last executing test programs: 1m30.910930227s ago: executing program 1 (id=2557): syz_usb_connect(0x3, 0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 1m27.356569252s ago: executing program 1 (id=2571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 48.924419766s ago: executing program 1 (id=2581): syz_usb_connect(0x3, 0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 35.995202116s ago: executing program 1 (id=2581): syz_usb_connect(0x3, 0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 26.453117985s ago: executing program 1 (id=2581): syz_usb_connect(0x3, 0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 7.823390301s ago: executing program 1 (id=2581): syz_usb_connect(0x3, 0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 6.781686152s ago: executing program 2 (id=2947): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.554873881s ago: executing program 0 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280", @ANYRES32], 0x68}}, 0x0) 6.347377588s ago: executing program 0 (id=2952): timer_create(0x8, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e33"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0xfffc, 0x0, 0x4000005}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x1550, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_RATE={0x6, 0x5, {0x1, 0x28}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x14f4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_FW_POLICE={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0xfcc, 0x4, [@m_tunnel_key={0xb8, 0x17, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xfc}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x40, 0x6, "e5ac657b7d0ead38b5928ee9fbb816ecebcbb8a4cbdecef243bde2f8a67150207e8b52c505429be41958b730e1e3519e346113c81d139080b7b45804"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xd00, 0x15, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xd1, 0x12f, 0xe, 0x200, 0x7, 0x2, 0xb, 0xcff, 0x3, 0x1, 0x2, 0x911, 0x7, 0x5, 0x401, 0x3, 0x8, 0x8, 0x4, 0x81, 0x4, 0x2, 0x4, 0x0, 0x25, 0x8, 0x5, 0x7, 0x0, 0x9, 0x401, 0x40, 0x8, 0x9, 0x8, 0x7, 0x2, 0x1, 0x6, 0x5, 0x7fff, 0x2, 0x3d12, 0x6, 0x9, 0x1, 0x4, 0x4, 0x7, 0xffff3332, 0xcf, 0x882e, 0x5e, 0x94, 0x9, 0x3, 0x9, 0x4, 0x5, 0x8, 0x3, 0x9, 0x3, 0x0, 0x0, 0x4, 0x5, 0xb, 0x3, 0xa, 0xd87, 0x8, 0x3, 0x9, 0x6, 0xdd0, 0x6, 0x5, 0x1, 0xff, 0xffffffff, 0xa, 0x4, 0x27fd, 0x2, 0x3, 0xff, 0x4, 0x7, 0x4, 0x400, 0x10001, 0x2, 0x7fff, 0x6cbc35aa, 0x9, 0x8, 0x3ff, 0x0, 0xb33, 0x2, 0x1, 0xa7e, 0x6, 0x7ff, 0x9, 0x6, 0x4, 0x9, 0x54d1, 0x25d1, 0x3, 0x8, 0x3ff, 0x2, 0x9, 0x1, 0x8000, 0x7fffffff, 0x8, 0x8, 0x3373, 0x0, 0x5, 0x7, 0x0, 0x3, 0x0, 0xffffffcb, 0x8, 0x200, 0x3, 0x30, 0x4b, 0x3ff, 0x3, 0x9, 0x8000, 0x8000, 0x7, 0x5, 0x831, 0xfffffff8, 0xffff, 0x2, 0x6ee, 0x4, 0x8008, 0x0, 0x8, 0x0, 0xf, 0xa5de, 0x4, 0x0, 0x1, 0x3, 0x4, 0x9, 0x3, 0x10000, 0x1, 0x101, 0x3, 0x1, 0xa, 0x7, 0x6, 0x1, 0x401, 0x3, 0xfffffffb, 0x7ffd, 0x0, 0x1000, 0x1, 0x922, 0x2, 0x6, 0x1ff, 0x0, 0x0, 0x9, 0x3, 0x800, 0x2, 0x3, 0x40, 0x5, 0x3, 0xe, 0xd, 0x4, 0x0, 0x5, 0x4ca00000, 0x6, 0x6, 0x0, 0x7, 0x7, 0x6, 0x5, 0x6, 0x9, 0x3, 0xfffffff7, 0x2, 0x0, 0x7947cce, 0x6, 0x8001, 0xfff, 0x1d2, 0x2, 0x401, 0x7, 0x5, 0x4, 0x8, 0x5, 0x10001, 0x3, 0x1000, 0x0, 0x6, 0x6, 0x7, 0x8b, 0x7fffffff, 0x8000, 0x7, 0x9, 0xfffffffe, 0xffffff81, 0x2, 0x3, 0x3, 0xb8000000, 0x7, 0x3, 0x4df0, 0x0, 0x5, 0x4, 0x7, 0x66, 0x7, 0x1, 0x2, 0x9, 0x6, 0x9, 0x1, 0x519b]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}], [@TCA_POLICE_RATE={0x404, 0x2, [0xe6fa, 0xef1, 0x8, 0x8000, 0x9, 0x8, 0x4, 0x200e, 0x2, 0x2, 0x7, 0x3, 0xc, 0x58, 0x0, 0x5, 0x3, 0x8000, 0x9, 0x2e5b, 0x80000000, 0x9, 0x0, 0x80000000, 0x9, 0x3, 0x1, 0xffffffff, 0x7f, 0x0, 0x5, 0xd0, 0x9, 0x1, 0x7ff, 0xe0fb, 0x1, 0xfffffffe, 0xdff, 0x0, 0x40000, 0x3, 0x3, 0xfffffffc, 0x9, 0x5, 0x1a0, 0x1, 0xfff, 0x0, 0x80, 0x80000000, 0x4, 0x0, 0xc00000, 0x3, 0x2, 0xa, 0x6, 0x676, 0x14, 0x6, 0xd51b, 0x10008000, 0xfffffff7, 0x6, 0x1, 0xef, 0xab4e, 0x2, 0xfff, 0x0, 0x8, 0x0, 0x7, 0x100, 0xe, 0xba7, 0x2, 0xa, 0x6, 0x3, 0x67d, 0x3a56, 0x81, 0x9, 0x7ff, 0x7, 0x3, 0x89, 0x9, 0xb449, 0x1, 0x2, 0x4, 0x7, 0xe, 0x9, 0x7fffffff, 0x3, 0x0, 0x81, 0x2, 0xcb, 0x6, 0x6, 0x200, 0x3, 0x8, 0x0, 0x0, 0x4, 0x80, 0x3, 0x7, 0xc, 0x7, 0x1, 0x1, 0x5, 0x794762c5, 0x7fffffff, 0xfffffff7, 0x2, 0x2, 0x6, 0x9, 0x1, 0xc7, 0x7a78, 0x6, 0x5, 0x401, 0x400, 0x49, 0x81, 0x6, 0x2, 0x1, 0x29008ea7, 0x4, 0x10001, 0x0, 0xfa1, 0x7, 0x131, 0x3, 0x5, 0xfffffffa, 0x10, 0x7, 0x1, 0x7d7, 0x4, 0x4, 0x3, 0xc0, 0x0, 0x1, 0x10001, 0x10, 0xfffffff7, 0xd, 0x8, 0x9, 0x9, 0x0, 0x2, 0xfffffffa, 0x3ff, 0x8, 0x8000, 0x67, 0xffff, 0x9, 0x4, 0x40, 0x1, 0x4, 0xf, 0xffffff00, 0xfffffff8, 0x7, 0x8, 0x5, 0x0, 0xcc, 0xe1f2, 0x4b75, 0xffff, 0x10001, 0x0, 0x0, 0xfffffff8, 0x5, 0x6, 0x14000000, 0x7, 0xfe0, 0x1, 0x1, 0x1ff, 0xfff, 0x0, 0x9, 0x9, 0x4, 0x40, 0x6, 0x4, 0x800, 0x9, 0x7, 0x431, 0xaa, 0x6, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x4, 0x4, 0x1000, 0xe25c, 0x5, 0x1000, 0x20000000, 0x4, 0xd, 0x7, 0xfffff7da, 0x3, 0xffff, 0x58b, 0x80, 0x6, 0x2, 0x4, 0x2, 0x3c, 0x4, 0x40, 0xa, 0xfffffffa, 0x4, 0x0, 0x3, 0x6321, 0x8, 0x0, 0x800, 0x7, 0x8, 0x101]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa70d, 0xffffffff, 0x8, 0x3, 0x2, 0x3, 0xee, 0x8, 0x1ff, 0x4ba, 0xfffffff8, 0xfb, 0xffffff01, 0x81, 0xb, 0x9, 0x176, 0x8000, 0xfffffff7, 0x7fffffff, 0x8, 0x1, 0x0, 0x9, 0x0, 0x6, 0xfffffff0, 0x5, 0xa, 0x2, 0x1, 0x80000001, 0x44c2, 0x80, 0x4, 0x1, 0x3, 0xeaa2, 0x4, 0x800, 0x3, 0x2, 0x6, 0x2, 0x3, 0xffff, 0x8000, 0x200, 0x6, 0x10, 0xffff, 0x5, 0x5, 0xdb, 0x8, 0x8, 0xb, 0x49, 0xa00, 0x8, 0x0, 0x0, 0x4, 0xfff, 0x9, 0x5, 0x40, 0x2, 0x5, 0x9, 0x4601ef07, 0xfffffff7, 0x34f, 0x8a000000, 0x5a5, 0x0, 0x80, 0x7, 0x48, 0x9, 0x7ff, 0x5, 0xfffffffd, 0x6, 0x4, 0xe, 0x9, 0x4, 0xfffffff7, 0x5286, 0x4, 0x425, 0x5, 0xffff, 0x80, 0x7, 0x101, 0x9, 0x8000, 0x7, 0x6, 0x6, 0x3, 0x2, 0x2, 0x3, 0x1, 0x6, 0x7, 0x5569, 0x7, 0x9, 0xfffffffd, 0x1ff, 0x6, 0xfffffffb, 0x3, 0xef5575, 0xe53f, 0x0, 0x9, 0x8, 0x6273, 0xd, 0x80000000, 0x7d1, 0xf963, 0x3, 0x7, 0x5, 0x4, 0x1, 0x4, 0x3, 0x8, 0xff, 0x80000001, 0x9, 0xdc, 0x2, 0xe185, 0x7, 0xfffff156, 0xffffff81, 0x7f, 0x3, 0x7, 0x3, 0xffffff00, 0x9, 0x6, 0x7, 0xfffffff9, 0x6, 0x95, 0x5, 0x4b, 0x1, 0x1, 0xf, 0xb12f, 0xe, 0xc, 0xe, 0x6, 0x5, 0xee, 0x1, 0x549c, 0x6, 0x0, 0x3, 0x8001, 0x6e4, 0x7, 0xe, 0x4, 0x9, 0x20000, 0x200, 0x9, 0x6, 0x3, 0xdcea, 0x9615, 0x8, 0x0, 0xc, 0x7fff, 0xb, 0x10001, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x40, 0x6, 0x43, 0x6, 0x7, 0x3b, 0x1, 0x101, 0xfffffff9, 0x7, 0x8, 0x5, 0x8, 0x4, 0x400, 0x2, 0x0, 0x4, 0x4a, 0x7fffffff, 0xfffffc01, 0x0, 0x6, 0x100, 0x5, 0x0, 0x6, 0x4, 0xfffffffd, 0x1, 0x2, 0x7, 0x7, 0x9, 0x9, 0x400, 0xfffffeff, 0x9, 0x6dd, 0x80, 0xa, 0x4, 0x9c7, 0x2, 0x9, 0x7, 0x2, 0x9, 0x5, 0x9, 0x8001, 0xc, 0x79356907, 0x7fffffff, 0x9f, 0x5, 0x1000, 0x800, 0xfffffffc, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}], []]}, {0x8b, 0x6, "1ca3f17948190467ee313d68d5129634de73c487e312dbe7d96d11ee067bc51455f28287a9858438b7f0cbbe3fa29587499bf2e711c7074f3b2902bc78e3fbcecb0ab5a09048fefacb104a9b4affef5c121f97cf5df048cf2f93da01d278a074bbf1d775c22bf4d402faa66a08eabcdb586ab7206c73a982bfc489f3470007c06f095b12a6331b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xf8, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x6, 0xc, 0x0, 0x2}, {0x7, 0x1, 0x5, 0xfffffe00}, {0x2, 0x3, 0x6f, 0x5}, {0x8, 0x5, 0xa1, 0x5}, {0x4, 0x6, 0x1, 0x401}]}]}, {0xa4, 0x6, "25cccc85e964a9483773bccc8c077b9dd2e1892569d81e43c3c2e7adb6fffee843bb01d0c831b6d409772f3f1f62ead8fe4092344db3fc2a2d5634254b6497077711b5300be90c5780da3c81086937041ab429989d34b9887e5aad0ef64b3ff917ee8d85a345fcaaf72e8187c2f1e0b3864e2abcb33b66071b0c2aab337e1d44814c5b436c9fbc88f3d37fff6e33fb02255cab0fc9f94b400ce3ac8a08a32126"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x118, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x7, 0x81, 0x3ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x14ce, 0x2, 0xffffffffffffffff, 0x7, 0x8}, 0x1}}]}, {0x8b, 0x6, "54880f4e9e3f4a39c5273929d0a23458bd16c551e4b239b0e31a292c8e2bdcdac20ce49f6d5e73f2467cf2c54b575b97e05d8a9f6be1dc7dc2eae59e56c9010bb0163ebf313bbe4c636d506fa4b1c10ed4f0603bdffa3ef3dd7949f75a7ae8ea78a0dadf11abee3c560a6223f16c7bf5016076640799f41f7eb172b47b8e4241cb54ee171b635d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_POLICE={0x44c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x16, 0x10000000, 0x3ff, 0x0, 0x10000, {0xf8, 0x1, 0x6, 0x401, 0x800, 0x3}, {0x3, 0x2, 0x2, 0x4, 0xb15, 0x800}, 0x4, 0xfffff801, 0xf}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x2, 0xbc6, 0x1, 0x3ff, 0x5, 0x7, 0x0, 0x9, 0x2, 0x80, 0xfff, 0x9, 0x2, 0x2, 0x7fffffff, 0x7f, 0x9, 0x5, 0x3, 0xfffffff7, 0x7fffffff, 0x9, 0x6, 0x7, 0x8, 0x2, 0x80000000, 0x9b3, 0xf, 0x1, 0xffffffff, 0x5e, 0x70f7, 0x7, 0x2, 0xa, 0x1, 0x3d, 0x80000000, 0x401c, 0x2, 0x8, 0x2c55, 0x8, 0xa, 0x0, 0xfffffff0, 0x5, 0x9, 0x4, 0x53d, 0x2344, 0x6, 0x0, 0x8, 0x0, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0x8, 0xfffffa3d, 0x8, 0xf7c2, 0x800, 0x400, 0x40, 0x10000, 0x5, 0x8, 0x1, 0xea4, 0xc4, 0x9, 0x7fffffff, 0x9, 0x9, 0x4, 0x400, 0x5, 0x30000, 0x10, 0x81, 0x59743fe7, 0x7fffffff, 0x0, 0x6, 0xe1, 0x2, 0x77, 0x6, 0xfffffffa, 0x0, 0x8, 0x6, 0x8, 0x10001, 0x6, 0x9, 0x9, 0x8, 0x7, 0x3, 0xff, 0xff, 0x8000, 0x0, 0x1, 0x4, 0x4, 0xff, 0x0, 0x1, 0x2, 0x3, 0xe, 0x2, 0x4, 0x4, 0x12c7, 0x6, 0xfffff185, 0x8, 0xc, 0x3, 0x645b, 0xfff, 0x0, 0x1, 0x8001, 0x3, 0x3, 0x82, 0x6, 0xffffff81, 0x400, 0xfffffffc, 0x3, 0x9, 0x100, 0x8, 0x2, 0x6, 0x7, 0x80000000, 0x524e, 0x5, 0x2, 0xa, 0x3, 0x0, 0x9, 0x3, 0x6440, 0x5, 0xc, 0x4, 0x5, 0xfffff801, 0x4e, 0x10000, 0x6, 0xd, 0x1, 0x1, 0x7fff, 0xfff, 0x2, 0x9, 0xe, 0xb, 0x0, 0x1, 0x9, 0x5, 0xd, 0x4e, 0xdb90, 0x9, 0x5, 0x4, 0xc, 0x400, 0xd1a, 0x80000001, 0x4, 0x4, 0x9, 0x6, 0x656b, 0x8, 0x6, 0x37, 0x1, 0x2, 0x3, 0xee, 0x6, 0x3, 0x4243, 0x2, 0x5ca0, 0x33, 0x8, 0x800, 0x184, 0x10001, 0x37c7, 0x7fffffff, 0x3ccc, 0xffff, 0x7c1, 0x200, 0xff, 0x1, 0x0, 0x7181eacc, 0x5, 0x2, 0x8a6, 0x8001, 0x2, 0xfffffffc, 0x2, 0x1000, 0x401, 0x9, 0x3a98, 0x18, 0x1, 0x1, 0x12, 0x1c3e, 0x2a, 0x7, 0x9, 0xcf76, 0x6, 0x3, 0x7, 0x3, 0x3667dfb0, 0x0, 0x65, 0x281f80d3, 0x9, 0x7, 0x9, 0x4000002, 0x7ff, 0x6d, 0x1ff, 0x426d]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9986}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfffa, 0xfff1}}, @TCA_FW_ACT={0x7c, 0x4, [@m_sample={0x78, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x49, 0x6, "fcb34b5576a2a8e73ffa0e6280694c4df9f7e2456054c1b9e4069082c618cfd2ffd55a4012f40fa82fc959c668b2f9142223118fc57e07d51d6aaee57320916f65b6ae3da1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0xff, 0xfffffff7, 0x52, {0x8, 0x0, 0xffff, 0xfffc, 0xd}, {0x6, 0x0, 0x9, 0x5, 0x9}, 0x1, 0x40}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}]}, 0x1550}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffff9) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) 5.958594609s ago: executing program 0 (id=2953): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x7, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x7, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x7ffffffe, 0x24, 0x401, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x4, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x5, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x4, 0x7, 0x6c7, 0x9, 0x9, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x2, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x3, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x5, 0x103], [0x9, 0xa, 0x4, 0x5, 0xeffffffe, 0x100, 0x8d2, 0xc, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0xd, 0x6, 0x10, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xc, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x6, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x228, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 5.836517764s ago: executing program 0 (id=2954): shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.657794149s ago: executing program 0 (id=2957): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc030128a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080001000900010073797a300000000008000340000000011400000011000100000000"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 4.000370451s ago: executing program 0 (id=2967): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3.260771974s ago: executing program 2 (id=2974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffe0, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.190208115s ago: executing program 4 (id=2975): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2.06946453s ago: executing program 2 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf8, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x81, 0x4, 0x14af, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x6, 0x4, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x4, 0x1f, 0x8, 0xffffff36}}, @NETEM_LOSS_GI={0x18, 0x1, {0x200, 0x8, 0x10, 0xfffffffe, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x3b2, 0x8, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0xff, 0x9, 0x7bcb}}]}, @TCA_NETEM_CORR={0x10, 0x1, {0xffff6efa, 0x7, 0x7fffffff}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x3901e670, 0x9, 0x17, 0x9, 0x8}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xf8}]}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xb, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xed}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.785600081s ago: executing program 4 (id=2978): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 1.747907732s ago: executing program 3 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.666462047s ago: executing program 4 (id=2980): ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, 0x0) 1.655872141s ago: executing program 2 (id=2981): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x3, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.575672068s ago: executing program 3 (id=2982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.502826788s ago: executing program 2 (id=2983): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) 1.502501957s ago: executing program 4 (id=2984): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f000000c980), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079100800000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setresuid(0xee00, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x10004, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0xf00) sendto$packet(r2, 0x0, 0x0, 0x20008040, &(0x7f0000002400)={0x11, 0x88a8, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x41) 1.427681496s ago: executing program 2 (id=2985): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400a04000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x20, 0x17, 0x3, "963aa7"}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x81, 0x1, "b0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x0, 0xe, 0x5, "a9af8a669e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.344958227s ago: executing program 3 (id=2986): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 1.18535708s ago: executing program 3 (id=2987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="00000000000000b703000000100006850000000c000000b700000000000000950000000087797a3a6c0194d047382de3339250ef2ceba2b974a30e01720167abc8c4aed43c7ea2c8c02c8250937159058a2c25e9ea947560a8d67b445d80f28d3e439562540031c39d9fc2231b20fb0cdddb9bff198dde174b5ce880cccf7264b97bd56604849912dc4182157c94c7b6d65ab1b6e4d2386d9709add4d9d14d08fb79ced3ccf00d235b8de6792b1054fde5a355d23098e5d8160d2ad18fd1326f19cad2abe8e2dc33df23d5aec66d8210"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r5}, 0xc) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 1.127718189s ago: executing program 4 (id=2988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 432.614167ms ago: executing program 4 (id=2989): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4054) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0xa6fec000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) sendmsg$nl_generic(r9, &(0x7f00000055c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005580)={&(0x7f0000004100)={0x2b0, 0x37, 0x8, 0x70bd28, 0x25dfdbff, {0x3}, [@generic="466bdcb2b19d81deddb543a5e0dc943b89d5d31bdce4d5f641cb5a947cc69bb581a8b583810c5d1e5c7eda50572918092dcc0edcbe889eb9c2c631c76cbeb2d1298748d3d3db8d8f038526f7c199ed331e8a63d354c4ef8f3cd24813b86d2e8c4734324ae00b23f056", @nested={0xba, 0xf7, 0x0, 