7880 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.273915][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 204.290155][ T29] audit: type=1400 audit(1730581022.040:410): avc: denied { shutdown } for pid=7880 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.335197][ T5902] IPVS: starting estimator thread 0... [ 204.424688][ T7890] IPVS: using max 47 ests per chain, 112800 per kthread [ 204.523100][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 204.889257][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 205.327320][ T29] audit: type=1400 audit(1730581022.830:411): avc: denied { read } for pid=7896 comm="syz.0.550" name="usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.353915][ T29] audit: type=1400 audit(1730581022.830:412): avc: denied { open } for pid=7896 comm="syz.0.550" path="/dev/usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.353953][ T29] audit: type=1400 audit(1730581022.880:413): avc: denied { ioctl } for pid=7896 comm="syz.0.550" path="/dev/usbmon5" dev="devtmpfs" ino=736 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.534943][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.542409][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.542429][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.544592][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.544611][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.544631][ T25] usb 3-1: SerialNumber: syz [ 205.601561][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.713436][ T7904] ======================================================= [ 205.713436][ T7904] WARNING: The mand mount option has been deprecated and [ 205.713436][ T7904] and is ignored by this kernel. Remove the mand [ 205.713436][ T7904] option from the mount to silence this warning. [ 205.713436][ T7904] ======================================================= [ 205.713732][ T7904] 9pnet_virtio: no channels available for device /dev/md0 [ 205.721355][ T29] audit: type=1400 audit(1730581023.500:414): avc: denied { create } for pid=7905 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 205.762556][ T7892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.548'. [ 205.763041][ T7892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7892 comm=syz.2.548 [ 205.770821][ T25] usb 3-1: 0:2 : does not exist [ 205.770946][ T25] usb 3-1: unit 48 not found! [ 205.791919][ T25] usb 3-1: USB disconnect, device number 17 [ 205.837418][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.871952][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.088793][ T7915] netlink: 'syz.1.553': attribute type 4 has an invalid length. [ 206.672402][ T7927] FAULT_INJECTION: forcing a failure. [ 206.672402][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.775546][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.4.558 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 206.786168][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.796215][ T7927] Call Trace: [ 206.799471][ T7927] [ 206.802379][ T7927] dump_stack_lvl+0x16c/0x1f0 [ 206.807033][ T7927] should_fail_ex+0x497/0x5b0 [ 206.811684][ T7927] _copy_from_iter+0x2a1/0x1560 [ 206.816510][ T7927] ? __pfx__copy_from_iter+0x10/0x10 [ 206.821767][ T7927] ? __virt_addr_valid+0x1a4/0x590 [ 206.826855][ T7927] ? __virt_addr_valid+0x5e/0x590 [ 206.831853][ T7927] ? __phys_addr_symbol+0x30/0x80 [ 206.836852][ T7927] ? __check_object_size+0x488/0x710 [ 206.842111][ T7927] netlink_sendmsg+0x813/0xd70 [ 206.846869][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.852134][ T7927] ____sys_sendmsg+0xaaf/0xc90 [ 206.856875][ T7927] ? copy_msghdr_from_user+0x10b/0x160 [ 206.862306][ T7927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.867570][ T7927] ? __pfx___lock_acquire+0x10/0x10 [ 206.872742][ T7927] ___sys_sendmsg+0x135/0x1e0 [ 206.877393][ T7927] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.882568][ T7927] ? lock_acquire+0x2f/0xb0 [ 206.887043][ T7927] ? __fget_files+0x40/0x3f0 [ 206.891615][ T7927] ? fdget+0x176/0x210 [ 206.895662][ T7927] __sys_sendmsg+0x117/0x1f0 [ 206.900225][ T7927] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.905310][ T7927] ? fdget_pos+0x18b/0x360 [ 206.909711][ T7927] do_syscall_64+0xcd/0x250 [ 206.914187][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.920057][ T7927] RIP: 0033:0x7fbcc377e719 [ 206.924449][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.944040][ T7927] RSP: 002b:00007fbcc44a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.952435][ T7927] RAX: ffffffffffffffda RBX: 00007fbcc3935f80 RCX: 00007fbcc377e719 [ 206.960388][ T7927] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 206.968358][ T7927] RBP: 00007fbcc44a5090 R08: 0000000000000000 R09: 0000000000000000 [ 206.976306][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.984252][ T7927] R13: 0000000000000000 R14: 00007fbcc3935f80 R15: 00007ffd562337d8 [ 206.992205][ T7927] [ 207.160304][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 207.174557][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 207.217742][ T29] audit: type=1326 audit(1730581025.000:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.2.559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f585597e719 code=0x0 [ 207.284267][ T7941] loop2: detected capacity change from 0 to 7 [ 207.292282][ T7941] loop2: [POWERTEC] p1 p2 p3 [ 207.301597][ T7941] loop2: p1 size 848045204 extends beyond EOD, truncated [ 207.337801][ T7941] loop2: p2 start 1932423285 is beyond EOD, truncated [ 207.388534][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 207.389754][ T7719] udevd[7719]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 207.867594][ T7950] gtp2: entered promiscuous mode [ 207.872603][ T7950] gtp2: entered allmulticast mode [ 208.543803][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.658058][ T7959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.569'. [ 209.283449][ T29] audit: type=1400 audit(1730581027.060:416): avc: denied { ioctl } for pid=7958 comm="syz.3.569" path="ipc:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.438975][ T29] audit: type=1326 audit(1730581027.220:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0137e719 code=0x0 [ 209.798476][ T7970] FAULT_INJECTION: forcing a failure. [ 209.798476][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 209.827342][ T7970] CPU: 1 UID: 0 PID: 7970 Comm: syz.4.572 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 209.837944][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.847982][ T7970] Call Trace: [ 209.851246][ T7970] [ 209.854161][ T7970] dump_stack_lvl+0x16c/0x1f0 [ 209.858828][ T7970] should_fail_ex+0x497/0x5b0 [ 209.863491][ T7970] should_failslab+0xc2/0x120 [ 209.868155][ T7970] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 209.873514][ T7970] ? skb_clone+0x190/0x3f0 [ 209.877922][ T7970] skb_clone+0x190/0x3f0 [ 209.882151][ T7970] netlink_deliver_tap+0xab3/0xd90 [ 209.887257][ T7970] netlink_unicast+0x5e1/0x7f0 [ 209.892014][ T7970] ? __pfx_netlink_unicast+0x10/0x10 [ 209.897299][ T7970] netlink_sendmsg+0x8b8/0xd70 [ 209.902058][ T7970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.907346][ T7970] ____sys_sendmsg+0xaaf/0xc90 [ 209.912100][ T7970] ? copy_msghdr_from_user+0x10b/0x160 [ 209.917544][ T7970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.922823][ T7970] ? __pfx___lock_acquire+0x10/0x10 [ 209.928007][ T7970] ___sys_sendmsg+0x135/0x1e0 [ 209.932669][ T7970] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.937862][ T7970] ? lock_acquire+0x2f/0xb0 [ 209.942346][ T7970] ? __fget_files+0x40/0x3f0 [ 209.946936][ T7970] ? fdget+0x176/0x210 [ 209.950995][ T7970] __sys_sendmsg+0x117/0x1f0 [ 209.955571][ T7970] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.960663][ T7970] ? __fget_files+0x244/0x3f0 [ 209.965342][ T7970] do_syscall_64+0xcd/0x250 [ 209.969833][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.975729][ T7970] RIP: 0033:0x7fbcc377e719 [ 209.980138][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.999742][ T7970] RSP: 002b:00007fbcc44a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.008147][ T7970] RAX: ffffffffffffffda RBX: 00007fbcc3935f80 RCX: 00007fbcc377e719 [ 210.016106][ T7970] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 210.024062][ T7970] RBP: 00007fbcc44a5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.032016][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.039985][ T7970] R13: 0000000000000000 R14: 00007fbcc3935f80 R15: 00007ffd562337d8 [ 210.047966][ T7970] [ 210.392009][ T29] audit: type=1400 audit(1730581028.170:418): avc: denied { bind } for pid=7981 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.422477][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.552002][ T29] audit: type=1400 audit(1730581028.170:419): avc: denied { write } for pid=7981 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.734031][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 210.749014][ T25] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 210.771941][ T25] usb 2-1: config 0 has no interface number 0 [ 210.790384][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 210.807734][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.820545][ T25] usb 2-1: Product: syz [ 210.825832][ T25] usb 2-1: Manufacturer: syz [ 210.830719][ T25] usb 2-1: SerialNumber: syz [ 210.844256][ T25] usb 2-1: config 0 descriptor?? [ 210.851963][ T25] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 210.859675][ T25] usb 2-1: No valid video chain found. [ 211.404928][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.576215][ T25] usb 5-1: config index 0 descriptor too short (expected 82, got 18) [ 211.602491][ T25] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 211.612119][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.641781][ T25] usb 5-1: config 0 descriptor?? [ 211.661689][ T8004] FAULT_INJECTION: forcing a failure. [ 211.661689][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.681602][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.3.581 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 211.692207][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.702264][ T8004] Call Trace: [ 211.705537][ T8004] [ 211.708467][ T8004] dump_stack_lvl+0x16c/0x1f0 [ 211.713147][ T8004] should_fail_ex+0x497/0x5b0 [ 211.717827][ T8004] _copy_from_user+0x2e/0xd0 [ 211.722421][ T8004] do_sock_getsockopt+0x5f6/0x800 [ 211.727451][ T8004] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 211.733003][ T8004] ? __fget_files+0x244/0x3f0 [ 211.737696][ T8004] __sys_getsockopt+0x1a1/0x270 [ 211.742554][ T8004] ? __pfx___sys_getsockopt+0x10/0x10 [ 211.747924][ T8004] ? fput+0x30/0x390 [ 211.751820][ T8004] ? ksys_write+0x1ad/0x260 [ 211.756332][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 211.761194][ T8004] __x64_sys_getsockopt+0xbd/0x160 [ 211.766305][ T8004] ? do_syscall_64+0x91/0x250 [ 211.770977][ T8004] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.776182][ T8004] do_syscall_64+0xcd/0x250 [ 211.780693][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.786597][ T8004] RIP: 0033:0x7feb0137e719 [ 211.791007][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.810598][ T8004] RSP: 002b:00007feb0210e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 211.818998][ T8004] RAX: ffffffffffffffda RBX: 00007feb01535f80 RCX: 00007feb0137e719 [ 211.826951][ T8004] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000004 [ 211.834906][ T8004] RBP: 00007feb0210e090 R08: 0000000020000000 R09: 0000000000000000 [ 211.842859][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.850813][ T8004] R13: 0000000000000000 R14: 00007feb01535f80 R15: 00007fff7eed7d78 [ 211.858782][ T8004] [ 211.894578][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.895007][ T29] audit: type=1400 audit(1730581029.660:420): avc: denied { setopt } for pid=8000 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.937154][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.101962][ T29] audit: type=1400 audit(1730581029.880:421): avc: denied { create } for pid=8012 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 212.122528][ T8016] capability: warning: `syz.4.580' uses 32-bit capabilities (legacy support in use) [ 212.124020][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.143055][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.199042][ T29] audit: type=1400 audit(1730581029.890:422): avc: denied { ioctl } for pid=8012 comm="syz.2.585" path="socket:[17373]" dev="sockfs" ino=17373 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 212.294871][ T8018] nbd2: detected capacity change from 0 to 12 [ 212.302200][ T8018] block nbd2: NBD_DISCONNECT [ 212.314942][ T5967] block nbd2: Send control failed (result -89) [ 212.329461][ T5967] block nbd2: Request send failed, requeueing [ 212.347780][ T5967] block nbd2: Disconnected due to user request. [ 212.369208][ T8018] block nbd2: Send disconnect failed -89 [ 212.382559][ T58] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.396381][ T58] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.412616][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.441559][ T8015] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 212.452482][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.463693][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.472933][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.485434][ T8018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64000 sclass=netlink_route_socket pid=8018 comm=syz.2.585 [ 212.558722][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.569003][ T8021] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 212.588771][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.625365][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.723236][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.738488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.777949][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.787153][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.795243][ T29] audit: type=1400 audit(1730581030.580:423): avc: denied { map } for pid=8012 comm="syz.2.585" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 212.796736][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.829124][ T9] usb 2-1: USB disconnect, device number 15 [ 212.840646][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.857218][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.865650][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.881900][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.893049][ T5967] ldm_validate_partition_table(): Disk read failed. [ 212.900018][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.910491][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.923130][ T5967] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.932576][ T5967] Buffer I/O error on dev nbd2, logical block 0, async page read [ 212.941607][ T5967] Dev nbd2: unable to read RDB block 0 [ 212.947670][ T5967] nbd2: unable to read partition table [ 212.953465][ T5967] nbd2: partition table beyond EOD, truncated [ 213.017958][ T5967] ldm_validate_partition_table(): Disk read failed. [ 213.035919][ T5967] Dev nbd2: unable to read RDB block 0 [ 213.046011][ T5967] nbd2: unable to read partition table [ 213.057294][ T5967] nbd2: partition table beyond EOD, truncated [ 213.070216][ T8019] ldm_validate_partition_table(): Disk read failed. [ 213.082996][ T8019] Dev nbd2: unable to read RDB block 0 [ 213.102654][ T8019] nbd2: unable to read partition table [ 213.117094][ T8019] nbd2: partition table beyond EOD, truncated [ 213.222927][ T29] audit: type=1400 audit(1730581031.000:424): avc: denied { getopt } for pid=8032 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.862734][ T8046] 9pnet_virtio: no channels available for device syz [ 214.178169][ T25] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 214.429082][ T25] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 214.455240][ T25] mxuport 5-1:0.0: probe with driver mxuport failed with error -71 [ 214.465914][ T29] audit: type=1400 audit(1730581032.250:425): avc: denied { setopt } for pid=8051 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.596592][ T8063] input: syz1 as /devices/virtual/input/input26 [ 214.631665][ T25] usb 5-1: USB disconnect, device number 12 [ 214.867742][ T29] audit: type=1326 audit(1730581032.650:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f1f7e719 code=0x7ffc0000 [ 214.890950][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.940088][ T29] audit: type=1326 audit(1730581032.650:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f1f7e719 code=0x7ffc0000 [ 214.999468][ T29] audit: type=1326 audit(1730581032.700:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f68f1f7e719 code=0x7ffc0000 [ 215.022688][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.048134][ T8072] 9pnet_virtio: no channels available for device syz [ 215.077107][ T29] audit: type=1326 audit(1730581032.700:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f1f7e719 code=0x7ffc0000 [ 215.227162][ T8081] overlayfs: failed to resolve './file1': -2 [ 215.526406][ T8094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.609'. [ 216.496840][ T29] audit: type=1400 audit(1730581034.270:430): avc: denied { ioctl } for pid=8106 comm="syz.4.614" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 216.657063][ T8109] bridge_slave_0: left allmulticast mode [ 216.677117][ T8109] bridge_slave_0: left promiscuous mode [ 216.693718][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.694199][ T8112] tmpfs: Unknown parameter 'usrquotalave_0' [ 216.764147][ T5873] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 216.926211][ T5873] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 216.938426][ T5873] usb 2-1: config 0 has no interface number 0 [ 216.958815][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.011247][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 217.034389][ T5873] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 217.081947][ T8119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.619'. [ 217.091594][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.153862][ T5873] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 217.162915][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.172740][ T29] audit: type=1400 audit(1730581034.950:431): avc: denied { getopt } for pid=8118 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.214489][ T5873] usb 2-1: config 0 descriptor?? [ 217.220086][ T8096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.294188][ T5873] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 217.310871][ T8119] syzkaller0: entered promiscuous mode [ 217.323951][ T8119] syzkaller0: entered allmulticast mode [ 217.527615][ T29] audit: type=1400 audit(1730581035.300:432): avc: denied { read } for pid=8133 comm="syz.2.625" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 217.563679][ T29] audit: type=1400 audit(1730581035.300:433): avc: denied { open } for pid=8133 comm="syz.2.625" path="/135/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 217.591899][ T5902] usb 2-1: USB disconnect, device number 16 [ 217.592741][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 217.610579][ T8096] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 217.618255][ T5902] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 217.619294][ T29] audit: type=1400 audit(1730581035.300:434): avc: denied { ioctl } for pid=8133 comm="syz.2.625" path="/135/file0/file0" dev="fuse" ino=0 ioctlcmd=0x31f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 217.634779][ T8140] kernel read not supported for file /rmdF¼ì (pid: 8140 comm: syz.4.626) [ 217.683390][ T8105] delete_channel: no stack [ 217.708380][ T8105] delete_channel: no stack [ 218.843994][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.013995][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 