last executing test programs: 3.717900619s ago: executing program 1 (id=1230): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902a63b01000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x21002) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000280)=[{0x8ba, 0x4000, 0x0, 0x0}], 0x1}) 3.311690882s ago: executing program 3 (id=1239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='-:my_probe ', 0xb) 3.277387098s ago: executing program 3 (id=1241): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000001600)=[{0x3, 0x8810, 0x0, 0x0}, {0x1b5, 0x1, 0x0, 0x0}, {0x4, 0xa010, 0x0, 0x0}], 0x3}) 2.537981103s ago: executing program 1 (id=1259): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x20ab5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) 1.835083257s ago: executing program 2 (id=1267): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, 0x0) 1.587110917s ago: executing program 1 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='hd3ss3220 0x47', 0xe) 1.535713899s ago: executing program 1 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 1.530982593s ago: executing program 1 (id=1270): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x7}], 0x1, 0x102, 0x0) 677.284896ms ago: executing program 1 (id=1278): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80045b10, 0x0) 567.568743ms ago: executing program 0 (id=1281): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffd, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) 564.739217ms ago: executing program 0 (id=1282): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 498.04608ms ago: executing program 0 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='kvm', 0x3) 497.824198ms ago: executing program 0 (id=1284): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r0], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 407.335329ms ago: executing program 0 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 406.923237ms ago: executing program 2 (id=1286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884", 0x45}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 406.736956ms ago: executing program 0 (id=1287): syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x800) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) 262.631148ms ago: executing program 2 (id=1288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 203.992977ms ago: executing program 3 (id=1289): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 203.699305ms ago: executing program 2 (id=1290): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x402, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 201.134102ms ago: executing program 3 (id=1291): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 137.213719ms ago: executing program 2 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044815}, 0x24000814) 77.071145ms ago: executing program 2 (id=1293): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f7", 0xab}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 71.333688ms ago: executing program 3 (id=1294): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf0000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 3 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 59.692433][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.715546][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 59.719348][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 59.864108][ T6004] process 'syz.0.43' launched './file1' with NULL argv: empty string added [ 60.940269][ T6027] kvm: pic: single mode not supported [ 60.940294][ T6027] kvm: pic: level sensitive irq not supported [ 60.945114][ T6027] kvm: pic: single mode not supported [ 60.948926][ T6027] kvm: pic: level sensitive irq not supported [ 60.956983][ T6027] kvm: pic: level sensitive irq not supported [ 60.964602][ T6027] kvm: pic: single mode not supported [ 60.968300][ T6027] kvm: pic: level sensitive irq not supported [ 60.971940][ T6027] kvm: pic: level sensitive irq not supported [ 60.974689][ T6027] kvm: pic: level sensitive irq not supported [ 60.977422][ T6027] kvm: pic: level sensitive irq not supported [ 60.980260][ T6027] kvm: pic: level sensitive irq not supported [ 60.984442][ T6027] kvm: pic: level sensitive irq not supported [ 60.989895][ T6027] kvm: pic: single mode not supported [ 60.994910][ T6027] kvm: pic: single mode not supported [ 61.003962][ T6027] kvm: pic: single mode not supported [ 61.016681][ T6027] kvm: pic: single mode not supported [ 61.640512][ T5747] Bluetooth: hci2: command tx timeout [ 61.646321][ T5747] Bluetooth: hci3: command tx timeout [ 61.650538][ T64] Bluetooth: hci1: command tx timeout [ 62.333133][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 62.399230][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 63.315021][ T6056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 63.317146][ T6056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.329385][ T6056] vhci_hcd vhci_hcd.0: Device attached [ 63.418390][ T6058] vhci_hcd: connection closed [ 63.423217][ T12] vhci_hcd vhci_hcd.1: stop threads [ 63.428769][ T12] vhci_hcd vhci_hcd.1: release socket [ 63.431104][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 63.817032][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 63.817044][ T42] audit: type=1400 audit(1785537972.470:278): avc: denied { mounton } for pid=6065 comm="syz.0.62" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.831426][ T6066] gfs2: error -5 reading superblock [ 64.000309][ T42] audit: type=1400 audit(1785537972.650:279): avc: denied { read } for pid=6069 comm="syz.0.64" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.009612][ T42] audit: type=1400 audit(1785537972.660:280): avc: denied { open } for pid=6069 comm="syz.0.64" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.021658][ T42] audit: type=1400 audit(1785537972.670:281): avc: denied { ioctl } for pid=6069 comm="syz.0.64" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.033085][ T42] audit: type=1400 audit(1785537972.680:282): avc: denied { set_context_mgr } for pid=6069 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.051210][ T42] audit: type=1400 audit(1785537972.710:283): avc: denied { map } for pid=6069 comm="syz.0.64" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.063887][ T42] audit: type=1400 audit(1785537972.710:284): avc: denied { call } for pid=6069 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.102240][ T42] audit: type=1400 audit(1785537972.760:285): avc: denied { create } for pid=6072 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.149054][ T42] audit: type=1400 audit(1785537972.800:286): avc: denied { setopt } for pid=6072 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.156481][ T42] audit: type=1400 audit(1785537972.800:287): avc: denied { listen } for pid=6072 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.204230][ T6075] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 