0x1, [@generic="717ffb97c213524d07021f692dda1fddcad9b2e45526f6880243ccf9e2b1ba6fa29cef3f3363185811199991d45e9097fd48339bf9ec67f1e75009171ddf998f1ab098b906e04864ee511c17388ef8816a828c21fe01572e60039e7bf07f825298977ad90464b9f9aed77326b8d70b88daf1dd97b9c4aa169cf1f5b306924996f13c5e25fe85d2788dd8ff937a06fdb0dc28e1c51e98189e7ee6fd20e00f8c21c41d4eb07dbf5788e88d049a11824d5073f3", @nested={0x4, 0x12d}]}, @generic="3a81d13cd44a48402b7b643d44d1774f593f47e28c6e2030667e70cd6ed981c90cecdaa0b9d169940bc87ee09388e551a3bd9cf79e27c15687985bee5c41036f07546c288e336513cbbc3e7b", @generic="2497887b5dc9f257309ed656c5bb193c2e73b4f8e8cec65260104ff47cd9f0deb0e890cd73482fb8238ae88b33d443dc462ba47e8ebadd256afe74acda07bcd13cbcf3621805e8a845fa85f23e6a35b91e928faa6ed0724d7bcfc72d9d6cd957b1e56c4bd85c274b3a9013edec544959b985073d209bc0a7c9fd6d387b5fb5de379209c1068c2b885b9afa9cac789bb0bbae7afc711f0fbb5fb105b6b8f67730fd7677c724feaeca86c1b8b267934d5a0ec8", @generic="14aa9511283e70d21fc1dce475787a0086bd594442793b3c8e8dd4c4f65176c5b37600be66be65e9028bb056214524692c9b26649a24ccec391c647b8b11280426d6b62bdd45fcb93295694aff9c310689f309148288022fcb4815fb6cfd733d2f1424860ad52f36f2f12736daec6d8cc0860a6f95172b"]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x44010) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, 0x0}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{0x0}], 0x1}}], 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400"], 0x48) 142.537558ms ago: executing program 3 (id=2990): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 0s ago: executing program 3 (id=2991): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0142.650:379): avc: denied { write } for pid=8976 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 264.746182][ T8981] syzkaller0: entered promiscuous mode [ 264.752465][ T8981] syzkaller0: entered allmulticast mode [ 264.761197][ T30] audit: type=1400 audit(1777050142.650:380): avc: denied { read } for pid=8976 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 264.789838][ T8987] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.980'. [ 265.379029][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'. [ 265.379583][ T8990] tipc: Resetting bearer [ 265.394087][ T8993] netlink: 144 bytes leftover after parsing attributes in process `syz.2.981'. [ 265.405354][ T8993] netlink: 56 bytes leftover after parsing attributes in process `syz.2.981'. [ 265.619403][ T8979] tipc: Resetting bearer [ 265.786646][ T8979] tipc: Disabling bearer [ 266.635313][ T30] audit: type=1400 audit(1777050144.559:381): avc: denied { read } for pid=9011 comm="syz.0.987" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 266.916566][ T30] audit: type=1400 audit(1777050144.606:382): avc: denied { open } for pid=9011 comm="syz.0.987" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 266.948018][ T30] audit: type=1400 audit(1777050144.662:383): avc: denied { ioctl } for pid=9011 comm="syz.0.987" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.048969][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.991'. [ 267.079224][ T30] audit: type=1400 audit(1777050144.943:384): avc: denied { listen } for pid=9017 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 267.099229][ T9020] unsupported nlmsg_type 40 [ 267.178977][ T30] audit: type=1400 audit(1777050144.952:385): avc: denied { write } for pid=9018 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.208535][ T9024] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.992'. [ 267.931422][ T30] audit: type=1400 audit(1777050145.785:386): avc: denied { read } for pid=9031 comm="syz.1.995" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.063941][ T30] audit: type=1400 audit(1777050145.813:387): avc: denied { open } for pid=9031 comm="syz.1.995" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.260823][ T30] audit: type=1400 audit(1777050145.832:388): avc: denied { ioctl } for pid=9031 comm="syz.1.995" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.346940][ T9044] tipc: Enabled bearer , priority 0 [ 268.395046][ T9044] syzkaller0: entered promiscuous mode [ 268.427059][ T9044] syzkaller0: entered allmulticast mode [ 268.596507][ T9051] tipc: Resetting bearer [ 268.642601][ T9042] tipc: Resetting bearer [ 268.738700][ T9042] tipc: Disabling bearer [ 268.799541][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1008'. [ 268.809396][ T9067] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1008'. [ 270.151726][ T30] audit: type=1400 audit(1777050147.863:389): avc: denied { setopt } for pid=9088 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 270.853194][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 270.882988][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 271.102962][ T30] audit: type=1326 audit(1777050148.752:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf479cdd9 code=0x7fc00000 [ 271.699919][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 271.709002][ T9146] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1040'. [ 272.375810][ T9158] tipc: Enabled bearer , priority 10 [ 273.193655][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 273.570502][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 274.588910][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 274.588926][ T30] audit: type=1400 audit(1777050152.008:392): avc: denied { bind } for pid=9215 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.864165][ T9223] Failed to initialize the IGMP autojoin socket (err -2) [ 275.495267][ T9229] tipc: Enabled bearer , priority 0 [ 276.752936][ T9232] syzkaller0: entered promiscuous mode [ 276.807756][ T9232] syzkaller0: entered allmulticast mode [ 276.817715][ T9232] tipc: Resetting bearer [ 277.179728][ T1038] tipc: Resetting bearer [ 277.196917][ T9226] tipc: Resetting bearer [ 280.497744][ T9226] tipc: Disabling bearer [ 280.516848][ T9292] syzkaller0: entered promiscuous mode [ 280.531110][ T9292] syzkaller0: entered allmulticast mode [ 280.796391][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 281.506855][ T9321] syzkaller0: entered promiscuous mode [ 281.522764][ T9321] syzkaller0: entered allmulticast mode [ 281.877911][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 282.048171][ T9339] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 282.275079][ T9334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.318027][ T9339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 282.580375][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 282.635074][ T9353] tipc: Enabled bearer , priority 0 [ 282.635524][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 282.667211][ T9353] syzkaller0: entered promiscuous mode [ 282.684341][ T9353] syzkaller0: entered allmulticast mode [ 282.711287][ T9353] tipc: Resetting bearer [ 282.780271][ T9351] tipc: Resetting bearer [ 282.813572][ T9351] tipc: Disabling bearer [ 282.906429][ T9362] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 283.065575][ T9372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1117'. [ 283.086821][ T9361] syzkaller0: entered promiscuous mode [ 283.108536][ T9361] syzkaller0: entered allmulticast mode [ 285.690545][ T9397] 9p: Bad value for 'rfdno' [ 286.401297][ T9401] tipc: Started in network mode [ 286.407556][ T9401] tipc: Node identity ae7e31ca52, cluster identity 4711 [ 286.415077][ T9401] tipc: Enabled bearer , priority 0 [ 286.433738][ T9402] syzkaller0: entered promiscuous mode [ 286.440460][ T9402] syzkaller0: entered allmulticast mode [ 286.451839][ T9408] tipc: Resetting bearer [ 286.594760][ T9398] tipc: Resetting bearer [ 286.682048][ T9398] tipc: Disabling bearer [ 287.691085][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 288.468852][ T9451] syzkaller0: entered promiscuous mode [ 288.496892][ T9451] syzkaller0: entered allmulticast mode [ 289.048379][ T9466] tipc: Enabled bearer , priority 0 [ 289.056194][ T9466] syzkaller0: entered promiscuous mode [ 289.062002][ T9466] syzkaller0: entered allmulticast mode [ 289.077600][ T9466] tipc: Resetting bearer [ 289.089335][ T9465] tipc: Resetting bearer [ 289.110662][ T9465] tipc: Disabling bearer [ 290.258792][ T9488] syzkaller0: entered promiscuous mode [ 290.274579][ T9488] syzkaller0: entered allmulticast mode [ 290.925122][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 290.932443][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 292.288163][ T30] audit: type=1400 audit(1777050168.572:393): avc: denied { read write } for pid=9511 comm="syz.0.1165" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.323426][ T30] audit: type=1400 audit(1777050168.572:394): avc: denied { open } for pid=9511 comm="syz.0.1165" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.368485][ T9502] tipc: Enabled bearer , priority 0 [ 292.417383][ T9505] syzkaller0: entered promiscuous mode [ 292.423182][ T988] hid_parser_main: 3 callbacks suppressed [ 292.423204][ T988] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 292.467481][ T9505] syzkaller0: entered allmulticast mode [ 292.535646][ T9498] tipc: Resetting bearer [ 292.572548][ T9497] tipc: Resetting bearer [ 292.909481][ T9497] tipc: Disabling bearer [ 293.019242][ T988] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.155444][ T9490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2068 sclass=netlink_route_socket pid=9490 comm=syz.4.1159 [ 294.006757][ T30] audit: type=1400 audit(1777050170.163:395): avc: denied { create } for pid=9542 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.093241][ T30] audit: type=1400 audit(1777050170.172:396): avc: denied { ioctl } for pid=9542 comm="syz.3.1176" path="socket:[21479]" dev="sockfs" ino=21479 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.307773][ T30] audit: type=1400 audit(1777050170.172:397): avc: denied { bind } for pid=9542 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.414634][ T9558] netlink: 'syz.4.1181': attribute type 10 has an invalid length. [ 294.463822][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.498300][ T30] audit: type=1400 audit(1777050170.621:398): avc: denied { load_policy } for pid=9562 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 294.523983][ T9558] bond0: (slave team0): Enslaving as an active interface with an up link [ 294.545983][ T988] kernel write not supported for file /657/coredump_filter (pid: 988 comm: kworker/0:2) [ 294.775179][ T9572] syzkaller0: entered promiscuous mode [ 294.791044][ T9572] syzkaller0: entered allmulticast mode [ 295.814742][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 295.916646][ T9609] syzkaller0: entered promiscuous mode [ 295.957617][ T9609] syzkaller0: entered allmulticast mode [ 297.987445][ T9657] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 298.098467][ T9657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.169774][ T9665] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 299.344597][ T9693] loop7: detected capacity change from 0 to 7 [ 299.398249][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.407641][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.448813][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.458041][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.467804][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.476997][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.492080][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.501341][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.513707][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.522929][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.551311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.560533][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.571606][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.580815][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.590828][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.600012][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.610431][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.619603][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.628052][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.637314][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 299.647694][ T9693] ldm_validate_partition_table(): Disk read failed. [ 299.657081][ T9693] Dev loop7: unable to read RDB block 0 [ 299.664871][ T9693] loop7: unable to read partition table [ 299.670825][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 299.680198][ T9693] loop7: partition table beyond EOD, truncated [ 299.687993][ T9693] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 299.790709][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 300.553642][ T30] audit: type=1400 audit(1777050176.311:399): avc: denied { read } for pid=9745 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.180506][ T9759] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.188677][ T9759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.649430][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'. [ 302.659449][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'. [ 303.072808][ T9821] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 303.333086][ T30] audit: type=1400 audit(1777050178.903:400): avc: denied { getopt } for pid=9830 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.410811][ T9839] program syz.3.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.757760][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 303.767837][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 304.656503][ T9872] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 304.770086][ T9883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1308'. [ 305.040043][ T9888] SELinux: ebitmap: map size 184549440 does not match my size 64 (high bit was 1929379840) [ 305.067369][ T9888] SELinux: failed to load policy [ 306.732487][ T9920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'. [ 306.805864][ T9924] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1325'. [ 307.013882][ T9936] tipc: Enabled bearer , priority 0 [ 307.031261][ T9936] syzkaller0: entered promiscuous mode [ 307.056717][ T9936] syzkaller0: entered allmulticast mode [ 307.134666][ T9935] tipc: Resetting bearer [ 307.205432][ T9935] tipc: Disabling bearer [ 307.462479][ T9954] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1341'. [ 307.878384][ T30] audit: type=1400 audit(1777050183.161:401): avc: denied { read } for pid=9978 comm="syz.4.1352" path="socket:[23299]" dev="sockfs" ino=23299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.933197][ T30] audit: type=1400 audit(1777050183.217:402): avc: denied { mount } for pid=9979 comm="syz.3.1353" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 308.102401][ T30] audit: type=1400 audit(1777050183.376:403): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 308.915110][T10020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.988392][T10022] vlan2: entered allmulticast mode [ 309.012530][T10022] syz_tun: entered allmulticast mode [ 309.092154][T10023] tipc: Enabled bearer , priority 0 [ 309.107681][T10026] syzkaller0: entered promiscuous mode [ 309.125709][T10026] syzkaller0: entered allmulticast mode [ 309.188850][T10017] tipc: Resetting bearer [ 309.262947][T10017] tipc: Disabling bearer [ 309.289952][T10032] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 309.322853][T10032] SELinux: failed to load policy [ 310.076843][T10047] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 310.131987][T10047] team0: Port device dummy0 added [ 310.132021][T10048] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 310.171548][T10048] team0: Port device dummy0 removed [ 310.218534][T10048] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.996490][T10086] 9pnet: p9_errstr2errno: server reported unknown error 000000 [ 311.739047][ T988] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.913810][ T988] usb 1-1: Using ep0 maxpacket: 16 [ 311.930081][ T988] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 311.935302][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 311.951214][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.965365][ T988] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.000425][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.014339][ T988] usb 1-1: Product: syz [ 312.030833][ T988] usb 1-1: Manufacturer: syz [ 312.044924][ T988] usb 1-1: SerialNumber: syz [ 312.058093][ T988] usb 1-1: config 0 descriptor?? [ 312.094554][ T988] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.137934][ T988] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 312.163541][T10147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.742101][ T988] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 312.761688][ T988] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 312.885978][ T30] audit: type=1400 