219.023601][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.052134][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.077589][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.112782][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.214091][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.242145][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.262625][ T8181] 9pnet_virtio: no channels available for device syz [ 219.269573][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.514268][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 219.535684][ T25] usbtmc 5-1:16.0: can't read capabilities [ 219.759185][ T5902] usb 5-1: USB disconnect, device number 13 [ 221.018121][ T8174] netem: invalid attributes len -1 [ 221.024168][ T8174] netem: change failed [ 221.030064][ T8189] geneve2: entered promiscuous mode [ 221.044187][ T8189] geneve2: entered allmulticast mode [ 221.171258][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 221.442779][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 221.442794][ T29] audit: type=1400 audit(1730581039.220:437): avc: denied { connect } for pid=8206 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 221.449955][ T8209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.564231][ T29] audit: type=1400 audit(1730581039.220:438): avc: denied { name_connect } for pid=8206 comm="syz.0.650" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 221.670915][ T29] audit: type=1400 audit(1730581039.440:439): avc: denied { accept } for pid=8215 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.714013][ T29] audit: type=1400 audit(1730581039.440:440): avc: denied { read } for pid=8215 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.735019][ T29] audit: type=1400 audit(1730581039.520:441): avc: denied { shutdown } for pid=8215 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.863961][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 222.037265][ T5902] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.064396][ T5902] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 222.100074][ T5902] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 222.133442][ T5902] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.476444][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.535980][ T29] audit: type=1400 audit(1730581040.285:442): avc: denied { read } for pid=8225 comm="syz.1.655" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 222.562179][ T5902] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.632717][ T29] audit: type=1400 audit(1730581040.285:443): avc: denied { open } for pid=8225 comm="syz.1.655" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 222.718048][ T29] audit: type=1400 audit(1730581040.396:444): avc: denied { getopt } for pid=8227 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.760544][ T8236] input: syz0 as /devices/virtual/input/input27 [ 222.843394][ T29] audit: type=1326 audit(1730581040.637:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.2.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f585597e719 code=0x0 [ 222.893447][ T8232] block nbd2: shutting down sockets [ 222.957335][ T5902] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 222.991988][ T5902] usb 5-1: USB disconnect, device number 14 [ 223.882282][ T8255] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.667'. [ 223.891595][ T8255] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.631881][ T29] audit: type=1326 audit(1730581041.921:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585597e719 code=0x7ffc0000 [ 225.421058][ T8276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 225.427586][ T8276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 225.435138][ T8276] vhci_hcd vhci_hcd.0: Device attached [ 226.070733][ T8280] vhci_hcd: connection closed [ 226.073150][ T6853] vhci_hcd: stop threads [ 226.093750][ T6853] vhci_hcd: release socket [ 226.100669][ T25] vhci_hcd: vhci_device speed not set [ 226.133114][ T6853] vhci_hcd: disconnect device [ 226.434753][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 226.435070][ T29] audit: type=1400 audit(1730581044.239:460): avc: denied { read } for pid=8290 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.444661][ T8291] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 226.471333][ T8291] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 226.480343][ T8291] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 227.465611][ T29] audit: type=1400 audit(1730581045.262:461): avc: denied { setopt } for pid=8311 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.563364][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'. [ 227.572403][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 227.610687][ T5838] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 227.899464][ T5838] Bluetooth: hci3: Malformed LE Event: 0x0d [ 228.032575][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.042576][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.058865][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 228.109127][ T29] audit: type=1400 audit(1730581045.913:462): avc: denied { write } for pid=8335 comm="syz.2.694" path="socket:[18917]" dev="sockfs" ino=18917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.132141][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.146252][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.154937][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.214535][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.241982][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.303902][ T29] audit: type=1400 audit(1730581045.923:463): avc: denied { write } for pid=8335 comm="syz.2.694" path="socket:[18912]" dev="sockfs" ino=18912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.335042][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.352071][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.419743][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.481427][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.501884][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.523824][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.541180][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.561095][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.572643][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.582433][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 228.598725][ T8332] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 229.998532][ T5838] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 230.302623][ T29] audit: type=1400 audit(1730581048.119:464): avc: denied { write } for pid=8393 comm="syz.4.714" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 230.423054][ T8398] 9pnet_virtio: no channels available for device syz [ 230.548878][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.718533][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 