64.357180][ T64] Bluetooth: hci1: hardware error 0x00 [ 64.451976][ T5747] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 64.456640][ T5747] Bluetooth: hci0: Injecting HCI hardware error event [ 64.460968][ T5747] Bluetooth: hci0: hardware error 0x00 [ 64.890099][ T5754] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 64.895422][ T5754] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 65.055002][ T6117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6117 comm=syz.3.77 [ 65.074886][ T6117] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 65.084262][ T6117] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 65.225518][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 65.245750][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 65.586743][ T6147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.597102][ T6147] block device autoloading is deprecated and will be removed. [ 65.643777][ T6145] md: superblock version 12389 not known [ 65.647678][ T6145] md: couldn't set array info. -22 [ 65.818679][ T6153] tipc: Failed to remove unknown binding: 66,0,0/0:164085040/164085042 [ 65.823130][ T6153] tipc: Failed to remove unknown binding: 66,0,0/0:164085040/164085041 [ 65.828463][ T6153] tipc: Failed to remove unknown binding: 66,0,0/0:164085040/164085042 [ 65.833437][ T6153] tipc: Failed to remove unknown binding: 66,0,0/0:164085040/164085041 [ 65.875896][ T6157] binder: 6156:6157 ioctl c0306201 0 returned -14 [ 66.035659][ T6165] 0: reclassify loop, rule prio 0, protocol 03 [ 66.173492][ T6173] gadgetfs: bound to dummy_udc driver [ 66.430476][ T41] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.435091][ C3] gadgetfs: connected [ 66.438406][ T41] gadgetfs: disconnected [ 66.440508][ T5754] Bluetooth: hci1: command 0x1003 tx timeout [ 66.443129][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 66.590659][ C3] gadgetfs: connected [ 66.596203][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 66.599986][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.600482][ T5747] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 66.609839][ C3] gadgetfs: configuration #1 [ 66.995313][ T6184] gadgetfs: suspended from state 4 [ 66.995653][ T41] usb 5-1: can't set config #1, error -71 [ 66.999517][ T6184] gadgetfs: disconnected [ 67.002292][ T41] usb 5-1: USB disconnect, device number 2 [ 67.455368][ T6202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 67.499327][ T6200] kvm: pic: non byte write [ 67.668904][ T6209] netlink: 'syz.0.109': attribute type 11 has an invalid length. [ 67.717369][ T6209] ip6gretap0: entered promiscuous mode qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 68.507862][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.547422][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'. [ 68.552232][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'. [ 68.566114][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.629759][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.890173][ T6260] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 68.890547][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 68.890562][ T42] audit: type=1400 audit(1785537977.540:380): avc: denied { mounton } for pid=6258 comm="syz.2.129" path="/36/mnt" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.899032][ T6260] CIFS: Attempting to mount //127.0.0.1/share [ 68.946812][ T42] audit: type=1400 audit(1785537977.600:381): avc: denied { setopt } for pid=6256 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.953174][ T42] audit: type=1400 audit(1785537977.610:382): avc: denied { write } for pid=6256 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.048158][ T6263] ======================================================= [ 69.048158][ T6263] WARNING: The mand mount option has been deprecated and [ 69.048158][ T6263] and is ignored by this kernel. Remove the mand [ 69.048158][ T6263] option from the mount to silence this warning. [ 69.048158][ T6263] ======================================================= [ 69.087311][ T42] audit: type=1400 audit(1785537977.740:383): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.129304][ T6265] netlink: 88 bytes leftover after parsing attributes in process `syz.0.131'. [ 69.177423][ T6267] binder_alloc: 6266: pid 6266 spamming oneway? 1 buffers allocated for a total size of 4096 [ 69.211220][ T42] audit: type=1400 audit(1785537977.870:384): avc: denied { mount } for pid=6271 comm="syz.0.134" name="/" dev="autofs" ino=10044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.220766][ T42] audit: type=1400 audit(1785537977.880:385): avc: denied { read } for pid=6271 comm="syz.0.134" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.228182][ T42] audit: type=1400 audit(1785537977.880:386): avc: denied { open } for pid=6271 comm="syz.0.134" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.233789][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.133'. [ 69.235842][ T42] audit: type=1400 audit(1785537977.880:387): avc: denied { ioctl } for pid=6271 comm="syz.0.134" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.404425][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.409721][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.417538][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.423969][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.429301][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.435972][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.442338][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.447728][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.450972][ T42] audit: type=1400 audit(1785537978.110:388): avc: denied { create } for pid=6280 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.454392][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 69.619791][ T6284] syzkaller0: entered promiscuous mode [ 69.621918][ T6284] syzkaller0: entered allmulticast mode [ 69.626799][ T42] audit: type=1400 audit(1785537978.280:389): avc: denied { write } for pid=6283 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.730093][ T6260] CIFS: VFS: Error connecting to socket. Aborting operation. [ 69.732562][ T6260] CIFS: VFS: cifs_mount failed w/return code = -4 [ 69.788777][ T6288] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.060152][ T6297] fsl-ehci serial8250: No platform data for serial8250. [ 70.060707][ T6279] selinux_netlink_send: 1993 callbacks suppressed [ 70.060723][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.070034][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.075831][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.081777][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.087232][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.097184][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.117702][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.123039][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.127046][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 