audit(1777050187.849:404): avc: denied { create } for pid=10178 comm="syz.2.1433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 313.147999][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1434'. [ 313.426103][ T988] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 313.438059][T10195] team0: No ports can be present during mode change [ 313.443277][ T988] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 313.445895][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 313.456910][ T988] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 313.477564][ T988] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 313.486433][ T988] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 313.498615][ T988] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 313.514700][T10195] bond0: (slave team0): Releasing backup interface [ 313.527843][ T988] usb 1-1: USB disconnect, device number 12 [ 313.582679][T10195] team0 (unregistering): Port device team_slave_0 removed [ 313.634697][T10195] team0 (unregistering): Port device team_slave_1 removed [ 313.682343][T10199] tipc: Enabled bearer , priority 0 [ 313.704413][T10199] syzkaller0: entered promiscuous mode [ 313.712909][T10199] syzkaller0: entered allmulticast mode [ 313.762170][T10198] tipc: Resetting bearer [ 313.807884][T10198] tipc: Disabling bearer [ 315.340565][T10238] tipc: Enabled bearer , priority 0 [ 315.426646][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 315.518530][T10245] syzkaller0: entered promiscuous mode [ 315.546319][T10245] syzkaller0: entered allmulticast mode [ 315.890190][T10237] tipc: Resetting bearer [ 315.938313][T10237] tipc: Disabling bearer [ 316.239360][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 316.794563][T10274] tipc: Cannot configure node identity twice [ 317.024747][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.127980][T10277] 9pnet: p9_errstr2errno: server reported unknown error 000000 [ 317.202935][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 317.271677][T10290] tipc: Enabled bearer , priority 0 [ 317.283703][T10290] tipc: Resetting bearer [ 317.304322][T10289] tipc: Disabling bearer [ 317.409668][ T30] audit: type=1400 audit(1777050192.079:405): avc: denied { bind } for pid=10297 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.755019][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 319.110694][T10344] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1495'. [ 320.577602][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 320.613514][T10368] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1501'. [ 322.772454][T10414] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 322.868002][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 323.128388][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 324.146822][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1528'. [ 324.160431][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1528'. [ 325.432431][T10475] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1538'. [ 326.074758][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 326.084888][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 326.795089][ T30] audit: type=1400 audit(1777050200.866:406): avc: denied { connect } for pid=10489 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.849697][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 327.009263][ T5882] usb 4-1: device descriptor read/64, error -71 [ 328.210676][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 328.378875][ T5882] usb 4-1: device descriptor read/64, error -71 [ 328.410132][T10557] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 328.446920][T10559] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 328.462371][T10559] SELinux: failed to load policy [ 328.470592][ T30] audit: type=1400 audit(1777050202.429:407): avc: denied { getopt } for pid=10560 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 328.505546][ T5882] usb usb4-port1: attempt power cycle [ 328.806555][ T7934] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.890045][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 329.032828][ T5882] usb 4-1: device descriptor read/8, error -71 [ 329.072247][ T5883] kernel read not supported for file [fscontext] (pid: 5883 comm: kworker/1:6) [ 329.201426][ T30] audit: type=1400 audit(1777050203.112:408): avc: denied { write } for pid=10577 comm="syz.1.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.381600][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 329.400729][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 329.422214][T10586] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1580'. [ 329.456092][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 329.617089][ T5882] usb 4-1: device not accepting address 9, error -71 [ 329.645870][ T5882] usb usb4-port1: unable to enumerate USB device [ 330.176356][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 330.218075][ T5882] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.838680][T10624] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 331.018230][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.487934][T10643] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 332.669264][T10652] fuse: Bad value for 'fd' [ 332.812406][ T30] audit: type=1400 audit(1777050206.491:409): avc: denied { append } for pid=10646 comm="syz.2.1602" name="file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.866942][ T30] audit: type=1400 audit(1777050206.519:410): avc: denied { open } for pid=10646 comm="syz.2.1602" path="/292/file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.976826][ T30] audit: type=1400 audit(1777050206.650:411): avc: denied { read write } for pid=10658 comm="syz.0.1608" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 333.215331][ T30] audit: type=1400 audit(1777050206.650:412): avc: denied { open } for pid=10658 comm="syz.0.1608" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 333.927353][T10680] capability: warning: `syz.3.1614' uses 32-bit capabilities (legacy support in use) [ 333.991072][T10680] program syz.3.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.219738][ T30] audit: type=1400 audit(1777050207.810:413): avc: denied { shutdown } for pid=10693 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.699713][ T30] audit: type=1400 audit(1777050209.204:414): avc: denied { connect } for pid=10734 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.754958][ T30] audit: type=1400 audit(1777050209.223:415): avc: denied { shutdown } for pid=10734 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.781844][ T30] audit: type=1400 audit(1777050209.233:416): avc: denied { nlmsg_read } for pid=10734 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 335.790996][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 335.956345][T10743] syzkaller0: entered promiscuous mode [ 335.974645][T10743] syzkaller0: entered allmulticast mode [ 336.634183][T10758] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 336.930716][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 337.553970][T10777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1652'. [ 338.180276][T10814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1669'. [ 339.477009][T10845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1682'. [ 341.443841][T10836] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 341.450558][T10836] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 341.483241][T10836] vhci_hcd vhci_hcd.0: Device attached [ 341.587449][T10868] vhci_hcd: connection closed [ 341.589914][ T208] vhci_hcd vhci_hcd.0: stop threads [ 341.644681][ T208] vhci_hcd vhci_hcd.0: release socket [ 341.668706][ T208] vhci_hcd vhci_hcd.0: disconnect device [ 341.800774][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 341.823017][ T30] audit: type=1400 audit(1777050214.932:417): avc: denied { getopt } for pid=10882 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.851729][T10883] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1685'. [ 341.901695][T10887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1697'. [ 342.007939][T10893] loop7: detected capacity change from 0 to 16384 [ 342.488039][ C0] blk_print_req_error: 10 callbacks suppressed [ 342.488060][ C0] I/O error, dev loop7, sector 13312 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 342.502116][T10896] loop7: detected capacity change from 16384 to 0 [ 342.504280][ C0] I/O error, dev loop7, sector 13296 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.208081][ T5829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 344.449020][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 344.506737][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 344.638855][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.749726][ T5829] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 344.780759][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.807650][ T5829] usb 2-1: Product: syz [ 344.823922][ T5829] usb 2-1: Manufacturer: syz [ 344.833687][ T5829] usb 2-1: SerialNumber: syz [ 344.870365][ T5829] usb 2-1: config 0 descriptor?? [ 344.907360][ T5829] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 344.936436][ T5829] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 345.553105][ T5829] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 346.406622][ T5829] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 346.632230][ T5829] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 346.668428][ T5829] em28xx 2-1:0.0: No AC97 audio processor [ 347.736237][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 348.260066][ T5882] usb 2-1: USB disconnect, device number 7 [ 348.283740][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 348.650072][ T30] audit: type=1400 audit(1777050221.295:418): avc: denied { execstack } for pid=11051 comm="syz.4.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 349.303599][ T5882] em28xx 2-1:0.0: Freeing device [ 350.671971][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 350.681854][T11087] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1754'. [ 350.828943][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 350.958173][ T30] audit: type=1400 audit(1777050223.485:419): avc: denied { write } for pid=11094 comm="syz.1.1764" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 350.989424][ T5829] kernel read not supported for file /usbmon0 (pid: 5829 comm: kworker/0:3) [ 351.022094][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 351.051923][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 351.101435][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.152901][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.183773][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.207789][ T5883] usb 3-1: Product: syz [ 351.216942][ T5883] usb 3-1: Manufacturer: syz [ 351.227735][ T5883] usb 3-1: SerialNumber: syz [ 351.242073][ T5883] usb 3-1: config 0 descriptor?? [ 351.271005][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.577819][ T5883] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 352.327280][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 352.341445][ T5883] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 352.356296][ T5883] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 352.363718][ T5883] em28xx 3-1:0.0: No AC97 audio processor [ 354.352455][ T5883] usb 3-1: USB disconnect, device number 5 [ 354.379815][ T5883] em28xx 3-1:0.0: Disconnecting em28xx [ 354.406130][ T5883] em28xx 3-1:0.0: Freeing device [ 355.842116][T11167] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.270155][T11195] tipc: Enabled bearer , priority 0 [ 357.352219][T11195] tipc: Resetting bearer [ 357.377366][T11193] tipc: Disabling bearer [ 357.407004][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'. [ 357.458583][T11199] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1788'. [ 357.942947][ T30] audit: type=1400 audit(1777050230.017:420): avc: denied { create } for pid=11214 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.012182][ T30] audit: type=1400 audit(1777050230.063:421): avc: denied { getopt } for pid=11214 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 359.868851][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.147231][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 360.178208][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 360.239161][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.290285][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 360.317574][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.353738][ T5883] usb 5-1: Product: syz [ 360.377569][ T5883] usb 5-1: Manufacturer: syz [ 360.391849][ T5883] usb 5-1: SerialNumber: syz [ 360.416056][ T5883] usb 5-1: config 0 descriptor?? [ 360.453689][ T5883] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.482398][ T5883] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 360.831730][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1823'. [ 361.044745][ T30] audit: type=1400 audit(1777050232.908:422): avc: denied { recv } for pid=11247 comm="syz.1.1820" saddr=10.128.0.169 src=42712 daddr=10.128.1.68 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 361.097460][ T5883] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 361.113232][ T5883] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 361.151652][ T5883] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 361.181984][ T5883] em28xx 5-1:0.0: No AC97 audio processor [ 362.574544][T11301] program syz.2.1840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.863841][ T5829] usb 5-1: USB disconnect, device number 7 [ 362.890411][T11305] syzkaller0: entered promiscuous mode [ 362.892759][ T5829] em28xx 5-1:0.0: Disconnecting em28xx [ 362.916076][T11305] syzkaller0: entered allmulticast mode [ 362.933464][ T5829] em28xx 5-1:0.0: Freeing device [ 363.161086][ T988] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 363.352772][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 363.363984][ T988] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 363.383189][ T988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.426461][ T988] usb 3-1: config 0 has no interface number 0 [ 363.442490][ T988] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.489851][ T988] usb 3-1: config 0 interface 184 has no altsetting 0 [ 363.509472][ T988] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 363.533074][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.560018][ T988] usb 3-1: Product: syz [ 363.574565][ T988] usb 3-1: Manufacturer: syz [ 363.592520][ T988] usb 3-1: SerialNumber: syz [ 363.628046][ T988] usb 3-1: config 0 descriptor?? [ 363.666798][ T988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 363.695653][ T988] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 363.886883][ T5829] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 364.058617][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 364.071317][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 364.089922][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.163926][ T5829] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 364.815581][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.823730][ T5829] usb 2-1: Product: syz [ 364.828083][ T5829] usb 2-1: Manufacturer: syz [ 364.832722][ T5829] usb 2-1: SerialNumber: syz [ 364.842748][ T5829] usb 2-1: config 0 descriptor?? [ 364.854917][ T5829] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 364.864400][ T5829] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 365.351426][ T5891] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 365.565276][ T5829] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 365.584820][ T5829] em28xx 2-1:0.0: Config register raw data: 0x00 [ 365.603909][ T5891] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 365.614992][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.625382][ T5891] usb 5-1: config 0 has no interface number 0 [ 365.694447][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 366.655123][ T5891] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.850806][ T5883] usb 3-1: USB disconnect, device number 6 [ 366.934789][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 367.024111][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.104465][ T5891] usb 5-1: Product: syz [ 367.116788][ T5891] usb 5-1: Manufacturer: syz [ 367.124691][ T5891] usb 5-1: SerialNumber: syz [ 367.134767][ T5891] usb 5-1: config 0 descriptor?? [ 367.141874][ T5882] usb 2-1: USB disconnect, device number 8 [ 367.151261][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 