230.725749][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.738535][ T5902] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.748437][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.761911][ T5902] usb 5-1: config 0 descriptor?? [ 230.954180][ T8417] virtio-fs: tag <(null)> not found [ 230.988709][ T5902] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 231.124778][ T29] audit: type=1400 audit(1730581048.931:465): avc: denied { bind } for pid=8416 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.147155][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 231.288512][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.720'. [ 231.561020][ T29] audit: type=1400 audit(1730581049.362:466): avc: denied { map } for pid=8393 comm="syz.4.714" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.587654][ T29] audit: type=1400 audit(1730581049.402:467): avc: denied { create } for pid=8393 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 231.621815][ T29] audit: type=1400 audit(1730581049.432:468): avc: denied { bind } for pid=8393 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 231.663626][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 231.672259][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 231.682757][ T5838] Bluetooth: hci2: hardware error 0x00 [ 232.581640][ T29] audit: type=1400 audit(1730581050.394:469): avc: denied { map } for pid=8452 comm="syz.0.727" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.690640][ T29] audit: type=1400 audit(1730581050.394:470): avc: denied { execute } for pid=8452 comm="syz.0.727" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.990339][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'. [ 233.158607][ T8470] 9pnet_virtio: no channels available for device syz [ 233.238910][ T5873] usb 5-1: USB disconnect, device number 15 [ 233.248672][ T5873] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 233.351178][ T8477] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 233.400806][ T8477] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 233.452740][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 233.652450][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 233.663845][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.918056][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 233.952037][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.976240][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.030361][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.075918][ T25] usb 2-1: Product: syz [ 234.098773][ T25] usb 2-1: Manufacturer: syz [ 234.103862][ T25] usb 2-1: SerialNumber: syz [ 234.190971][ T5838] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 234.200024][ T5838] Bluetooth: hci4: Injecting HCI hardware error event [ 234.208680][ T5838] Bluetooth: hci4: hardware error 0x00 [ 234.421737][ T25] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.499750][ T8487] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 234.523672][ T8487] netlink: 244 bytes leftover after parsing attributes in process `syz.4.738'. [ 234.753004][ T29] audit: type=1400 audit(1730581052.568:471): avc: denied { map } for pid=8484 comm="syz.3.739" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 235.279925][ T29] audit: type=1400 audit(1730581053.069:472): avc: denied { read write } for pid=8471 comm="syz.1.734" name="lp0" dev="devtmpfs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 235.312530][ T5873] usb 2-1: USB disconnect, device number 17 [ 235.377781][ T29] audit: type=1400 audit(1730581053.069:473): avc: denied { open } for pid=8471 comm="syz.1.734" path="/dev/usb/lp0" dev="devtmpfs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 235.411238][ T8472] usblp0: removed [ 236.762728][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 237.423595][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.444571][ T8536] team0: Port device bond0 added [ 237.470212][ T8536] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 237.528886][ T8536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.663193][ T8540] 9pnet_fd: Insufficient options for proto=fd [ 237.785592][ T29] audit: type=1400 audit(1730581055.603:474): avc: denied { mount } for pid=8544 comm="syz.2.759" name="/" dev="autofs" ino=19369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.489775][ T29] audit: type=1400 audit(1730581056.314:475): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.509708][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.612511][ T8555] netlink: 168 bytes leftover after parsing attributes in process `syz.4.763'. [ 238.636604][ T8555] netlink: 'syz.4.763': attribute type 2 has an invalid length. [ 238.704446][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.763'. [ 238.961560][ T29] audit: type=1400 audit(1730581056.784:476): avc: denied { write } for pid=8568 comm="syz.3.770" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 239.748917][ T29] audit: type=1400 audit(1730581057.575:477): avc: denied { read write } for pid=8588 comm="syz.4.779" name="mouse0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.149196][ T29] audit: type=1400 audit(1730581057.605:478): avc: denied { open } for pid=8588 comm="syz.4.779" path="/dev/input/mouse0" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.338783][ T8593] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 240.410210][ T8593] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 240.604849][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 240.644840][ T8611] binder: 8608:8611 ioctl c0306201 20000680 returned -14 [ 241.220346][ T29] audit: type=1326 audit(1730581059.047:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9db57e719 code=0x7ffc0000 [ 241.243529][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.310218][ T29] audit: type=1326 audit(1730581059.087:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9db57e719 code=0x7ffc0000 [ 241.358935][ T29] audit: type=1326 audit(1730581059.097:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd9db57e719 code=0x7ffc0000 [ 241.443716][ T8632] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 241.469021][ T29] audit: type=1326 audit(1730581059.097:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9db57e719 code=0x7ffc0000 [ 241.492300][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.512226][ T8636] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 241.654806][ T29] audit: type=1326 audit(1730581059.097:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9db57e719 code=0x7ffc0000 [ 241.678012][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.686471][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 