70.131971][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6279 comm=syz.1.136 [ 71.174251][ T6318] netlink: 'syz.2.152': attribute type 39 has an invalid length. [ 71.325773][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.333352][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.388688][ T6324] Bluetooth: MGMT ver 1.23 [ 71.472626][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 71.512052][ T5854] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 71.517063][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.519675][ T5854] usb 5-1: Product: syz [ 71.521071][ T5854] usb 5-1: Manufacturer: syz [ 71.522482][ T5854] usb 5-1: SerialNumber: syz [ 71.537281][ T5854] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 71.561950][ T5854] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 71.569599][ T5854] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 71.600862][ T6336] binder: 6335:6336 unknown command 0 [ 71.607146][ T6336] binder: 6335:6336 ioctl c0306201 2000000001c0 returned -22 [ 71.668017][ T6338] batadv_slave_1: entered promiscuous mode [ 71.885661][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 71.937022][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 72.134110][ T6366] syzkaller0: entered promiscuous mode [ 72.136452][ T6366] syzkaller0: entered allmulticast mode [ 72.412535][ T6369] bridge1: port 1(macvlan2) entered blocking state [ 72.414854][ T6369] bridge1: port 1(macvlan2) entered disabled state [ 72.417141][ T6369] macvlan2: entered allmulticast mode [ 72.845730][ T6354] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 72.857696][ T5528] usb 5-1: USB disconnect, device number 3 [ 72.870901][ T5528] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 72.884254][ T5528] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 72.888873][ T5528] ti_usb_3410_5052 5-1:2.0: device disconnected [ 72.900520][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.050474][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 73.054376][ T41] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 73.057918][ T41] usb 8-1: config 0 has no interface number 0 [ 73.060818][ T41] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.065450][ T41] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 73.070172][ T41] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.075980][ T41] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.081840][ T41] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 73.085560][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.091291][ T41] usb 8-1: config 0 descriptor?? [ 73.111826][ T41] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 73.306661][ T6389] Bluetooth: (null): Non-link packet received in non-active state [ 73.363407][ T29] usb 8-1: USB disconnect, device number 2 [ 73.364595][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 73.366850][ T6379] ldusb 8-1:0.55: Couldn't submit interrupt_out_urb -19 [ 73.403456][ T29] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 73.475526][ T6394] binder: 6393:6394 ioctl c0306201 200000000080 returned -14 [ 73.482478][ T6394] binder: 6393:6394 ioctl c0306201 2000000003c0 returned -14 [ 73.685280][ T6401] syzkaller0: entered promiscuous mode [ 73.687092][ T6401] syzkaller0: entered allmulticast mode [ 73.770438][ T5092] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.920571][ T5092] usb 6-1: Using ep0 maxpacket: 16 [ 73.928711][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 73.928727][ T42] audit: type=1400 audit(1785537982.580:412): avc: denied { read write } for pid=6402 comm="syz.3.184" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.941822][ T42] audit: type=1400 audit(1785537982.580:413): avc: denied { ioctl open } for pid=6402 comm="syz.3.184" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.952393][ T5092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.959319][ T5092] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.973007][ T5092] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.976212][ T42] audit: type=1400 audit(1785537982.630:414): avc: denied { watch watch_reads } for pid=6404 comm="syz.2.185" path="/48" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.984776][ T5092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.999693][ T5092] usb 6-1: config 0 descriptor?? [ 74.008870][ T42] audit: type=1400 audit(1785537982.660:415): avc: denied { write } for pid=6406 comm="syz.3.186" path="socket:[11860]" dev="sockfs" ino=11860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.021445][ T42] audit: type=1400 audit(1785537982.680:416): avc: denied { accept } for pid=6406 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.064759][ T6409] Bluetooth: Error in BCSP hdr checksum [ 74.149090][ T42] audit: type=1400 audit(1785537982.800:417): avc: denied { bind } for pid=6410 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.323870][ T5092] usbhid 6-1:0.0: can't add hid device: -71 [ 74.325861][ T5092] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.339258][ T5092] usb 6-1: USB disconnect, device number 3 [ 74.421847][ T42] audit: type=1400 audit(1785537983.080:418): avc: denied { prog_load } for pid=6419 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.614859][ T6420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 74.826856][ T42] audit: type=1400 audit(1785537983.480:419): avc: denied { prog_run } for pid=6430 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.836369][ T42] audit: type=1400 audit(1785537983.490:420): avc: denied { setopt } for pid=6430 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.925969][ T42] audit: type=1400 audit(1785537983.580:421): avc: denied { watch } for pid=6439 comm="syz.1.198" path="/56/file2" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.083061][ T41] IPVS: starting estimator thread 0... [ 76.123806][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 76.128488][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.201310][ T6471] IPVS: using max 27 ests per chain, 64800 per kthread [ 76.257706][ T6477] kvm: Disabled LAPIC found during irq injection [ 76.471482][ T6488] tipc: Started in network mode [ 76.473335][ T6488] tipc: Node identity ac14140f, cluster identity 4711 [ 76.475905][ T6488] tipc: New replicast peer: 255.255.255.255 [ 76.478361][ T6488] tipc: Enabled bearer , priority 10 [ 76.480539][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 76.519181][ T6491] syzkaller0: entered promiscuous mode [ 76.522749][ T6491] syzkaller0: entered allmulticast mode [ 76.532059][ T6493] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 76.532747][ T6491] tipc: Started in network mode [ 76.536709][ T6491] tipc: Node identity 0ed9aac43706, cluster identity 4711 [ 76.540151][ T6491] tipc: Enabled bearer , priority 0 [ 76.545720][ T6490] tipc: Resetting bearer [ 76.561575][ T6490] tipc: Disabling bearer [ 76.640912][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 76.650204][ T5890] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 76.654927][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 76.659834][ T5890] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.664780][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 76.675204][ T5890] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 76.679069][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.684419][ T5890] usb 7-1: Product: syz [ 76.686256][ T5890] usb 7-1: Manufacturer: syz [ 76.688251][ T5890] usb 7-1: SerialNumber: syz [ 76.704580][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 76.718891][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input5 [ 76.879844][ T6503] kvm: pic: single mode not supported [ 76.879896][ T6503] pic_ioport_write: 18 callbacks suppressed [ 76.879905][ T6503] kvm: pic: level sensitive irq not supported [ 76.930494][ T5890] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 76.949228][ T5890] (id 0x00) [ 77.030591][ T5890] rc_core: IR keymap rc-imon-pad not found [ 77.033046][ T5890] Registered IR keymap rc-empty [ 77.035154][ T5890] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 77.039425][ T5890] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 77.200498][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 77.354989][ T41] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 77.358893][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.362195][ T41] usb 6-1: Product: syz [ 77.363992][ T41] usb 6-1: Manufacturer: syz [ 77.365918][ T41] usb 6-1: SerialNumber: syz [ 77.381744][ T41] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 77.393700][ T41] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 77.411306][ T41] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 77.477543][ T5092] tipc: Node number set to 2886997007 [ 77.895641][ T5890] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 77.906131][ T5890] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input6 [ 77.921260][ T5890] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 78.244351][ T6538] syzkaller0: entered promiscuous mode [ 78.246277][ T6538] syzkaller0: entered allmulticast mode [ 78.680867][ T6526] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 78.689074][ T24] usb 6-1: USB disconnect, device number 4 [ 78.700997][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 78.709237][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 78.713558][ T24] ti_usb_3410_5052 6-1:2.0: device disconnected [ 78.954248][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 78.954268][ T42] audit: type=1400 audit(1785537987.610:464): avc: denied { read } for pid=6555 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.005583][ T42] audit: type=1400 audit(1785537987.660:465): avc: denied { create } for pid=6557 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.012689][ T42] audit: type=1400 audit(1785537987.670:466): avc: denied { connect } for pid=6557 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.024714][ T42] audit: type=1400 audit(1785537987.680:467): avc: denied { cmd } for pid=6557 comm="syz.3.234" path="socket:[11998]" dev="sockfs" ino=11998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.069774][ T6560] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 79.107890][ T6560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.111672][ T6560] bond1: (slave bond2): making interface the new active one [ 79.114606][ T6560] bond1: (slave bond2): Enslaving as an active interface with an up link [ 79.140084][ T6560] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 79.225429][ T42] audit: type=1400 audit(1785537987.880:468): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.225548][ T24] usb 7-1: USB disconnect, device number 2 [ 79.306680][ T6576] binder_alloc: 6574: binder_alloc_buf, no vma [ 79.309425][ T42] audit: type=1400 audit(1785537987.960:469): avc: denied { ioctl } for pid=6577 comm="syz.3.239" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.572266][ T42] audit: type=1400 audit(1785537988.230:470): avc: denied { map } for pid=6585 comm="syz.1.242" path="socket:[13737]" dev="sockfs" ino=13737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.584512][ T42] audit: type=1400 audit(1785537988.230:471): avc: denied { read } for pid=6585 comm="syz.1.242" path="socket:[13737]" dev="sockfs" ino=13737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.669093][ T42] audit: type=1400 audit(1785537988.320:472): avc: denied { write } for pid=6591 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.677500][ T42] audit: type=1400 audit(1785537988.320:473): avc: denied { read } for pid=6591 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.773288][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 81.465785][ T6642] uprobe: syz.1.258:6642 failed to unregister, leaking uprobe [ 81.588412][ T9] cfg80211: failed to load regulatory.db [ 81.831766][ T6653] vlan2: entered promiscuous mode [ 81.833326][ T6653] hsr0: entered promiscuous mode [ 81.835096][ T6653] vlan2: entered allmulticast mode [ 81.836686][ T6653] hsr0: entered allmulticast mode [ 81.838229][ T6653] hsr_slave_0: entered allmulticast mode [ 81.839946][ T6653] hsr_slave_1: entered allmulticast mode [ 82.300557][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.452380][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.456527][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.460702][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.465808][ T9] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 82.469385][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.469476][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 82.479899][ T9] cyberjack 7-1:1.0: required endpoints missing [ 83.255194][ T5850] usb 7-1: USB disconnect, device number 3 [ 83.371901][ T6688] syzkaller0: entered promiscuous mode [ 83.373580][ T6688] syzkaller0: entered allmulticast mode [ 83.477042][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 83.555417][ T6692] Illegal XDP return value 32768 on prog (id 30) dev N/A, expect packet loss! [ 83.948898][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 83.972281][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.013807][ T6707] bond1: (slave veth5): Enslaving as an active interface with an up link [ 84.055716][ T6707] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 84.058720][ T6701] create_pit_timer: 11 callbacks suppressed [ 84.058738][ T6701] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 84.607160][ T6731] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 84.647250][ T6735] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.012293][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'. [ 85.116685][ T6745] kvm: pic: level sensitive irq not supported [ 85.227291][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 