367.167167][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input8 [ 367.182711][ T5882] em28xx 2-1:0.0: Freeing device [ 367.344086][ T30] audit: type=1400 audit(1777050238.813:423): avc: denied { read } for pid=5180 comm="acpid" name="mouse1" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.379910][ T30] audit: type=1400 audit(1777050238.813:424): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.466775][T11400] tipc: Cannot configure node identity twice [ 367.784543][ T30] audit: type=1400 audit(1777050238.841:425): avc: denied { read } for pid=11357 comm="syz.4.1865" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.882421][ T30] audit: type=1400 audit(1777050238.841:426): avc: denied { open } for pid=11357 comm="syz.4.1865" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.915978][ T5829] usb 5-1: USB disconnect, device number 8 [ 368.614455][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 368.623553][T11422] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1887'. [ 369.390172][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 369.564100][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 369.596031][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 369.654994][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.715806][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.893736][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.914919][ T5883] usb 4-1: Product: syz [ 370.083629][ T5883] usb 4-1: Manufacturer: syz [ 370.089813][ T5883] usb 4-1: SerialNumber: syz [ 370.674424][ T5883] usb 4-1: config 0 descriptor?? [ 370.793350][T11451] SELinux: ebitmap: truncated map [ 370.804446][T11451] SELinux: failed to load policy [ 370.847559][ T5883] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 370.856997][ T5883] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 370.962606][T11455] binder: 11452:11455 ioctl c0306201 2000000001c0 returned -22 [ 371.424445][ T5883] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 371.588311][ T5883] em28xx 4-1:0.0: Config register raw data: 0x00 [ 372.162631][T11490] tipc: Cannot configure node identity twice [ 372.601607][T11494] SELinux: ebitmap: truncated map [ 372.611792][T11494] SELinux: failed to load policy [ 372.834258][ T30] audit: type=1400 audit(1777050243.951:427): avc: denied { write } for pid=11506 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.961469][T11510] 9pnet: p9_errstr2errno: server reported unknown error [ 374.152388][ T5882] usb 4-1: USB disconnect, device number 10 [ 374.206873][ T5882] em28xx 4-1:0.0: Disconnecting em28xx [ 374.288272][ T5882] em28xx 4-1:0.0: Freeing device [ 374.437032][T11547] 9pnet: p9_errstr2errno: server reported unknown error [ 374.589965][T11551] tipc: Cannot configure node identity twice [ 375.723156][T11570] program syz.4.1940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.892024][T11532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 375.898573][T11532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 375.938073][T11532] vhci_hcd vhci_hcd.0: Device attached [ 375.947405][T11578] vhci_hcd: connection closed [ 375.948516][ T208] vhci_hcd vhci_hcd.2: stop threads [ 375.961283][ T208] vhci_hcd vhci_hcd.2: release socket [ 375.968778][ T208] vhci_hcd vhci_hcd.2: disconnect device [ 376.010701][T11577] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 376.194093][ T988] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 376.329061][T11593] tipc: Cannot configure node identity twice [ 376.726418][ T988] usb 1-1: Using ep0 maxpacket: 16 [ 376.750675][ T988] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.778954][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.794040][ T988] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.807807][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.818236][ T988] usb 1-1: Product: syz [ 376.822713][ T988] usb 1-1: Manufacturer: syz [ 376.828192][ T988] usb 1-1: SerialNumber: syz [ 376.836753][ T988] usb 1-1: config 0 descriptor?? [ 376.846574][ T988] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.857925][ T988] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 377.162517][T11607] program syz.3.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.920873][ T988] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 377.988287][ T988] em28xx 1-1:0.0: Config register raw data: 0x00 [ 379.002772][T11646] syzkaller0: entered promiscuous mode [ 379.018956][T11646] syzkaller0: entered allmulticast mode [ 379.167097][T11655] dummy0: entered promiscuous mode [ 379.181208][T11655] dummy0: left promiscuous mode [ 380.953596][ T988] usb 1-1: USB disconnect, device number 13 [ 381.077368][ T988] em28xx 1-1:0.0: Disconnecting em28xx [ 381.097766][ T988] em28xx 1-1:0.0: Freeing device [ 381.356359][T11696] syzkaller0: entered promiscuous mode [ 381.371329][T11696] syzkaller0: entered allmulticast mode [ 381.980317][ T988] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 382.608984][ T988] usb 4-1: Using ep0 maxpacket: 16 [ 382.620914][ T988] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 382.654419][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.661663][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.689302][ T988] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.718108][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.753013][ T988] usb 4-1: Product: syz [ 382.772377][ T988] usb 4-1: Manufacturer: syz [ 382.781216][ T988] usb 4-1: SerialNumber: syz [ 382.851317][ T988] usb 4-1: config 0 descriptor?? [ 382.884900][ T988] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.929780][ T988] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 383.013690][T11740] bridge_slave_0: default FDB implementation only supports local addresses [ 383.666370][ T988] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 383.674766][ T988] em28xx 4-1:0.0: Config register raw data: 0x00 [ 383.687608][T11760] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 383.694158][T11760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.713156][T11760] vhci_hcd vhci_hcd.0: Device attached [ 383.727840][T11760] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 383.734394][T11760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.747769][T11760] vhci_hcd vhci_hcd.0: Device attached [ 383.881428][T11767] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 383.888074][T11767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 383.902472][T11767] vhci_hcd vhci_hcd.0: Device attached [ 383.914038][T11760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.981745][T11760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 384.014490][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 384.027757][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 384.041552][T11774] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 384.072831][ T5891] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 384.082492][ T30] audit: type=1400 audit(1777050254.450:428): avc: denied { relabelto } for pid=11763 comm="syz.0.2008" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 384.160242][ T30] audit: type=1400 audit(1777050254.450:429): avc: denied { associate } for pid=11763 comm="syz.0.2008" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 384.243353][T11767] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 384.250082][T11767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.259798][T11767] vhci_hcd vhci_hcd.0: Device attached [ 384.269143][T11775] vhci_hcd: connection closed [ 384.269472][ T66] vhci_hcd vhci_hcd.1: stop threads [ 384.271855][T11765] vhci_hcd: connection closed [ 384.274284][T11768] vhci_hcd: connection closed [ 384.284364][T11761] vhci_hcd: connection reset by peer [ 384.295510][ T66] vhci_hcd vhci_hcd.1: release socket [ 385.246571][ T5829] usb 4-1: USB disconnect, device number 11 [ 385.254280][ T5829] em28xx 4-1:0.0: Disconnecting em28xx [ 385.262505][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 385.294479][ T5829] em28xx 4-1:0.0: Freeing device [ 385.304688][ T66] vhci_hcd vhci_hcd.1: stop threads [ 385.321658][ T66] vhci_hcd vhci_hcd.1: release socket [ 385.339053][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 385.476422][ T66] vhci_hcd vhci_hcd.1: stop threads [ 385.482149][ T66] vhci_hcd vhci_hcd.1: release socket [ 385.490306][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 385.504869][ T66] vhci_hcd vhci_hcd.1: stop threads [ 385.510141][ T66] vhci_hcd vhci_hcd.1: release socket [ 385.526346][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 385.872769][T11802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2017'. [ 386.472719][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 387.512488][ T30] audit: type=1400 audit(1777050257.669:430): avc: denied { read } for pid=11821 comm="syz.4.2026" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 387.708233][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 387.721181][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 387.826184][ T30] audit: type=1400 audit(1777050257.669:431): avc: denied { open } for pid=11821 comm="syz.4.2026" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 388.076861][ T5829] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 388.091598][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'. [ 388.722874][ T5829] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 388.746103][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.768704][ T5829] usb 5-1: config 0 has no interface number 0 [ 388.781537][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 388.794855][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.808921][ T5829] usb 5-1: Product: syz [ 388.815362][ T5829] usb 5-1: Manufacturer: syz [ 388.823421][ T5829] usb 5-1: SerialNumber: syz [ 388.838191][ T5829] usb 5-1: config 0 descriptor?? [ 388.992028][ T5829] hub 5-1:0.31: bad descriptor, ignoring hub [ 388.999120][ T5829] hub 5-1:0.31: probe with driver hub failed with error -5 [ 389.007659][ T5829] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 389.015040][ T5829] uvcvideo 5-1:0.31: No valid video chain found. [ 389.271865][ T30] audit: type=1400 audit(1777050259.326:432): avc: denied { ioctl } for pid=11821 comm="syz.4.2026" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 389.361769][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2036'. [ 389.565468][ T5891] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 390.185868][ T30] audit: type=1400 audit(1777050260.187:433): avc: denied { setopt } for pid=11882 comm="syz.1.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.440586][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 390.978920][ T5829] usb 5-1: USB disconnect, device number 9 [ 391.115060][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 391.522434][ T5882] usb usb36-port1: attempt power cycle [ 392.179887][ T30] audit: type=1400 audit(1777050262.049:434): avc: denied { map } for pid=11932 comm="syz.3.2058" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.204422][T11936] binder: binder_mmap: 11932 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 392.243541][ T30] audit: type=1400 audit(1777050262.105:435): avc: denied { ioctl } for pid=11932 comm="syz.3.2058" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 392.346316][ T5882] usb usb36-port1: unable to enumerate USB device [ 392.356184][ T30] audit: type=1400 audit(1777050262.105:436): avc: denied { setopt } for pid=11932 comm="syz.3.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.367521][T11941] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.375931][ T30] audit: type=1400 audit(1777050262.199:437): avc: denied { create } for pid=11937 comm="syz.0.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.407640][ T30] audit: type=1400 audit(1777050262.236:438): avc: denied { write } for pid=11937 comm="syz.0.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.572817][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 393.533568][T11969] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2073'. [ 393.711741][ T5882] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 393.926306][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 393.973385][T11979] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2067'. [ 394.067467][ T5882] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.085717][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.100268][ T5882] usb 1-1: Product: syz [ 394.104558][ T5882] usb 1-1: Manufacturer: syz [ 394.116408][ T5882] usb 1-1: SerialNumber: syz [ 394.128912][ T5882] usb 1-1: config 0 descriptor?? [ 394.232063][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'. [ 394.624701][ T5882] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 395.975584][T12002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 395.982139][T12002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.004526][T12002] vhci_hcd vhci_hcd.0: Device attached [ 396.084278][ T30] audit: type=1400 audit(1777050265.699:439): avc: denied { write } for pid=12012 comm="syz.3.2089" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 396.232239][T12013] vhci_hcd: connection closed [ 396.262676][ T8086] vhci_hcd vhci_hcd.4: stop threads [ 396.329771][ T5829] usb 42-1: SetAddress Request (2) to port 0 [ 397.132756][ T5882] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 397.417588][ T5882] usb 1-1: USB disconnect, device number 14 [ 397.666749][ T5829] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 398.067300][ T8086] vhci_hcd vhci_hcd.4: release socket [ 398.076977][ T8086] vhci_hcd vhci_hcd.4: disconnect device [ 398.092866][ T5829] usb 42-1: enqueue for inactive port 0 [ 398.104822][T12018] syzkaller0: entered promiscuous mode [ 398.110369][T12018] syzkaller0: entered allmulticast mode [ 398.360830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 398.427670][T12020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.683215][ T5829] usb usb42-port1: attempt power cycle [ 398.725471][ T30] audit: type=1400 audit(1777050268.178:440): avc: denied { watch } for pid=12029 comm="syz.4.2095" path="/398/file5" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 398.762744][ T30] audit: type=1400 audit(1777050268.216:441): avc: denied { watch_sb watch_reads } for pid=12029 comm="syz.4.2095" path="/398/file5" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 398.833630][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 399.482971][ T5829] usb usb42-port1: unable to enumerate USB device [ 399.634527][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 399.817717][T12047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 399.824170][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 399.824253][T12047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 399.834358][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 399.866916][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.869030][T12047] vhci_hcd vhci_hcd.0: Device attached [ 399.893042][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.914069][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.933637][ T5883] usb 5-1: Product: syz [ 399.935004][T12054] vhci_hcd: connection closed [ 399.943472][ T5883] usb 5-1: Manufacturer: syz [ 399.954567][T11428] vhci_hcd vhci_hcd.3: stop threads [ 399.962970][ T5883] usb 5-1: SerialNumber: syz [ 399.965901][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 399.978526][T11428] vhci_hcd vhci_hcd.3: release socket [ 399.985291][ T5883] usb 5-1: config 0 descriptor?? [ 399.990682][T11428] vhci_hcd vhci_hcd.3: disconnect device [ 400.014083][ T5883] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.034613][ T5883] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 400.035992][T12058] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2102'. [ 400.454278][T12064] tipc: Cannot configure node identity twice [ 400.868770][ T30] audit: type=1400 audit(1777050269.788:442): avc: denied { create } for pid=12061 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.925364][ T5883] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 400.928383][ T30] audit: type=1400 audit(1777050269.788:443): avc: denied { setopt } for pid=12061 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.932118][ T5883] em28xx 5-1:0.0: Config register raw data: 0x00 [ 400.957653][ T30] audit: type=1400 audit(1777050269.807:444): avc: denied { write } for pid=12061 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.073286][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 402.672533][ T5883] usb 5-1: USB disconnect, device number 10 [ 402.721699][ T5883] em28xx 5-1:0.0: Disconnecting em28xx [ 402.840477][ T5883] em28xx 5-1:0.0: Freeing device [ 403.203192][T12107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 403.209730][T12107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 403.224739][T12107] vhci_hcd vhci_hcd.0: Device attached [ 403.425724][T12117] vhci_hcd: connection closed [ 403.467812][T11428] vhci_hcd vhci_hcd.1: stop threads [ 403.497247][T11428] vhci_hcd vhci_hcd.1: release socket [ 403.515054][ T5829] usb 36-1: SetAddress Request (6) to port 0 [ 403.528192][T11428] vhci_hcd vhci_hcd.1: disconnect device [ 403.542569][ T5829] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 403.585519][ T5829] usb 36-1: enqueue for inactive port 0 [ 404.377080][ T5829] usb usb36-port1: attempt power cycle [ 405.019213][ T5829] usb usb36-port1: unable to enumerate USB device [ 407.151302][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 407.177861][T12202] ceph: No mds server is up or the cluster is laggy [ 407.303938][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2147'. [ 407.324743][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2147'. [ 408.991758][ T30] audit: type=1400 audit(1777050277.780:445): avc: denied { setopt } for pid=12238 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 409.610094][T12250] syzkaller1: entered promiscuous mode [ 409.628022][T12250] syzkaller1: entered allmulticast mode [ 409.756060][T12255] nvme_fabrics: missing parameter 'transport=%s' [ 409.762999][T12255] nvme_fabrics: missing parameter 'nqn=%s' [ 410.693038][ T5829] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 410.905653][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 410.915660][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 410.931166][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 410.951559][ T5829] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 410.960986][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2171'. [ 410.970413][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.979115][ T5829] usb 3-1: Product: syz [ 410.983952][T12284] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2171'. [ 410.993598][ T5829] usb 3-1: Manufacturer: syz [ 410.998243][ T5829] usb 3-1: SerialNumber: syz [ 411.010642][ T5829] usb 3-1: config 0 descriptor?? [ 411.019329][ T5829] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 411.043686][ T5829] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 411.108928][ T988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 411.279519][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 411.287281][ T988] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 411.299710][ T988] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 411.321231][ T988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 411.339529][ T988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 411.358228][ T988] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 411.363545][T12293] syzkaller1: entered promiscuous mode [ 411.370323][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.384626][T12293] syzkaller1: entered allmulticast mode [ 411.894049][ T988] usb 5-1: Product: syz [ 411.898293][ T988] usb 5-1: Manufacturer: syz [ 411.914911][ T988] usb 5-1: SerialNumber: syz [ 411.928661][ T988] usb 5-1: config 0 descriptor?? [ 411.980913][ T5829] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 411.987968][ T5829] em28xx 3-1:0.0: Config register raw data: 0x00 [ 412.233339][ T988] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 412.241915][ C0] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 412.252896][ T988] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 412.292126][ T988] usb 5-1: USB disconnect, device number 11 [ 412.298247][ T30] audit: type=1400 audit(1777050280.877:446): avc: denied { call } for pid=12307 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 412.322456][ T30] audit: type=1400 audit(1777050280.877:447): avc: denied { transfer } for pid=12307 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 414.310798][T12325] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.610750][ T5829] usb 3-1: USB disconnect, device number 7 [ 414.635530][ T5829] em28xx 3-1:0.0: Disconnecting em28xx [ 414.658781][ T5829] em28xx 3-1:0.0: Freeing device [ 415.426390][T12351] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 415.445557][T12349] mmap: syz.2.2194 (12349) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.597198][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 416.606244][T12375] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2200'. [ 417.198599][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 417.622173][T12395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2211'. [ 417.634876][T12395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2211'. [ 417.718853][T12387] ceph: No mds server is up or the cluster is laggy [ 417.730939][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 418.357340][T12405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.477032][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 419.487038][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 422.565563][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 422.886171][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 422.910019][ T5891] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 422.945014][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 422.994435][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 423.244071][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.502753][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 423.532403][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.552700][ T5891] usb 3-1: Product: syz [ 423.563115][ T5891] usb 3-1: Manufacturer: syz [ 423.574633][ T5891] usb 3-1: SerialNumber: syz [ 423.590619][ T5891] usb 3-1: config 0 descriptor?? [ 423.697097][ T988] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 423.832711][T12466] netlink: 'syz.2.2240': attribute type 7 has an invalid length. [ 423.882057][T12466] netlink: 'syz.2.2240': attribute type 7 has an invalid length. [ 423.895620][ T5891] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 423.913304][ T988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 423.929899][ T5891] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 423.942698][T12466] netlink: 'syz.2.2240': attribute type 7 has an invalid length. [ 423.976934][ T988] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 424.010997][ T988] usb 1-1: can't read configurations, error -71 [ 424.125163][ T5891] usb 3-1: USB disconnect, device number 8 [ 426.396256][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 426.493506][T12530] ceph: No mds server is up or the cluster is laggy [ 428.492609][ T30] audit: type=1400 audit(1777050296.037:448): avc: denied { map } for pid=12547 comm="syz.2.2267" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 428.541920][ T30] audit: type=1400 audit(1777050296.065:449): avc: denied { execute } for pid=12547 comm="syz.2.2267" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 428.691485][T12557] syzkaller0: entered promiscuous mode [ 428.754371][T12557] syzkaller0: entered allmulticast mode [ 430.859822][T12603] syzkaller0: entered promiscuous mode [ 430.883025][T12603] syzkaller0: entered allmulticast mode [ 431.766806][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 431.775961][T12611] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 432.000647][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 432.210872][T12635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 432.749203][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'. [ 432.933476][T12655] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2308'. [ 435.044873][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 435.091332][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 435.302784][ T30] audit: type=1400 audit(1777050302.401:450): avc: denied { write } for pid=12693 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 435.306346][T12696] netlink: 'syz.4.2323': attribute type 12 has an invalid length. [ 437.212830][ T30] audit: type=1400 audit(1777050304.132:451): avc: denied { bind } for pid=12703 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.481275][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2344'. [ 441.490411][T12763] nbd: must specify at least one socket [ 443.069829][T12786] syz_tun: entered promiscuous mode [ 443.091581][T12786] vlan2: entered promiscuous mode [ 443.397103][ T30] audit: type=1400 audit(1777050309.981:452): avc: denied { write } for pid=12802 comm="syz.1.2359" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.391442][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.427247][ T30] audit: type=1326 audit(1777050314.678:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4365b9cdd9 code=0x7ffc0000 [ 449.040439][ T30] audit: type=1326 audit(1777050314.697:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4365b9cdd9 code=0x7ffc0000 [ 449.173653][T12884] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 449.268678][ T30] audit: type=1326 audit(1777050315.474:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4365b9cdd9 code=0x7ffc0000 [ 449.394258][ T30] audit: type=1326 audit(1777050315.474:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4365b9cdd9 code=0x7ffc0000 [ 449.749274][ T5829] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 450.744730][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2393'. [ 450.754630][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 451.236171][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.247634][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.261000][ T5829] usb 3-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 451.304011][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.425593][ T5829] usb 3-1: config 0 descriptor?? [ 451.514419][T12921] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.741218][ T5883] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 451.837669][T12931] pimreg1: tun_chr_ioctl cmd 1074025673 [ 451.912305][ T5883] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 451.922726][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.930797][ T5883] usb 4-1: Product: syz [ 451.934993][ T5883] usb 4-1: Manufacturer: syz [ 451.939614][ T5883] usb 4-1: SerialNumber: syz [ 451.959269][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 451.982245][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.008351][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.026437][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.041735][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.145848][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.164066][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.530265][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.537744][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.545881][ T5829] hid-generic 0003:0408:3001.0005: unknown main item tag 0x0 [ 452.561143][ T5829] hid-generic 0003:0408:3001.0005: hidraw0: USB HID v0.0b Device [HID 0408:3001] on usb-dummy_hcd.2-1/input0 [ 452.578921][ T5829] usb 3-1: USB disconnect, device number 9 [ 452.680928][T12946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 452.687576][T12946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 452.722545][T12946] vhci_hcd vhci_hcd.0: Device attached [ 452.736270][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 452.753893][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 452.793048][T12949] fido_id[12949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 453.115388][ T5891] usb 34-1: SetAddress Request (3) to port 0 [ 453.581180][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 453.817990][ T5891] usb 34-1: new SuperSpeed USB device number 3 using vhci_hcd [ 453.829577][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 453.839796][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 453.978428][ T5883] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 454.002789][ T5883] usb 4-1: USB disconnect, device number 12 [ 454.539870][T12952] vhci_hcd: connection reset by peer [ 454.552280][ T1038] vhci_hcd vhci_hcd.0: stop threads [ 454.566189][ T1038] vhci_hcd vhci_hcd.0: release socket [ 454.577663][ T1038] vhci_hcd vhci_hcd.0: disconnect device [ 455.396363][ T30] audit: type=1400 audit(1777050321.210:457): avc: denied { remount } for pid=12979 comm="syz.3.2414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 456.271988][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 456.481628][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 456.555965][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.692491][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.825957][ T5883] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 456.861052][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.913666][ T5883] usb 4-1: config 0 descriptor?? [ 457.173437][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 457.546170][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 457.552711][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.599770][ T5883] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 457.674948][T13021] vhci_hcd vhci_hcd.0: Device attached [ 458.085576][ T5829] usb 36-1: SetAddress Request (10) to port 0 [ 458.095149][T13036] vhci_hcd: connection closed [ 458.100219][ T8086] vhci_hcd vhci_hcd.1: stop threads [ 458.171970][ T5829] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 458.226661][ T8086] vhci_hcd vhci_hcd.1: release socket [ 458.293522][ T8086] vhci_hcd vhci_hcd.1: disconnect device [ 458.325516][ T5883] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 458.340670][ T5883] usb 4-1: USB disconnect, device number 13 [ 459.344627][ T5891] usb 34-1: device descriptor read/8, error -110 [ 459.776097][ T5891] usb usb34-port1: attempt power cycle [ 460.105149][T13061] syzkaller0: entered promiscuous mode [ 460.111043][T13061] syzkaller0: entered allmulticast mode [ 460.317711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 460.451177][ T5891] usb usb34-port1: unable to enumerate USB device [ 462.170288][T13102] syzkaller0: entered promiscuous mode [ 462.176019][T13102] syzkaller0: entered allmulticast mode [ 462.397675][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'. [ 462.406873][T13104] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2461'. [ 463.504942][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 463.572257][T13105] ceph: No mds server is up or the cluster is laggy [ 463.734890][ T5829] usb 36-1: device descriptor read/8, error -110 [ 464.500351][T13126] netlink: 'syz.3.2469': attribute type 4 has an invalid length. [ 464.584035][T13126] netlink: 'syz.3.2469': attribute type 4 has an invalid length. [ 464.607872][ T5829] usb usb36-port1: attempt power cycle [ 464.848896][ T30] audit: type=1400 audit(1777050330.054:458): avc: denied { read } for pid=13143 comm="syz.3.