242.673228][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.681781][ T5838] Bluetooth: hci3: unexpected subevent 0x1d length: 5 < 14 [ 242.700829][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.755514][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.796489][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.888105][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.919605][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 242.966534][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.995803][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.015619][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.027779][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.036004][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.045553][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.053385][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.063237][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.075484][ T9] usb 3-1: config 0 has no interfaces? [ 243.083308][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 243.095038][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.133906][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.144542][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.146692][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 243.146705][ T29] audit: type=1400 audit(1730581060.959:492): avc: denied { connect } for pid=8669 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.179112][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.191278][ T9] usb 3-1: config 0 descriptor?? [ 243.197179][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.293896][ T29] audit: type=1400 audit(1730581060.979:493): avc: denied { module_request } for pid=8671 comm="syz.3.810" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.295106][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.463948][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.491287][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.495272][ T29] audit: type=1400 audit(1730581061.019:494): avc: denied { write } for pid=8669 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.498675][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.530381][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.532485][ T5873] usb 3-1: USB disconnect, device number 18 [ 243.539667][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.561060][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.573735][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.611584][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.627534][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.636133][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.643657][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.651285][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.658868][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.666533][ T5825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 243.695283][ T5825] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.326257][ T29] audit: type=1400 audit(1730581062.150:495): avc: denied { name_bind } for pid=8706 comm="syz.1.820" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 244.606864][ T29] audit: type=1400 audit(1730581062.430:496): avc: denied { read } for pid=8718 comm="syz.4.827" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.651705][ T29] audit: type=1400 audit(1730581062.471:497): avc: denied { open } for pid=8718 comm="syz.4.827" path="/dev/ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.708163][ T29] audit: type=1400 audit(1730581062.471:498): avc: denied { ioctl } for pid=8718 comm="syz.4.827" path="/dev/ppp" dev="devtmpfs" ino=713 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.837736][ T5873] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.920304][ T29] audit: type=1400 audit(1730581062.751:499): avc: denied { getopt } for pid=8730 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.998230][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 245.006440][ T5873] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 245.016323][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.029181][ T5873] usb 3-1: Product: syz [ 245.036120][ T5873] usb 3-1: Manufacturer: syz [ 245.045945][ T5873] usb 3-1: SerialNumber: syz [ 245.052181][ T5873] usb 3-1: config 0 descriptor?? [ 245.059353][ T5873] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 245.069795][ T29] audit: type=1400 audit(1730581062.891:500): avc: denied { create } for pid=8746 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 245.153339][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.841'. [ 245.515608][ T5873] gspca_stk1135: reg_w 0x2 err -71 [ 245.522519][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.532991][ T5873] gspca_stk1135: Sensor write failed [ 245.601332][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.610570][ T5873] gspca_stk1135: Sensor write failed [ 245.620248][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.634275][ T5873] gspca_stk1135: Sensor read failed [ 245.641449][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.641550][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'. [ 245.657461][ T5873] gspca_stk1135: Sensor read failed [ 245.662778][ T5873] gspca_stk1135: Detected sensor type unknown (0x0) [ 245.672206][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.678847][ T5873] gspca_stk1135: Sensor read failed [ 245.684181][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.697464][ T5873] gspca_stk1135: Sensor read failed [ 245.708330][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.726985][ T5873] gspca_stk1135: Sensor write failed [ 245.742941][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 245.768644][ T5873] gspca_stk1135: Sensor write failed [ 245.777463][ T5873] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 245.805253][ T5873] usb 3-1: USB disconnect, device number 19 [ 246.023304][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'. [ 246.082452][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 246.117084][ T29] audit: type=1400 audit(1730581063.952:501): avc: denied { write } for pid=8790 comm="syz.2.857" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.217089][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.394057][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.418793][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.428282][ T8810] tipc: Started in network mode [ 246.433339][ T8810] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 246.443145][ T8810] tipc: Enabled bearer , priority 0 [ 246.451125][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.462930][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.467652][ T8810] tipc: Enabled bearer , priority 0 [ 246.478121][ T25] usb 4-1: Product: syz [ 246.482356][ T25] usb 4-1: Manufacturer: syz [ 246.490513][ T25] usb 4-1: SerialNumber: syz [ 246.739582][ T25] usb 4-1: USB disconnect, device number 14 [ 246.813174][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.558331][ T9] tipc: Node number set to 10136234 [ 248.344451][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 248.353572][ T8838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.878'. [ 248.594310][ T8857] tipc: Enabling of bearer rejected, already enabled [ 248.621283][ T8857] tipc: Enabling of bearer rejected, already enabled [ 248.720890][ T8862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.888'. [ 248.839673][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 248.839689][ T29] audit: type=1400 audit(1730581066.674:504): avc: denied { bind } for pid=8873 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.002779][ T5838] Bluetooth: hci0: unexpected subevent 0x1d length: 5 < 14 [ 249.302876][ T29] audit: type=1400 audit(1730581067.134:505): avc: denied { mount } for pid=8901 comm="syz.3.906" name="/" dev="rpc_pipefs" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 249.387929][ T29] audit: type=1400 audit(1730581067.224:506): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 249.500284][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 249.885086][ T5838] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 249.922329][ T29] audit: type=1400 audit(1730581067.755:507): avc: denied { write } for pid=8925 comm="syz.3.917" path="socket:[21239]" dev="sockfs" ino=21239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 249.958165][ T29] audit: type=1400 audit(1730581067.755:508): avc: denied { nlmsg_write } for pid=8925 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 250.090154][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 250.108503][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.923'. [ 250.821481][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 251.212924][ T5825] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 251.377174][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 251.417754][ T5825] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.448403][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.460846][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.471218][ T5825] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.499729][ T5825] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.509184][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.512831][ T8977] batadv_slave_1: entered promiscuous mode [ 251.550848][ T8977] bridge0: entered promiscuous mode [ 251.560256][ T8977] bridge0: left promiscuous mode [ 251.575225][ T8977] batadv_slave_1: left promiscuous mode [ 251.795762][ T5825] usb 4-1: usb_control_msg returned -71 [ 251.807370][ T5825] usbtmc 4-1:16.0: can't read capabilities [ 251.816277][ T5825] usb 4-1: USB disconnect, device number 15 [ 251.972166][ T29] audit: type=1400 audit(1730581069.806:509): avc: denied { write } for pid=8991 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.028351][ T8996] xt_TCPMSS: Only works on TCP SYN packets [ 252.100340][ T29] audit: type=1400 audit(1730581069.936:510): avc: denied { mounton } for pid=8999 comm="syz.1.951" path="/179/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 252.932217][ T29] audit: type=1400 audit(1730581070.766:511): avc: denied { getopt } for pid=9027 comm="syz.3.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.271891][ T25] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 253.422933][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.437887][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.474723][ T25] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 253.483939][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.497553][ T25] usb 1-1: config 0 descriptor?? [ 253.943932][ T25] playstation 0003:054C:05C4.000C: unknown main item tag 0x2 [ 253.954121][ T5838] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.962937][ T5838] Bluetooth: hci3: Injecting HCI hardware error event [ 253.971507][ T5838] Bluetooth: hci3: hardware error 0x00 [ 253.979949][ T25] playstation 0003:054C:05C4.000C: item fetching failed at offset 3/5 [ 253.999443][ T25] playstation 0003:054C:05C4.000C: Parse failed [ 254.002288][ T9074] binder_alloc: binder_alloc_mmap_handler: 9073 20ffe000-21000000 already mapped failed -16 [ 254.006099][ T25] playstation 0003:054C:05C4.000C: probe with driver playstation failed with error -22 [ 254.299143][ T29] audit: type=1400 audit(1730581072.127:512): avc: denied { accept } for pid=9091 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.345717][ T5825] usb 1-1: USB disconnect, device number 18 [ 254.457108][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'. [ 254.528492][ T29] audit: type=1400 audit(1730581072.367:513): avc: denied { connect } for pid=9110 comm="syz.4.995" lport=105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.636754][ T9117] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 254.734707][ T9123] wireguard0: entered promiscuous mode [ 254.740390][ T9123] wireguard0: entered allmulticast mode [ 255.058780][ T9151] netlink: 'syz.0.1012': attribute type 4 has an invalid length. [ 255.185187][ T9164] Bluetooth: MGMT ver 1.23 [ 255.230541][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.237173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.340759][ T54] ================================================================== [ 255.348844][ T54] BUG: KASAN: slab-use-after-free in set_powered_sync+0xc1/0xd0 [ 255.356475][ T54] Read of size 8 at addr ffff8880298abb98 by task kworker/u9:0/54 [ 255.364264][ T54] [ 255.366574][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 255.377235][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.387279][ T54] Workqueue: hci0 hci_cmd_sync_work [ 255.392485][ T54] Call Trace: [ 255.395752][ T54] [ 255.398672][ T54] dump_stack_lvl+0x116/0x1f0 [ 255.403347][ T54] print_report+0xc3/0x620 [ 255.407763][ T54] ? __virt_addr_valid+0x5e/0x590 [ 255.412782][ T54] ? __phys_addr+0xc6/0x150 [ 255.417280][ T54] kasan_report+0xd9/0x110 [ 255.421693][ T54] ? set_powered_sync+0xc1/0xd0 [ 255.426538][ T54] ? set_powered_sync+0xc1/0xd0 [ 255.431383][ T54] set_powered_sync+0xc1/0xd0 [ 255.436049][ T54] hci_cmd_sync_work+0x1a4/0x410 [ 255.440994][ T54] process_one_work+0x9c5/0x1ba0 [ 255.445934][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 255.451559][ T54] ? __pfx_process_one_work+0x10/0x10 [ 255.456953][ T54] ? assign_work+0x1a0/0x250 [ 255.461545][ T54] worker_thread+0x6c8/0xf00 [ 255.466133][ T54] ? __pfx_worker_thread+0x10/0x10 [ 255.471237][ T54] kthread+0x2c1/0x3a0 [ 255.475299][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.480495][ T54] ? __pfx_kthread+0x10/0x10 [ 255.485079][ T54] ret_from_fork+0x45/0x80 [ 255.489484][ T54] ? __pfx_kthread+0x10/0x10 [ 255.494070][ T54] ret_from_fork_asm+0x1a/0x30 [ 255.498839][ T54] [ 255.501847][ T54] [ 255.504159][ T54] Allocated by task 9164: [ 255.508469][ T54] kasan_save_stack+0x33/0x60 [ 255.513138][ T54] kasan_save_track+0x14/0x30 [ 255.517807][ T54] __kasan_kmalloc+0xaa/0xb0 [ 255.522386][ T54] mgmt_pending_new+0x5b/0x290 [ 255.527144][ T54] mgmt_pending_add+0x36/0x160 [ 255.531901][ T54] set_powered+0x28c/0x5c0 [ 255.536318][ T54] hci_sock_sendmsg+0x1528/0x25e0 [ 255.541338][ T54] sock_write_iter+0x4fe/0x5b0 [ 255.546099][ T54] vfs_write+0x5ae/0x1150 [ 255.550427][ T54] ksys_write+0x1fa/0x260 [ 255.554756][ T54] do_syscall_64+0xcd/0x250 [ 255.559255][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.565152][ T54] [ 255.567467][ T54] Freed by task 9159: [ 255.571438][ T54] kasan_save_stack+0x33/0x60 [ 255.576120][ T54] kasan_save_track+0x14/0x30 [ 255.580795][ T54] kasan_save_free_info+0x3b/0x60 [ 255.585826][ T54] __kasan_slab_free+0x51/0x70 [ 255.590592][ T54] kfree+0x14f/0x4b0 [ 255.594480][ T54] settings_rsp+0x257/0x400 [ 255.598989][ T54] mgmt_pending_foreach+0xdf/0x140 [ 255.604105][ T54] __mgmt_power_off+0xc8/0x2c0 [ 255.608865][ T54] hci_dev_close_sync+0xcbb/0x11b0 [ 255.613982][ T54] hci_dev_do_close+0x2e/0x90 [ 255.618665][ T54] hci_dev_close+0x183/0x1e0 [ 255.623258][ T54] hci_sock_ioctl+0x28c/0x880 [ 255.627932][ T54] sock_do_ioctl+0x116/0x280 [ 255.632523][ T54] sock_ioctl+0x228/0x6c0 [ 255.636850][ T54] __x64_sys_ioctl+0x18f/0x220 [ 255.641622][ T54] do_syscall_64+0xcd/0x250 [ 255.646119][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.652022][ T54] [ 255.654332][ T54] The buggy address belongs to the object at ffff8880298abb80 [ 255.654332][ T54] which belongs to the cache kmalloc-96 of size 96 [ 255.668206][ T54] The buggy address is located 24 bytes inside of [ 255.668206][ T54] freed 96-byte region [ffff8880298abb80, ffff8880298abbe0) [ 255.681834][ T54] [ 255.684137][ T54] The buggy address belongs to the physical page: [ 255.690526][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298ab [ 255.699271][ T54] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 255.706372][ T54] page_type: f5(slab) [ 255.710333][ T54] raw: 00fff00000000000 ffff88801b041280 ffffea0000d24840 dead000000000004 [ 255.718896][ T54] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 255.727454][ T54] page dumped because: kasan: bad access detected [ 255.733839][ T54] page_owner tracks the page as allocated [ 255.739526][ T54] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 25, tgid 25 (kworker/1:0), ts 58813642913, free_ts 58734741177 [ 255.758343][ T54] post_alloc_hook+0x2d1/0x350 [ 255.763103][ T54] get_page_from_freelist+0x101e/0x3070 [ 255.768630][ T54] __alloc_pages_noprof+0x223/0x25a0 [ 255.773908][ T54] alloc_pages_mpol_noprof+0x2c9/0x610 [ 255.779386][ T54] new_slab+0x2ba/0x3f0 [ 255.783520][ T54] ___slab_alloc+0xdac/0x1880 [ 255.788178][ T54] __slab_alloc.constprop.0+0x56/0xb0 [ 255.793527][ T54] __kmalloc_cache_noprof+0x2b4/0x300 [ 255.798877][ T54] nsim_fib_event_work+0x1384/0x26d0 [ 255.804145][ T54] process_one_work+0x9c5/0x1ba0 [ 255.809059][ T54] worker_thread+0x6c8/0xf00 [ 255.813626][ T54] kthread+0x2c1/0x3a0 [ 255.817675][ T54] ret_from_fork+0x45/0x80 [ 255.822069][ T54] ret_from_fork_asm+0x1a/0x30 [ 255.826818][ T54] page last free pid 5912 tgid 5908 stack trace: [ 255.833116][ T54] free_unref_folios+0x956/0x1310 [ 255.838121][ T54] folios_put_refs+0x551/0x750 [ 255.842864][ T54] free_pages_and_swap_cache+0x45f/0x510 [ 255.848473][ T54] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 255.854435][ T54] tlb_finish_mmu+0x168/0x7b0 [ 255.859090][ T54] exit_mmap+0x3df/0xb30 [ 255.863313][ T54] __mmput+0x12a/0x480 [ 255.867361][ T54] mmput+0x62/0x70 [ 255.871060][ T54] do_exit+0x9bf/0x2d70 [ 255.875196][ T54] do_group_exit+0xd3/0x2a0 [ 255.879681][ T54] get_signal+0x25fb/0x2770 [ 255.884163][ T54] arch_do_signal_or_restart+0x90/0x7e0 [ 255.889690][ T54] syscall_exit_to_user_mode+0x150/0x2a0 [ 255.895309][ T54] do_syscall_64+0xda/0x250 [ 255.899792][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.905667][ T54] [ 255.907967][ T54] Memory state around the buggy address: [ 255.913571][ T54] ffff8880298aba80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 255.921607][ T54] ffff8880298abb00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 255.929660][ T54] >ffff8880298abb80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 255.937715][ T54] ^ [ 255.942561][ T54] ffff8880298abc00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 255.950602][ T54] ffff8880298abc80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 255.958636][ T54] ================================================================== [ 256.037272][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.044489][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 256.055241][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.065297][ T54] Workqueue: hci0 hci_cmd_sync_work [ 256.070511][ T54] Call Trace: [ 256.073783][ T54] [ 256.076712][ T54] dump_stack_lvl+0x3d/0x1f0 [ 256.081302][ T54] panic+0x71d/0x800 [ 256.085199][ T54] ? __pfx_panic+0x10/0x10 [ 256.089621][ T54] ? irqentry_exit+0x3b/0x90 [ 256.094213][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.099413][ T54] ? preempt_schedule_thunk+0x1a/0x30 [ 256.104779][ T54] ? preempt_schedule_common+0x44/0xc0 [ 256.110237][ T54] ? check_panic_on_warn+0x1f/0xb0 [ 256.115352][ T54] check_panic_on_warn+0xab/0xb0 [ 256.120291][ T54] end_report+0x117/0x180 [ 256.124616][ T54] kasan_report+0xe9/0x110 [ 256.129028][ T54] ? set_powered_sync+0xc1/0xd0 [ 256.133871][ T54] ? set_powered_sync+0xc1/0xd0 [ 256.138723][ T54] set_powered_sync+0xc1/0xd0 [ 256.143394][ T54] hci_cmd_sync_work+0x1a4/0x410 [ 256.148335][ T54] process_one_work+0x9c5/0x1ba0 [ 256.153270][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 256.158903][ T54] ? __pfx_process_one_work+0x10/0x10 [ 256.164272][ T54] ? assign_work+0x1a0/0x250 [ 256.168865][ T54] worker_thread+0x6c8/0xf00 [ 256.173454][ T54] ? __pfx_worker_thread+0x10/0x10 [ 256.178555][ T54] kthread+0x2c1/0x3a0 [ 256.182619][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.187814][ T54] ? __pfx_kthread+0x10/0x10 [ 256.192404][ T54] ret_from_fork+0x45/0x80 [ 256.196814][ T54] ? __pfx_kthread+0x10/0x10 [ 256.201401][ T54] ret_from_fork_asm+0x1a/0x30 [ 256.206167][ T54] [ 256.209428][ T54] Kernel Offset: disabled [ 256.213731][ T54] Rebooting in 86400 seconds..