85.227304][ T42] audit: type=1400 audit(1785537993.880:497): avc: denied { write } for pid=6749 comm="syz.2.300" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.287935][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 85.330897][ T6754] bridge2: port 1(veth3) entered blocking state [ 85.333123][ T6754] bridge2: port 1(veth3) entered disabled state [ 85.335178][ T6754] veth3: entered allmulticast mode [ 85.338154][ T6754] veth3: entered promiscuous mode [ 85.360089][ T6754] bridge2: port 2(veth0_to_bond) entered blocking state [ 85.362939][ T6754] bridge2: port 2(veth0_to_bond) entered disabled state [ 85.365324][ T6754] veth0_to_bond: entered allmulticast mode [ 85.368126][ T6754] veth0_to_bond: entered promiscuous mode [ 85.407751][ T6756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.439007][ T41] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 85.445019][ T41] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 85.471273][ T48] wlan1: authenticated [ 85.472764][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.481991][ T48] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 85.529550][ T48] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 85.532699][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.535880][ T48] wlan1: associated [ 85.607602][ T42] audit: type=1400 audit(1785537994.260:498): avc: denied { audit_read } for pid=6764 comm="syz.3.306" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.674671][ T6769] syzkaller0: entered promiscuous mode [ 85.677185][ T6769] syzkaller0: entered allmulticast mode [ 86.666694][ T42] audit: type=1400 audit(1785537995.320:499): avc: denied { create } for pid=6787 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.701982][ T42] audit: type=1400 audit(1785537995.360:500): avc: denied { bind } for pid=6787 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.731521][ T6788] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 86.755773][ T6788] gretap2: entered allmulticast mode [ 86.762451][ T6788] bond1: (slave gretap2): making interface the new active one [ 86.765817][ T6788] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 87.009811][ T42] audit: type=1400 audit(1785537995.660:501): avc: denied { ioctl } for pid=6804 comm="syz.2.319" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.103702][ T6805] xt_CT: No such helper "netbios-ns" [ 87.384838][ T42] audit: type=1400 audit(1785537996.040:502): avc: denied { setopt } for pid=6825 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.517049][ T6832] netlink: 'syz.1.329': attribute type 3 has an invalid length. [ 87.519742][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 87.693555][ T6839] bond1: (slave dummy0): Releasing backup interface [ 87.702600][ T6839] bridge_slave_0: left allmulticast mode [ 87.704489][ T6839] bridge_slave_0: left promiscuous mode [ 87.708036][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.715257][ T6839] bridge_slave_1: left allmulticast mode [ 87.717546][ T6839] bridge_slave_1: left promiscuous mode [ 87.719794][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.727841][ T6839] bond0: (slave bond_slave_0): Releasing backup interface [ 87.737817][ T6839] bond0: (slave bond_slave_1): Releasing backup interface [ 87.746868][ T6839] team0: Port device team_slave_0 removed [ 87.753035][ T6839] team0: Port device team_slave_1 removed [ 87.755317][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.760984][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.764693][ T6839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.364616][ T6857] gadgetfs: bound to dummy_udc driver [ 88.413771][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 88.616063][ T6869] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 88.619479][ T6869] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 88.620584][ T5890] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 88.630503][ C1] gadgetfs: connected [ 88.632654][ T5890] gadgetfs: disconnected [ 88.754968][ T5747] Bluetooth: hci2: unexpected cc 0x0403 length: 9 > 1 [ 88.850779][ T42] audit: type=1804 audit(1785537997.500:503): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.345" name="/newroot/71/file0" dev="tmpfs" ino=398 res=1 errno=0 [ 88.867882][ T6881] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 88.873008][ T6881] ref_ctr increment failed for inode: 0x18e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d0e8000 [ 88.881828][ T6881] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 88.887200][ T6881] ref_ctr decrement failed for inode: 0x18e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d0e8000 [ 88.892478][ T6881] uprobe: syz.3.345:6881 failed to unregister, leaking uprobe [ 89.029045][ T42] audit: type=1400 audit(1785537997.680:504): avc: denied { create } for pid=6888 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.030807][ T6889] syzkaller0: entered promiscuous mode [ 89.032293][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 89.042662][ T6889] syzkaller0: entered allmulticast mode [ 89.047226][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 89.086950][ T42] audit: type=1400 audit(1785537997.740:505): avc: denied { create } for pid=6891 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.095414][ T42] audit: type=1400 audit(1785537997.750:506): avc: denied { write } for pid=6891 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.252682][ T6900] syzkaller0: entered promiscuous mode [ 89.255133][ T6900] syzkaller0: entered allmulticast mode [ 89.304610][ T6904] syzkaller0: entered promiscuous mode [ 89.306506][ T6904] syzkaller0: entered allmulticast mode [ 89.578697][ T6913] netlink: 68 bytes leftover after parsing attributes in process `syz.2.359'. [ 89.661210][ T6920] syz_tun: entered allmulticast mode [ 89.965992][ T6937] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 89.997791][ T6937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.071972][ T6937] veth1: entered promiscuous mode [ 90.078166][ T6937] bond2: (slave veth1): Enslaving as an active interface with a down link [ 90.086356][ T6944] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 90.087354][ T6942] Config c1/1 of g1 needs at least one function. [ 90.096655][ T6942] udc dummy_udc.0: failed to start g1: -22 [ 90.099288][ T6942] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 90.108437][ T6942] UDC core: g1: couldn't find an available UDC or it's busy [ 90.220232][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 90.280057][ T6946] selinux_netlink_send: 429 callbacks suppressed [ 90.280080][ T6946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6946 comm=syz.1.371 [ 90.428780][ T6914] syz_tun: left allmulticast mode [ 90.675146][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 90.675165][ T42] audit: type=1400 audit(1785537999.330:517): avc: denied { write } for pid=6972 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.722150][ T6975] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 90.728194][ T42] audit: type=1326 audit(1785537999.380:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.737181][ T42] audit: type=1326 audit(1785537999.380:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.746146][ T42] audit: type=1326 audit(1785537999.380:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.747170][ T6975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.754140][ T42] audit: type=1326 audit(1785537999.380:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.778954][ T42] audit: type=1326 audit(1785537999.430:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.782048][ T6975] bridge3: entered promiscuous mode [ 90.787471][ T42] audit: type=1326 audit(1785537999.430:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.799334][ T6975] bond3: (slave bridge3): making interface the new active one [ 90.805787][ T6975] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 90.807248][ T42] audit: type=1326 audit(1785537999.430:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.821238][ T42] audit: type=1326 audit(1785537999.430:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 90.834733][ T42] audit: type=1326 audit(1785537999.430:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a7b9e019 code=0x7ffc0000 [ 91.106202][ T6999] netlink: 112 bytes leftover after parsing attributes in process `syz.0.389'. [ 91.299922][ T7009] fuse: fd is not a fuse device [ 91.363876][ T7011] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 91.487236][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 91.506664][ T7022] syz_tun: entered promiscuous mode [ 91.512175][ T7022] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 91.545285][ T7021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7021 comm=syz.1.398 [ 91.651955][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 91.652154][ T7029] batadv_slave_1: left promiscuous mode [ 91.682752][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 91.687393][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 91.691627][ T5551] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.696370][ T5551] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.710512][ T5551] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.714194][ T5551] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.919220][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 91.926752][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 91.947829][ T9] IPVS: starting estimator thread 0... [ 92.040646][ T7033] IPVS: using max 29 ests per chain, 69600 per kthread [ 92.315913][ T7047] sctp: [Deprecated]: syz.0.406 (pid 7047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.315913][ T7047] Use struct sctp_sack_info instead [ 92.576622][ T7063] syz_tun: entered allmulticast mode [ 92.579235][ T7063] lo: entered allmulticast mode [ 92.585574][ T7062] syz_tun: left allmulticast mode [ 92.760683][ T5747] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.765246][ T5747] Bluetooth: hci2: Injecting HCI hardware error event [ 92.768765][ T5747] Bluetooth: hci2: hardware error 0x00 [ 93.218508][ T7080] syz.2.418 (7080): drop_caches: 2 [ 93.273820][ T7084] syzkaller0: entered promiscuous mode [ 93.275846][ T7084] syzkaller0: entered allmulticast mode [ 93.389054][ T7091] bridge1: port 2(ip6gretap1) entered blocking state [ 93.392297][ T7091] bridge1: port 2(ip6gretap1) entered disabled state [ 93.394741][ T7091] ip6gretap1: entered allmulticast mode [ 93.397480][ T7091] ip6gretap1: entered promiscuous mode [ 93.397633][ T7095] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 93.400259][ T7091] macvlan2: entered promiscuous mode [ 93.432061][ T7095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.457697][ T7095] bond3: entered allmulticast mode [ 93.490005][ T7095] bond3: (slave ip6gretap1): making interface the new active one [ 93.501068][ T7095] ip6gretap1: entered allmulticast mode [ 93.505391][ T7095] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 93.545085][ T7103] syzkaller0: entered promiscuous mode [ 93.547874][ T7103] syzkaller0: entered allmulticast mode [ 94.299364][ T7126] syzkaller0: entered promiscuous mode [ 94.302096][ T7126] syzkaller0: entered allmulticast mode [ 94.425176][ T7131] UBIFS error (pid: 7131): cannot open "ubi0_0", error -19 [ 94.509626][ T7126] tipc: Enabled bearer , priority 0 [ 94.535475][ T7125] tipc: Resetting bearer [ 94.546779][ T7125] tipc: Disabling bearer [ 94.782021][ T7088] Set syz1 is full, maxelem 65536 reached [ 94.843803][ T5747] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.859074][ T7134] syzkaller0: entered promiscuous mode [ 94.861619][ T7134] syzkaller0: entered allmulticast mode [ 95.162527][ T7140] syzkaller0: entered promiscuous mode [ 95.164945][ T7140] syzkaller0: entered allmulticast mode [ 95.236295][ T7142] netlink: 156 bytes leftover after parsing attributes in process `syz.0.442'. [ 95.464114][ T7152] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 95.747479][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 95.809389][ T7163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7163 comm=syz.0.450 [ 95.868383][ T7168] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 95.895696][ T7168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.939766][ T7168] bond4: (slave gretap3): making interface the new active one [ 95.947252][ T7168] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 95.966584][ T7168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7168 comm=syz.0.451 [ 95.992111][ T7168] syz.0.451 (7168) used greatest stack depth: 19784 bytes left [ 96.904688][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 96.904711][ T42] audit: type=1400 audit(1785538005.560:580): avc: denied { read } for pid=7179 comm="syz.3.456" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.932809][ T42] audit: type=1400 audit(1785538005.560:581): avc: denied { open } for pid=7179 comm="syz.3.456" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 97.820066][ T7206] syzkaller0: entered promiscuous mode [ 97.824616][ T7206] syzkaller0: entered allmulticast mode [ 98.043358][ T42] audit: type=1400 audit(1785538006.700:582): avc: denied { mount } for pid=7209 comm="syz.2.462" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.066066][ T42] audit: type=1400 audit(1785538006.710:583): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.310496][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 98.490437][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 98.497405][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.504638][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.510097][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.514671][ T24] usb 7-1: Product: syz [ 98.516041][ T24] usb 7-1: Manufacturer: syz [ 98.518612][ T24] usb 7-1: SerialNumber: syz [ 98.526468][ T24] usb 7-1: config 0 