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 465.228405][ T5829] usb usb36-port1: unable to enumerate USB device [ 465.518292][T13156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2480'. [ 465.531847][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 466.041619][ T30] audit: type=1400 audit(1777050331.176:459): avc: denied { create } for pid=13162 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 466.450971][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 466.570912][ T30] audit: type=1400 audit(1777050331.644:460): avc: denied { listen } for pid=13175 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 466.898602][ T30] audit: type=1400 audit(1777050331.654:461): avc: denied { accept } for pid=13175 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 470.595725][T13263] syzkaller0: entered promiscuous mode [ 470.601341][T13263] syzkaller0: entered allmulticast mode [ 470.630593][ T5882] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 470.814818][ T5882] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 470.834699][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.870197][ T5882] usb 3-1: config 0 has no interface number 0 [ 470.897072][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 470.921614][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.956340][ T5882] usb 3-1: Product: syz [ 470.965495][ T5882] usb 3-1: Manufacturer: syz [ 470.978629][ T5882] usb 3-1: SerialNumber: syz [ 471.018344][ T5882] usb 3-1: config 0 descriptor?? [ 471.042190][ T5882] hub 3-1:0.31: bad descriptor, ignoring hub [ 471.069703][ T5882] hub 3-1:0.31: probe with driver hub failed with error -5 [ 471.092892][T13291] syzkaller0: entered promiscuous mode [ 471.097337][ T5882] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 471.111431][ T5882] uvcvideo 3-1:0.31: No valid video chain found. [ 471.113998][T13291] syzkaller0: entered allmulticast mode [ 472.525511][ T5898] usb 3-1: USB disconnect, device number 10 [ 472.995376][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 473.008367][T13331] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2553'. [ 473.027553][T13336] QAT: Invalid ioctl 1075883590 [ 473.034835][T13336] QAT: Invalid ioctl 1075883590 [ 473.039994][T13336] QAT: Invalid ioctl 1075883590 [ 473.045490][T13336] QAT: Invalid ioctl 1075883590 [ 473.050501][T13336] QAT: Invalid ioctl 1075883590 [ 473.056286][T13336] QAT: Invalid ioctl 1075883590 [ 473.061334][T13336] QAT: Invalid ioctl 1075883590 [ 473.066737][T13336] QAT: Invalid ioctl 1075883590 [ 473.071966][T13336] QAT: Invalid ioctl 1075883590 [ 473.078291][T13336] QAT: Invalid ioctl 1075883590 [ 473.215871][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 473.425216][ T5898] usb 2-1: device descriptor read/64, error -71 [ 473.593396][ T30] audit: type=1400 audit(1777050338.214:462): avc: denied { ioctl } for pid=13340 comm="syz.2.2559" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 474.109276][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 475.194620][ T5898] usb 2-1: device descriptor read/64, error -71 [ 476.218876][ T5898] usb usb2-port1: attempt power cycle [ 476.929990][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'. [ 476.990573][ T30] audit: type=1400 audit(1777050341.423:463): avc: denied { associate } for pid=13388 comm="syz.2.2577" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 477.022268][T13391] syzkaller0: entered promiscuous mode [ 477.129285][T13391] syzkaller0: entered allmulticast mode [ 478.512893][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.530004][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.539459][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.555074][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.564334][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.264235][T13437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2593'. [ 480.439641][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 480.448986][T13438] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2594'. [ 480.795486][ T5830] Bluetooth: hci5: command tx timeout [ 481.765407][T13407] Failed to initialize the IGMP autojoin socket (err -2) [ 481.848344][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 481.885034][ T30] audit: type=1400 audit(1777050346.000:464): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 481.903143][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2598'. [ 482.798165][T13407] chnl_net:caif_netlink_parms(): no params data found [ 482.907922][ T30] audit: type=1400 audit(1777050346.954:465): avc: denied { write } for pid=13462 comm="syz.4.2604" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 482.969020][ T30] audit: type=1400 audit(1777050347.010:466): avc: denied { ioctl } for pid=13461 comm="syz.2.2603" path="socket:[38195]" dev="sockfs" ino=38195 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.032809][ T5830] Bluetooth: hci5: command tx timeout [ 483.294583][T13468] syzkaller0: entered promiscuous mode [ 483.300861][T13468] syzkaller0: entered allmulticast mode [ 485.238543][ T5830] Bluetooth: hci5: command tx timeout [ 485.274354][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 487.461882][ T5830] Bluetooth: hci5: command tx timeout [ 489.405561][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.415032][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.422989][T13407] bridge_slave_0: entered allmulticast mode [ 489.431301][T13407] bridge_slave_0: entered promiscuous mode [ 489.461902][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.477659][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.503095][T13407] bridge_slave_1: entered allmulticast mode [ 489.531726][T13407] bridge_slave_1: entered promiscuous mode [ 489.546734][ T30] audit: type=1400 audit(1777050353.158:467): avc: denied { getopt } for pid=13531 comm="syz.0.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 489.668647][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 489.681026][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 489.700740][ T5830] Bluetooth: hci1: hardware error 0x00 [ 490.736647][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.795826][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.837983][ T5829] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 492.258497][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 493.094554][ T5829] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 494.366164][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'. [ 494.551718][T11428] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 494.561124][T11428] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 496.235478][T11428] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 496.251205][T11428] bond0 (unregistering): Released all slaves [ 496.280217][T11428] bond1 (unregistering): Released all slaves [ 496.370147][T13407] team0: Port device team_slave_0 added [ 496.442082][T13407] team0: Port device team_slave_1 added [ 496.557418][T13586] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 496.567118][T13586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 496.579266][T13586] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 496.928326][ T30] audit: type=1400 audit(1777050359.756:468): avc: denied { firmware_load } for pid=13576 comm="syz.3.2634" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 497.021231][T11428] tipc: Left network mode [ 497.031689][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.056546][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.183418][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.203542][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.211376][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.243112][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.226183][T13641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 499.465221][T13407] hsr_slave_0: entered promiscuous mode [ 499.496152][T13407] hsr_slave_1: entered promiscuous mode [ 499.516641][T13407] debugfs: 'hsr0' already exists in 'hsr' [ 499.666174][T13407] Cannot create hsr debugfs directory [ 500.550796][ T30] audit: type=1400 audit(1777050363.424:469): avc: denied { write } for pid=13677 comm="syz.2.2655" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 500.731466][T13664] syzkaller0: entered promiscuous mode [ 500.737867][T13664] syzkaller0: entered allmulticast mode [ 505.852304][T13719] netlink: 'syz.2.2666': attribute type 21 has an invalid length. [ 505.912517][T13718] nvme_fabrics: missing parameter 'transport=%s' [ 505.919202][T13718] nvme_fabrics: missing parameter 'nqn=%s' [ 505.949973][T11428] hsr_slave_0: left promiscuous mode [ 505.957243][T11428] hsr_slave_1: left promiscuous mode [ 506.484622][T13731] ceph: No mds server is up or the cluster is laggy [ 506.496665][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 507.444819][ T5898] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 507.648154][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 507.660876][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.681159][ T5898] usb 1-1: config 0 has no interfaces? [ 507.694255][ T5898] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 507.725648][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.776964][ T5898] usb 1-1: Product: syz [ 507.797059][ T5898] usb 1-1: Manufacturer: syz [ 507.805494][T13754] nvme_fabrics: missing parameter 'transport=%s' [ 507.808290][ T5898] usb 1-1: SerialNumber: syz [ 507.811955][T13754] nvme_fabrics: missing parameter 'nqn=%s' [ 507.929902][ T5898] usb 1-1: config 0 descriptor?? [ 508.067324][ T30] audit: type=1400 audit(1777050370.499:470): avc: denied { bind } for pid=13760 comm="syz.2.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 508.119876][ T30] audit: type=1400 audit(1777050370.527:471): avc: denied { ioctl } for pid=13760 comm="syz.2.2678" path="socket:[39197]" dev="sockfs" ino=39197 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 508.164887][ T30] audit: type=1400 audit(1777050370.527:472): avc: denied { connect } for pid=13760 comm="syz.2.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 508.284574][T11428] IPVS: stop unused estimator thread 0... [ 508.779033][ T5891] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 508.810526][T13407] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 508.834874][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.852917][T13407] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 508.880790][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.903945][T13407] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 508.932751][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.952472][T13407] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 508.962875][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 508.978059][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 508.994806][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.001894][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 509.021598][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 509.042643][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.066099][ T5891] usb 5-1: Product: syz [ 509.075902][ T5891] usb 5-1: Manufacturer: syz [ 509.086256][ T5891] usb 5-1: SerialNumber: syz [ 509.109483][ T5891] usb 5-1: config 0 descriptor?? [ 509.148811][ T5891] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 509.178829][T13781] fuse: Bad value for 'group_id' [ 509.184004][T13781] fuse: Bad value for 'group_id' [ 509.272977][ T5891] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 509.916385][ T5891] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 510.253499][ T5891] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 510.291606][ T5891] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 510.299358][T13790] nvme_fabrics: missing parameter 'transport=%s' [ 510.306171][T13790] nvme_fabrics: missing parameter 'nqn=%s' [ 510.341299][ T5891] em28xx 5-1:0.0: No AC97 audio processor [ 510.401222][ T5829] usb 1-1: USB disconnect, device number 17 [ 510.451106][ T5891] usb 5-1: USB disconnect, device number 12 [ 510.466097][ T30] audit: type=1400 audit(1777050372.745:473): avc: denied { bind } for pid=13797 comm="syz.0.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.499910][ T30] audit: type=1400 audit(1777050372.745:474): avc: denied { listen } for pid=13797 comm="syz.0.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.525923][ T30] audit: type=1400 audit(1777050372.745:475): avc: denied { accept } for pid=13797 comm="syz.0.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.530534][ T5891] em28xx 5-1:0.0: Disconnecting em28xx [ 510.609891][ T5891] em28xx 5-1:0.0: Freeing device [ 510.724984][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.797503][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.804738][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.881887][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.889086][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.793916][T13822] nvme_fabrics: missing parameter 'transport=%s' [ 511.800363][T13822] nvme_fabrics: missing parameter 'nqn=%s' [ 512.078392][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.493183][T13407] veth0_vlan: entered promiscuous mode [ 512.518597][ T30] audit: type=1400 audit(1777050374.663:476): avc: denied { mount } for pid=13850 comm="syz.0.2708" name="/" dev="hugetlbfs" ino=41208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 512.554467][T13407] veth1_vlan: entered promiscuous mode [ 512.767026][ T30] audit: type=1400 audit(1777050374.897:477): avc: denied { read } for pid=13852 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 512.789021][T13407] veth0_macvtap: entered promiscuous mode [ 512.862816][T13407] veth1_macvtap: entered promiscuous mode [ 513.044725][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.093010][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.113517][T13407] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 513.135153][T13407] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 513.166259][T13407] wireguard: wg0: Could not create IPv4 socket [ 513.175786][T13407] wireguard: wg1: Could not create IPv4 socket [ 513.187008][T13407] wireguard: wg2: Could not create IPv4 socket [ 513.344692][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 513.513135][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 513.594628][ T5891] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.633335][ T5891] usb 4-1: config 0 has no interface number 0 [ 513.715687][ T5891] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.808051][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.837303][ T5891] usb 4-1: Product: syz [ 513.841686][ T5891] usb 4-1: Manufacturer: syz [ 513.847027][ T5891] usb 4-1: SerialNumber: syz [ 513.883587][ T5891] usb 4-1: config 0 descriptor?? [ 513.912728][ T5891] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 513.977670][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.579488][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 514.642009][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 514.689996][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 514.739843][ T5891] usb 4-1: USB disconnect, device number 14 [ 514.922482][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 514.942070][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 514.964564][ T5891] quatech2 4-1:0.51: device disconnected [ 515.650388][ T5882] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 515.833362][ T5882] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 515.874588][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.906323][ T5882] usb 5-1: config 0 has no interface number 0 [ 515.969673][T13918] syz.0.2724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 515.987053][T13918] ubi31: attaching mtd0 [ 516.005157][T13918] ubi31: scanning is finished [ 516.009894][T13918] ubi31: empty MTD device detected [ 516.933191][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.084188][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.094658][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 517.106327][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 517.113571][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 517.123734][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.137129][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.145368][ T5882] usb 5-1: Product: syz [ 517.149679][ T5882] usb 5-1: Manufacturer: syz [ 517.154340][ T5882] usb 5-1: SerialNumber: syz [ 517.169846][ T5882] usb 5-1: config 0 descriptor?? [ 517.206581][T13915] Failed to initialize the IGMP autojoin socket (err -2) [ 517.260261][ T5882] hub 5-1:0.31: bad descriptor, ignoring hub [ 517.274769][ T5882] hub 5-1:0.31: probe with driver hub failed with error -5 [ 517.289014][T13918] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 517.290300][ T5882] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 517.304813][ T5882] uvcvideo 5-1:0.31: No valid video chain found. [ 517.544938][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 517.729413][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2731'. [ 518.765868][ T5898] usb 5-1: USB disconnect, device number 13 [ 519.352240][ T50] Bluetooth: hci0: command tx timeout [ 519.856883][T13982] ubi31: attaching mtd0 [ 519.869593][T13982] ubi31: scanning is finished [ 520.627484][T13982] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 520.836536][ T30] audit: type=1400 audit(1777050382.449:478): avc: denied { setattr } for pid=13993 comm="syz.4.2745" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 521.132278][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 521.279209][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2748'. [ 521.442009][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 521.455181][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.570830][ T50] Bluetooth: hci0: command tx timeout [ 521.588769][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.734054][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 521.757227][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.774487][ T5882] usb 3-1: Product: syz [ 521.783422][ T5882] usb 3-1: Manufacturer: syz [ 521.795766][ T5882] usb 3-1: SerialNumber: syz [ 521.815764][ T5882] usb 3-1: config 0 descriptor?? [ 522.215234][T13915] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 522.237752][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.258221][T13915] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 522.258465][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 522.280116][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.292287][T14030] ceph: No mds server is up or the cluster is laggy [ 522.302816][T13915] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 522.328316][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.344404][T13915] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 522.385565][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.793355][ T50] Bluetooth: hci0: command tx timeout [ 523.860214][T13915] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 523.901367][T13915] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 523.950633][T13915] wireguard: wg0: Could not create IPv4 socket [ 523.967637][T13915] wireguard: wg1: Could not create IPv4 socket [ 523.987490][T13915] wireguard: wg2: Could not create IPv4 socket [ 524.186168][ T9] usb 3-1: USB disconnect, device number 11 [ 524.266637][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 524.497961][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 524.521353][T14104] ceph: No mds server is up or the cluster is laggy [ 524.743284][ T30] audit: type=1400 audit(1777050386.099:479): avc: denied { create } for pid=14124 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 524.790623][ T30] audit: type=1400 audit(1777050386.127:480): avc: denied { bind } for pid=14124 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 524.818457][ T30] audit: type=1400 audit(1777050386.127:481): avc: denied { bind } for pid=14124 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 524.909132][T14130] tipc: Enabling of bearer rejected, failed to enable media [ 525.014494][T14131] syzkaller0: entered promiscuous mode [ 525.022604][T14131] syzkaller0: entered allmulticast mode [ 525.340536][ T30] audit: type=1400 audit(1777050386.632:482): avc: denied { read } for pid=14153 comm="syz.0.