descriptor?? [ 98.550215][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.554751][ T24] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 98.760981][ T7222] netlink: 'syz.3.465': attribute type 4 has an invalid length. [ 98.889048][ T42] audit: type=1400 audit(1785538007.540:584): avc: denied { setopt } for pid=7226 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.947990][ T7231] pimreg3: entered allmulticast mode [ 98.998688][ T42] audit: type=1400 audit(1785538007.650:585): avc: denied { audit_write } for pid=7236 comm="syz.1.471" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.104087][ T7239] syzkaller0: entered promiscuous mode [ 99.107302][ T7239] syzkaller0: entered allmulticast mode [ 99.161733][ T24] em28xx 7-1:0.0: chip ID is em2765 [ 99.545843][ T42] audit: type=1400 audit(1785538008.200:586): avc: denied { write } for pid=7260 comm="syz.1.477" name="dlm" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.574264][ T42] audit: type=1400 audit(1785538008.230:587): avc: denied { read } for pid=7260 comm="syz.1.477" name="cluster_name" dev="configfs" ino=17882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 99.587958][ T42] audit: type=1800 audit(1785538008.230:588): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.477" name="cluster_name" dev="configfs" ino=17882 res=0 errno=0 [ 99.607655][ T42] audit: type=1400 audit(1785538008.240:589): avc: denied { write } for pid=7260 comm="syz.1.477" name="comms" dev="configfs" ino=17881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.795109][ T7264] Config c1/1 of g1 needs at least one function. [ 99.815961][ T7264] udc usbip-vudc.0: failed to start g1: -22 [ 99.818480][ T7264] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 99.826139][ T7264] UDC core: g1: couldn't find an available UDC or it's busy [ 99.831670][ T24] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.837612][ T24] em28xx 7-1:0.0: board has no eeprom [ 100.210513][ T24] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 100.214028][ T24] em28xx 7-1:0.0: dvb set to bulk mode. [ 100.264490][ T5092] em28xx 7-1:0.0: Binding DVB extension [ 101.140758][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 101.162224][ T7266] ceph: No mds server is up or the cluster is laggy [ 101.294378][ T24] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 101.297425][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.300162][ T24] usb 8-1: Product: syz [ 101.302207][ T24] usb 8-1: Manufacturer: syz [ 101.303730][ T24] usb 8-1: SerialNumber: syz [ 101.313316][ T24] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 101.318933][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 101.325038][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 101.407243][ T29] usb 7-1: USB disconnect, device number 4 [ 101.418261][ T29] em28xx 7-1:0.0: Disconnecting em28xx [ 101.438692][ T5092] em28xx 7-1:0.0: Registering input extension [ 101.443962][ T29] em28xx 7-1:0.0: Closing input extension [ 101.489504][ T29] em28xx 7-1:0.0: Freeing device [ 101.763707][ T7286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7286 comm=syz.1.485 [ 101.770768][ T7286] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 101.827265][ T7286] macvtap1: entered allmulticast mode [ 101.840303][ T7286] macvtap2: entered allmulticast mode [ 101.861716][ T7286] bond2: (slave bridge2): making interface the new active one [ 101.865852][ T7286] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 101.902895][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 101.983894][ T7295] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 101.987311][ T7295] sock: sock_set_timeout: `syz.2.489' (pid 7295) tries to set negative timeout [ 102.081257][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 102.081276][ T42] audit: type=1400 audit(1785538010.740:598): avc: denied { map } for pid=7302 comm="syz.1.493" path="socket:[19041]" dev="sockfs" ino=19041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.092983][ T42] audit: type=1400 audit(1785538010.740:599): avc: denied { read write } for pid=7302 comm="syz.1.493" path="socket:[19041]" dev="sockfs" ino=19041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.149362][ T7308] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 102.154455][ T7308] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 102.164778][ T7308] tipc: Enabled bearer , priority 0 [ 102.199572][ T42] audit: type=1400 audit(1785538010.850:600): avc: denied { mount } for pid=7309 comm="syz.2.495" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.281053][ T7321] netlink: 84 bytes leftover after parsing attributes in process `syz.2.498'. [ 102.285892][ T7321] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 102.774797][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'. [ 102.994643][ T7354] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 103.332771][ T7370] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 103.394744][ T7370] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 103.409450][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 103.414094][ T42] audit: type=1400 audit(1785538012.070:601): avc: denied { write } for pid=7372 comm="syz.1.517" name="nullb" dev="configfs" ino=5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.415577][ T7370] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.416385][ T5820] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.446793][ T7373] null_blk: nullb1: using native zone append [ 103.481978][ T7373] null_blk: disk nullb1 created [ 103.532700][ T5820] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.549671][ T7380] binder_alloc: 7379: pid 7379 spamming oneway? 1 buffers allocated for a total size of 4096 [ 103.556533][ T7380] binder_alloc: 7379: pid 7379 spamming oneway? 2 buffers allocated for a total size of 5120 [ 103.683103][ T7390] syzkaller0: entered promiscuous mode [ 103.685539][ T7390] syzkaller0: entered allmulticast mode [ 103.824750][ T7397] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 103.856613][ T7397] bond1: entered promiscuous mode [ 103.858551][ T7397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.894208][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 103.897350][ T7397] bond1: entered allmulticast mode [ 103.913967][ T7397] bond1: (slave bridge1): making interface the new active one [ 103.916480][ T7397] bridge1: entered promiscuous mode [ 103.918474][ T7397] bridge1: entered allmulticast mode [ 103.939530][ T7397] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.041465][ T7283] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 104.060843][ T5092] usb 8-1: USB disconnect, device number 3 [ 104.077680][ T7415] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 104.115636][ T5092] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 104.117866][ T7418] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 104.130981][ T5092] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 