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.510194][ T30] audit: type=1400 audit(1777050386.763:483): avc: denied { mount } for pid=14159 comm="syz.0.2787" name="/" dev="ramfs" ino=42694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 525.566819][ T5891] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 525.728865][ T5891] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 525.741678][ T5891] usb 4-1: config 0 has no interface number 0 [ 525.755399][ T5891] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 525.772822][ T5891] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 525.803381][ T5891] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 525.833498][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.877589][ T5891] usb 4-1: Product: syz [ 525.889969][ T5891] usb 4-1: Manufacturer: syz [ 525.897210][ T5891] usb 4-1: SerialNumber: syz [ 525.905034][ T5891] usb 4-1: config 0 descriptor?? [ 525.920145][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.933043][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.171082][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.201753][T14151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.482339][ T5891] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 526.493219][ T5891] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.394351][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 527.570416][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 527.589165][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.605443][ T9] usb 5-1: config 0 has no interface number 0 [ 527.620907][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 527.639588][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.659081][ T9] usb 5-1: Product: syz [ 527.668077][ T9] usb 5-1: Manufacturer: syz [ 527.682710][ T9] usb 5-1: SerialNumber: syz [ 527.694174][ T9] usb 5-1: config 0 descriptor?? [ 527.715093][ T9] hub 5-1:0.31: bad descriptor, ignoring hub [ 527.728487][ T9] hub 5-1:0.31: probe with driver hub failed with error -5 [ 527.749928][ T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 527.767915][ T9] uvcvideo 5-1:0.31: No valid video chain found. [ 528.161967][ T5891] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 528.177826][T14230] ALSA: mixer_oss: invalid OSS volume '' [ 528.190422][ T5891] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 528.231361][ T5891] usb 4-1: USB disconnect, device number 15 [ 528.432299][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.445977][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.463819][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.484629][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.497736][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.559133][T14237] Failed to initialize the IGMP autojoin socket (err -2) [ 529.067541][T14259] ubi31: attaching mtd0 [ 529.078597][T14259] ubi31: scanning is finished [ 529.568682][T14259] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 529.577489][T14259] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 529.584874][T14259] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 529.591914][T14259] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 529.599424][T14259] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 529.606383][T14259] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 529.614470][T14259] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1092435357 [ 529.624633][T14259] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 529.768626][T14266] ubi31: background thread "ubi_bgt31d" started, PID 14266 [ 530.045452][ T5898] usb 5-1: USB disconnect, device number 14 [ 530.113486][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 530.717574][ T50] Bluetooth: hci0: command tx timeout [ 531.276374][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 531.465675][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 531.484407][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 531.530381][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 531.576417][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 531.607507][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.633656][ T5882] usb 1-1: Product: syz [ 531.650051][ T5882] usb 1-1: Manufacturer: syz [ 531.661604][ T5882] usb 1-1: SerialNumber: syz [ 531.682203][ T5882] usb 1-1: config 0 descriptor?? [ 531.697560][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 531.723260][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 531.756647][T14310] tipc: Enabling of bearer rejected, failed to enable media [ 531.793075][T14310] syzkaller0: entered promiscuous mode [ 531.799286][T14310] syzkaller0: entered allmulticast mode [ 531.808701][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 531.898751][T14237] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 531.933726][T14237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.953270][T14237] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 531.979726][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 531.986657][T14237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.998855][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.013268][T14237] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 532.025978][ T9] usb 3-1: config 0 has no interface number 0 [ 532.046330][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 532.054906][T14237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.063461][T14237] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 532.082690][T14237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.105541][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 532.129752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.156235][ T9] usb 3-1: Product: syz [ 532.172627][ T9] usb 3-1: Manufacturer: syz [ 532.196358][ T9] usb 3-1: SerialNumber: syz [ 532.227233][ T9] usb 3-1: config 0 descriptor?? [ 532.393856][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 532.432867][T14321] ceph: No mds server is up or the cluster is laggy [ 532.443319][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 532.617455][ T5882] em28xx 1-1:0.0: Config register raw data: 0x00 [ 532.799226][ T30] audit: type=1400 audit(1777050393.641:484): avc: denied { sys_module } for pid=14237 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 532.827650][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 532.853409][ T5882] usb 1-1: USB disconnect, device number 18 [ 532.870643][ T5882] em28xx 1-1:0.0: Disconnecting em28xx [ 532.894983][ T5882] em28xx 1-1:0.0: Freeing device [ 532.978001][ T50] Bluetooth: hci0: command tx timeout [ 533.127456][T14342] syzkaller0: entered promiscuous mode [ 533.142397][T14342] syzkaller0: entered allmulticast mode [ 533.263225][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 533.280375][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2822'. [ 533.281435][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.299943][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 533.307958][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 533.334945][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 533.356161][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 533.384164][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 533.401781][T14237] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 533.420023][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 533.462095][T14237] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 533.521311][T14237] wireguard: wg0: Could not create IPv4 socket [ 533.537983][T14237] wireguard: wg1: Could not create IPv4 socket [ 533.556675][T14237] wireguard: wg2: Could not create IPv4 socket [ 533.757328][T14367] fuse: Unknown parameter 'grou00000000000000000000' [ 534.759692][ T988] usb 3-1: USB disconnect, device number 12 [ 534.811524][ T30] audit: type=1400 audit(1777050395.522:485): avc: denied { create } for pid=14376 comm="syz.0.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 534.814750][T14377] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 534.840093][ T30] audit: type=1400 audit(1777050395.531:486): avc: denied { ioctl } for pid=14376 comm="syz.0.2830" path="socket:[43552]" dev="sockfs" ino=43552 ioctlcmd=0x61d1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 534.950502][T14390] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 534.969200][T14390] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 535.938183][ T30] audit: type=1400 audit(1777050396.570:487): avc: denied { create } for pid=14417 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.325615][T14427] fuse: Unknown parameter 'grou00000000000000000000' [ 536.456242][ T30] audit: type=1400 audit(1777050396.570:488): avc: denied { write } for pid=14417 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.634211][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 536.889760][ T30] audit: type=1400 audit(1777050397.468:489): avc: denied { create } for pid=14434 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 536.947641][T14435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2843'. [ 536.964562][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 536.996757][T14441] syzkaller0: entered promiscuous mode [ 537.018514][T14441] syzkaller0: entered allmulticast mode [ 537.091147][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 537.133922][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 537.516619][T14469] netlink: 'syz.0.2852': attribute type 10 has an invalid length. [ 537.546202][T14469] bridge_slave_1: left allmulticast mode [ 537.577383][T14469] bridge_slave_1: left promiscuous mode [ 537.604222][T14469] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.674231][T14479] ubi: mtd0 is already attached to ubi31 [ 537.985305][T14469] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 538.573997][T14492] smbdirect: ib_dev[syz0] renamed to [syz1] [ 538.589775][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.606542][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.622699][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.635872][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.645053][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.675840][T14496] Failed to initialize the IGMP autojoin socket (err -2) [ 538.682774][T14502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2858'. [ 538.699650][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 538.938208][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 538.980820][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 539.166371][ T30] audit: type=1400 audit(1777050399.602:490): avc: denied { read } for pid=14515 comm="syz.4.2862" path="socket:[44543]" dev="sockfs" ino=44543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 539.802260][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 539.839726][T14545] ceph: No mds server is up or the cluster is laggy [ 540.132470][T14556] syzkaller0: entered promiscuous mode [ 540.155728][T14556] syzkaller0: entered allmulticast mode [ 540.890766][ T5830] Bluetooth: hci0: command tx timeout [ 541.109958][ T30] audit: type=1400 audit(1777050401.427:491): avc: denied { write } for pid=14574 comm="syz.4.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 543.166796][ T5830] Bluetooth: hci0: command tx timeout [ 543.261295][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 545.339634][ T5830] Bluetooth: hci0: command tx timeout [ 545.855272][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2888'. [ 546.033136][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 546.658701][T14750] tipc: Enabling of bearer rejected, failed to enable media [ 546.691646][ T30] audit: type=1400 audit(1777050406.639:492): avc: denied { set_context_mgr } for pid=14757 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 546.695422][T14750] syzkaller0: entered promiscuous mode [ 546.719958][T14760] binder: BINDER_SET_CONTEXT_MGR already set [ 546.748459][T14760] binder: 14757:14760 ioctl 4018620d 200000000040 returned -16 [ 546.800772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 546.827437][T14750] syzkaller0: entered allmulticast mode [ 547.570176][ T5830] Bluetooth: hci0: command tx timeout [ 547.662344][T14496] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 547.681480][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.691128][T14496] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 547.711488][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.735843][T14496] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 547.758546][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.842806][T14496] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 547.871627][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.295143][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2904'. [ 548.305119][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 548.426766][T14821] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2906'. [ 548.788534][T14496] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 548.855023][T14496] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 548.883410][T14496] wireguard: wg0: Could not create IPv4 socket [ 548.924773][T14496] wireguard: wg1: Could not create IPv4 socket [ 548.998132][T14496] wireguard: wg2: Could not create IPv4 socket [ 549.527980][T14845] syzkaller0: entered promiscuous mode [ 549.537016][T14845] syzkaller0: entered allmulticast mode [ 549.995391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 550.533969][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 550.797731][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 550.891155][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 551.503773][ T30] audit: type=1400 audit(1777050411.150:493): avc: denied { getopt } for pid=14925 comm="syz.4.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 551.996378][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2931'. [ 553.461374][T14999] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 553.598957][ T30] audit: type=1400 audit(1777050413.106:494): avc: denied { getopt } for pid=15002 comm="syz.0.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 554.338039][T14932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.503589][T15035] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2938'. [ 556.213449][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 557.262239][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.277866][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.288686][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.296449][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.304008][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.366664][T15121] Failed to initialize the IGMP autojoin socket (err -2) [ 557.390174][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 557.410083][T15129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2951'. [ 557.422182][ T5891] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 557.649615][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 557.651468][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'. [ 557.668250][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 557.869580][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 557.886717][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 557.920509][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 557.954611][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.986164][ T5891] usb 3-1: Product: syz [ 558.000391][ T5891] usb 3-1: Manufacturer: syz [ 558.017027][ T5891] usb 3-1: SerialNumber: syz [ 558.048875][ T5891] usb 3-1: config 0 descriptor?? [ 558.075115][ T5891] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 558.533876][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 558.537973][T15165] Bluetooth: MGMT ver 1.23 [ 559.451361][T15180] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 559.537788][ T50] Bluetooth: hci0: command tx timeout [ 559.555130][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 559.850705][T15121] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 559.882716][T15121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.907406][T15121] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 559.939362][T15121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.960101][T15121] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 559.996485][T15121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.012773][T15121] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 560.046867][T15121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.493103][ T988] usb 3-1: USB disconnect, device number 13 [ 561.750519][ T50] Bluetooth: hci0: command tx timeout [ 562.586216][T15121] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 562.869440][ T5898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 562.878770][T15121] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 562.942216][T15121] wireguard: wg0: Could not create IPv4 socket [ 562.999833][T15121] wireguard: wg1: Could not create IPv4 socket [ 563.288608][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 563.323280][ T5898] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 563.388814][ T5898] usb 3-1: config 0 has no interface number 0 [ 563.415068][T15121] wireguard: wg2: Could not create IPv4 socket [ 563.427742][ T5898] usb 3-1: config 0 interface 184 has no altsetting 0 [ 563.456030][ T5898] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 563.481587][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.523170][ T5898] usb 3-1: Product: syz [ 563.551022][ T5898] usb 3-1: Manufacturer: syz [ 563.575040][ T5898] usb 3-1: SerialNumber: syz [ 563.605007][ T5898] usb 3-1: config 0 descriptor?? [ 563.745156][ T30] audit: type=1400 audit(1777050422.604:495): avc: denied { getopt } for pid=15299 comm="syz.4.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.964001][T15301] ================================================================== [ 563.972130][T15301] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x84a/0x900 [ 563.980312][T15301] Read of size 8 at addr ffff88803eb2cd48 by task syz.4.2989/15301 [ 563.988622][T15301] [ 563.990943][T15301] CPU: 0 UID: 0 PID: 15301 Comm: syz.4.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.990959][T15301] Tainted: [L]=SOFTLOCKUP [ 563.990963][T15301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.990971][T15301] Call Trace: [ 563.990975][T15301] [ 563.990981][T15301] dump_stack_lvl+0x100/0x190 [ 563.990997][T15301] print_report+0x13d/0x4b0 [ 563.991013][T15301] ? __virt_addr_valid+0x239/0x430 [ 563.991027][T15301] ? cfusbl_device_notify+0x84a/0x900 [ 563.991044][T15301] kasan_report+0xdf/0x1d0 [ 563.991057][T15301] ? cfusbl_device_notify+0x84a/0x900 [ 563.991073][T15301] cfusbl_device_notify+0x84a/0x900 [ 563.991088][T15301] ? net_generic+0xf4/0x2a0 [ 563.991103][T15301] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 563.991119][T15301] ? caif_device_notify+0x21c/0x1180 [ 563.991138][T15301] ? smc_pnet_netdev_event+0x7c/0x720 [ 563.991158][T15301] ? tipc_l2_device_event+0x18d/0x600 [ 563.991172][T15301] notifier_call_chain+0x99/0x400 [ 563.991186][T15301] call_netdevice_notifiers_info+0xbe/0x110 [ 563.991200][T15301] register_netdevice+0x1594/0x24b0 [ 563.991212][T15301] ? __pfx_register_netdevice+0x10/0x10 [ 563.991223][T15301] register_netdev+0x34/0x50 [ 563.991233][T15301] bnep_add_connection+0x723/0xd30 [ 563.991247][T15301] ? __pfx_bnep_add_connection+0x10/0x10 [ 563.991261][T15301] ? __fget_files+0x21f/0x3d0 [ 563.991277][T15301] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 563.991292][T15301] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 563.991307][T15301] ? find_held_lock+0x2b/0x80 [ 563.991320][T15301] ? futex_wake+0x1ad/0x530 [ 563.991331][T15301] sock_do_ioctl+0x118/0x280 [ 563.991342][T15301] ? __pfx_sock_do_ioctl+0x10/0x10 [ 563.991355][T15301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 563.991366][T15301] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 563.991381][T15301] sock_ioctl+0x599/0x6b0 [ 563.991394][T15301] ? __pfx_sock_ioctl+0x10/0x10 [ 563.991406][T15301] ? hook_file_ioctl_common+0x149/0x410 [ 563.991422][T15301] ? selinux_file_ioctl+0x13b/0x290 [ 563.991433][T15301] ? selinux_file_ioctl+0xb6/0x290 [ 563.991445][T15301] ? __pfx_sock_ioctl+0x10/0x10 [ 563.991458][T15301] __x64_sys_ioctl+0x18e/0x210 [ 563.991469][T15301] do_syscall_64+0x10b/0xf80 [ 563.991484][T15301] ? clear_bhb_loop+0x40/0x90 [ 563.991496][T15301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.991508][T15301] RIP: 0033:0x7efcf479cdd9 [ 563.991518][T15301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.991530][T15301] RSP: 002b:00007efcf56a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.991541][T15301] RAX: ffffffffffffffda RBX: 00007efcf4a15fa0 RCX: 00007efcf479cdd9 [ 563.991548][T15301] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 000000000000000b [ 563.991554][T15301] RBP: 00007efcf4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 563.991561][T15301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.991567][T15301] R13: 00007efcf4a16038 R14: 00007efcf4a15fa0 R15: 00007ffd3491b418 [ 563.991577][T15301] [ 563.991581][T15301] [ 564.294232][T15301] Allocated by task 50: [ 564.298366][T15301] kasan_save_stack+0x30/0x50 [ 564.303034][T15301] kasan_save_track+0x14/0x30 [ 564.307696][T15301] __kasan_kmalloc+0xaa/0xb0 [ 564.312287][T15301] __hci_conn_add+0x1f4/0x1da0 [ 564.317036][T15301] hci_conn_add_unset+0x76/0x120 [ 564.321961][T15301] hci_conn_request_evt+0xa58/0xbb0 [ 564.327144][T15301] hci_event_packet+0x8e9/0xcd0 [ 564.331988][T15301] hci_rx_work+0x451/0xfc0 [ 564.336387][T15301] process_one_work+0xa0e/0x1980 [ 564.341319][T15301] worker_thread+0x5ef/0xe50 [ 564.345893][T15301] kthread+0x370/0x450 [ 564.349942][T15301] ret_from_fork+0x72b/0xd50 [ 564.354513][T15301] ret_from_fork_asm+0x1a/0x30 [ 564.359262][T15301] [ 564.361587][T15301] Freed by task 15301: [ 564.365631][T15301] kasan_save_stack+0x30/0x50 [ 564.370295][T15301] kasan_save_track+0x14/0x30 [ 564.374955][T15301] kasan_save_free_info+0x3b/0x70 [ 564.379964][T15301] __kasan_slab_free+0x5f/0x80 [ 564.384710][T15301] kfree+0x223/0x6c0 [ 564.388586][T15301] device_release+0xd2/0x270 [ 564.393173][T15301] kobject_put+0x1f7/0x640 [ 564.397571][T15301] device_add+0x350/0x1950 [ 564.401973][T15301] netdev_register_kobject+0x1a9/0x3d0 [ 564.407429][T15301] register_netdevice+0x151c/0x24b0 [ 564.412605][T15301] register_netdev+0x34/0x50 [ 564.417176][T15301] bnep_add_connection+0x723/0xd30 [ 564.422272][T15301] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 564.427889][T15301] sock_do_ioctl+0x118/0x280 [ 564.432462][T15301] sock_ioctl+0x599/0x6b0 [ 564.436774][T15301] __x64_sys_ioctl+0x18e/0x210 [ 564.441517][T15301] do_syscall_64+0x10b/0xf80 [ 564.446095][T15301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.451965][T15301] [ 564.454267][T15301] Last potentially related work creation: [ 564.459960][T15301] kasan_save_stack+0x30/0x50 [ 564.464620][T15301] kasan_record_aux_stack+0xa7/0xc0 [ 564.469802][T15301] insert_work+0x36/0x230 [ 564.474122][T15301] __queue_work+0x9a2/0x1130 [ 564.478704][T15301] __queue_delayed_work+0x357/0x450 [ 564.483882][T15301] queue_delayed_work_on+0x180/0x1e0 [ 564.489151][T15301] l2cap_chan_del+0x649/0x930 [ 564.493808][T15301] l2cap_conn_del+0x395/0x710 [ 564.498466][T15301] l2cap_disconn_cfm+0x9f/0x100 [ 564.503298][T15301] hci_conn_hash_flush+0x10e/0x280 [ 564.508395][T15301] hci_dev_close_sync+0x5a7/0x1240 [ 564.513489][T15301] hci_dev_do_close+0x2e/0xb0 [ 564.518151][T15301] hci_unregister_dev+0x227/0x670 [ 564.523160][T15301] vhci_release+0x17d/0x230 [ 564.527648][T15301] __fput+0x3ff/0xb50 [ 564.531620][T15301] task_work_run+0x150/0x240 [ 564.536194][T15301] do_exit+0x8d2/0x2a60 [ 564.540331][T15301] do_group_exit+0xd5/0x2a0 [ 564.544818][T15301] __x64_sys_exit_group+0x3e/0x50 [ 564.549831][T15301] x64_sys_call+0x102c/0x1530 [ 564.554511][T15301] do_syscall_64+0x10b/0xf80 [ 564.559119][T15301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.565055][T15301] [ 564.567375][T15301] The buggy address belongs to the object at ffff88803eb2c000 [ 564.567375][T15301] which belongs to the cache kmalloc-8k of size 8192 [ 564.581502][T15301] The buggy address is located 3400 bytes inside of [ 564.581502][T15301] freed 8192-byte region [ffff88803eb2c000, ffff88803eb2e000) [ 564.595461][T15301] [ 564.597764][T15301] The buggy address belongs to the physical page: [ 564.604159][T15301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3eb28 [ 564.612895][T15301] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.621367][T15301] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 564.628891][T15301] page_type: f5(slab) [ 564.632862][T15301] raw: 00fff00000000040 ffff88813fe8d280 dead000000000100 dead000000000122 [ 564.641425][T15301] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 564.650002][T15301] head: 00fff00000000040 ffff88813fe8d280 dead000000000100 dead000000000122 [ 564.658651][T15301] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 564.667301][T15301] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 564.675951][T15301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 564.684595][T15301] page dumped because: kasan: bad access detected [ 564.690980][T15301] page_owner tracks the page as allocated [ 564.696670][T15301] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12557, tgid 12555 (syz.2.2272), ts 428691449732, free_ts 361482356207 [ 564.718006][T15301] post_alloc_hook+0x153/0x170 [ 564.722770][T15301] get_page_from_freelist+0x11a6/0x33b0 [ 564.728302][T15301] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 564.734181][T15301] new_slab+0xa6/0x6c0 [ 564.738234][T15301] refill_objects+0x277/0x420 [ 564.742895][T15301] __pcs_replace_empty_main+0x375/0x650 [ 564.748424][T15301] __kvmalloc_node_noprof+0x7da/0xa00 [ 564.753789][T15301] pfifo_fast_init+0x177/0x3b0 [ 564.758540][T15301] qdisc_create_dflt+0x128/0x4b0 [ 564.763546][T15301] dev_activate+0x64f/0xce0 [ 564.768039][T15301] __dev_open+0x490/0x8f0 [ 564.772404][T15301] __dev_change_flags+0x596/0x850 [ 564.777432][T15301] netif_change_flags+0x8d/0x160 [ 564.782360][T15301] dev_change_flags+0xba/0x260 [ 564.787101][T15301] dev_ifsioc+0x169b/0x1fc0 [ 564.791589][T15301] dev_ioctl+0x342/0x10e0 [ 564.795907][T15301] page last free pid 9 tgid 9 stack trace: [ 564.801689][T15301] __free_frozen_pages+0x747/0x1040 [ 564.806961][T15301] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 564.812671][T15301] __apply_to_page_range+0xb1d/0x1520 [ 564.818030][T15301] __kasan_release_vmalloc+0xd7/0xe0 [ 564.823307][T15301] purge_vmap_node+0x210/0xb40 [ 564.828049][T15301] process_one_work+0xa0e/0x1980 [ 564.832996][T15301] worker_thread+0x5ef/0xe50 [ 564.837586][T15301] kthread+0x370/0x450 [ 564.841637][T15301] ret_from_fork+0x72b/0xd50 [ 564.846226][T15301] ret_from_fork_asm+0x1a/0x30 [ 564.850995][T15301] [ 564.853307][T15301] Memory state around the buggy address: [ 564.858924][T15301] ffff88803eb2cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.866996][T15301] ffff88803eb2cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.875049][T15301] >ffff88803eb2cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.883103][T15301] ^ [ 564.889493][T15301] ffff88803eb2cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.898052][T15301] ffff88803eb2ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.906091][T15301] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.136481][T15301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 565.143699][T15301] CPU: 1 UID: 0 PID: 15301 Comm: syz.4.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.154626][T15301] Tainted: [L]=SOFTLOCKUP [ 565.158935][T15301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.168980][T15301] Call Trace: [ 565.172248][T15301] [ 565.175158][T15301] dump_stack_lvl+0x100/0x190 [ 565.179814][T15301] vpanic+0x552/0x970 [ 565.183875][T15301] ? __pfx_vpanic+0x10/0x10 [ 565.188389][T15301] ? cfusbl_device_notify+0x84a/0x900 [ 565.193781][T15301] panic+0xd1/0xe0 [ 565.197517][T15301] ? __pfx_panic+0x10/0x10 [ 565.201972][T15301] ? cfusbl_device_notify+0x84a/0x900 [ 565.207365][T15301] ? preempt_schedule_common+0x42/0xc0 [ 565.212847][T15301] check_panic_on_warn.cold+0x19/0x34 [ 565.218232][T15301] end_report.part.0+0x3a/0x90 [ 565.223011][T15301] kasan_report.cold+0xe/0x18 [ 565.227704][T15301] ? cfusbl_device_notify+0x84a/0x900 [ 565.233095][T15301] cfusbl_device_notify+0x84a/0x900 [ 565.238312][T15301] ? net_generic+0xf4/0x2a0 [ 565.242814][T15301] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 565.248520][T15301] ? caif_device_notify+0x21c/0x1180 [ 565.253796][T15301] ? smc_pnet_netdev_event+0x7c/0x720 [ 565.259154][T15301] ? tipc_l2_device_event+0x18d/0x600 [ 565.264510][T15301] notifier_call_chain+0x99/0x400 [ 565.269522][T15301] call_netdevice_notifiers_info+0xbe/0x110 [ 565.275405][T15301] register_netdevice+0x1594/0x24b0 [ 565.280586][T15301] ? __pfx_register_netdevice+0x10/0x10 [ 565.286111][T15301] register_netdev+0x34/0x50 [ 565.290680][T15301] bnep_add_connection+0x723/0xd30 [ 565.295778][T15301] ? __pfx_bnep_add_connection+0x10/0x10 [ 565.301392][T15301] ? __fget_files+0x21f/0x3d0 [ 565.306058][T15301] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 565.311676][T15301] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 565.317815][T15301] ? find_held_lock+0x2b/0x80 [ 565.322482][T15301] ? futex_wake+0x1ad/0x530 [ 565.326970][T15301] sock_do_ioctl+0x118/0x280 [ 565.331546][T15301] ? __pfx_sock_do_ioctl+0x10/0x10 [ 565.336644][T15301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 565.341653][T15301] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 565.348485][T15301] sock_ioctl+0x599/0x6b0 [ 565.352802][T15301] ? __pfx_sock_ioctl+0x10/0x10 [ 565.357653][T15301] ? hook_file_ioctl_common+0x149/0x410 [ 565.363193][T15301] ? selinux_file_ioctl+0x13b/0x290 [ 565.368373][T15301] ? selinux_file_ioctl+0xb6/0x290 [ 565.373472][T15301] ? __pfx_sock_ioctl+0x10/0x10 [ 565.378306][T15301] __x64_sys_ioctl+0x18e/0x210 [ 565.383050][T15301] do_syscall_64+0x10b/0xf80 [ 565.387628][T15301] ? clear_bhb_loop+0x40/0x90 [ 565.392291][T15301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.398164][T15301] RIP: 0033:0x7efcf479cdd9 [ 565.402573][T15301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.422165][T15301] RSP: 002b:00007efcf56a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.430561][T15301] RAX: ffffffffffffffda RBX: 00007efcf4a15fa0 RCX: 00007efcf479cdd9 [ 565.438511][T15301] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 000000000000000b [ 565.446472][T15301] RBP: 00007efcf4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 565.454515][T15301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.462486][T15301] R13: 00007efcf4a16038 R14: 00007efcf4a15fa0 R15: 00007ffd3491b418 [ 565.470450][T15301] [ 565.473906][T15301] Kernel Offset: disabled [ 565.478224][T15301] Rebooting in 86400 seconds..