104.137254][ T5092] ti_usb_3410_5052 8-1:2.0: device disconnected [ 104.138159][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.177586][ T7419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.190591][ T7419] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 104.195216][ T7419] bond2: (slave gre2): Error -95 calling set_mac_address [ 104.218275][ T7415] gretap1: entered promiscuous mode [ 104.238863][ T7415] bond2: (slave gretap1): making interface the new active one [ 104.244385][ T7415] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.256305][ T7418] bridge4: entered promiscuous mode [ 104.264903][ T7418] bond6: (slave bridge4): making interface the new active one [ 104.267866][ T7418] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 104.277810][ T7415] macvlan2: entered promiscuous mode [ 104.279541][ T7415] macvlan2: entered allmulticast mode [ 104.283131][ T7415] bond2: entered promiscuous mode [ 104.287680][ T7415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.291718][ T7415] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 104.295867][ T7415] bond2: left promiscuous mode [ 104.309366][ T7418] bridge5: entered promiscuous mode [ 104.313461][ T7418] bond6: (slave bridge5): Enslaving as a backup interface with an up link [ 104.426216][ T42] audit: type=1400 audit(1785538013.080:602): avc: denied { write } for pid=7427 comm="syz.2.531" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.442713][ T42] audit: type=1400 audit(1785538013.080:603): avc: denied { write } for pid=7427 comm="syz.2.531" name="target" dev="configfs" ino=5535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.463413][ T42] audit: type=1400 audit(1785538013.090:604): avc: denied { write } for pid=7427 comm="syz.2.531" name="usb_gadget" dev="configfs" ino=18060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.486519][ T42] audit: type=1400 audit(1785538013.090:605): avc: denied { write } for pid=7427 comm="syz.2.531" name="naa.1234567890abcdef" dev="configfs" ino=18062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.493817][ T42] audit: type=1400 audit(1785538013.100:606): avc: denied { write } for pid=7427 comm="syz.2.531" name="core" dev="configfs" ino=5536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.501012][ T42] audit: type=1400 audit(1785538013.110:607): avc: denied { write } for pid=7427 comm="syz.2.531" name="lun" dev="configfs" ino=18066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.607114][ T7443] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 104.636367][ T7443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.654749][ T7443] bond3: (slave gretap1): making interface the new active one [ 104.658494][ T7443] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 104.705075][ T7453] tipc: Started in network mode [ 104.707235][ T7453] tipc: Node identity 6abeea7ceaa8, cluster identity 4711 [ 104.711265][ T7453] tipc: Enabled bearer , priority 0 [ 104.717963][ T7453] syzkaller0: entered promiscuous mode [ 104.719875][ T7453] syzkaller0: entered allmulticast mode [ 104.726693][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 104.755658][ T7453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.537'. [ 104.767257][ T7453] tipc: Resetting bearer [ 104.774931][ T7455] bond4: entered promiscuous mode [ 104.776760][ T7455] bond4: entered allmulticast mode [ 104.778973][ T7452] tipc: Resetting bearer [ 104.790769][ T7452] tipc: Disabling bearer [ 104.894421][ T7466] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 104.898302][ T7466] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 104.946847][ T7465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.997983][ T7472] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 105.001579][ T7472] syz_tun: entered promiscuous mode [ 105.010075][ T7472] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.043279][ T7465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.176417][ T7465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.208963][ T7480] syzkaller0: entered promiscuous mode [ 105.220467][ T7480] syzkaller0: entered allmulticast mode [ 105.277365][ T7465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.397813][ T7481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.405080][ T7481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.546950][ T5820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.612787][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.617749][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.621321][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.707177][ T7498] syzkaller0: entered promiscuous mode [ 105.709644][ T7498] syzkaller0: entered allmulticast mode [ 105.825053][ T7508] syzkaller0: entered promiscuous mode [ 105.827476][ T7508] syzkaller0: entered allmulticast mode [ 105.884792][ T7511] syzkaller0: entered promiscuous mode [ 105.886836][ T7511] syzkaller0: entered allmulticast mode [ 105.910046][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000c04a [ 105.934241][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100003791 [ 105.954741][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfff9 [ 105.987575][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6584 [ 106.040165][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1990 [ 106.046632][ T7502] kvm: kvm [7501]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 106.238807][ T7538] syzkaller0: entered promiscuous mode [ 106.244921][ T7538] syzkaller0: entered allmulticast mode [ 106.531613][ T7549] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.552449][ T7549] kvm: pic: level sensitive irq not supported [ 106.643123][ T7556] netlink: 44 bytes leftover after parsing attributes in process `syz.1.573'. [ 106.650909][ T7556] syz_tun: entered allmulticast mode [ 106.656340][ T7555] syz_tun: left allmulticast mode [ 106.672033][ T7558] syzkaller0: entered promiscuous mode [ 106.674307][ T7558] syzkaller0: entered allmulticast mode [ 106.932916][ T7576] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 106.935879][ T7576] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 107.102210][ T7579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.109006][ T7579] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.134254][ T7579] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.496302][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 107.496358][ T42] audit: type=1400 audit(1785538016.150:623): avc: denied { append } for pid=7614 comm="syz.2.591" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.593789][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.594'. [ 107.622688][ T7632] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 107.625652][ T7632] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 107.789677][ T7642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7642 comm=syz.3.598 [ 107.797652][ T42] audit: type=1400 audit(1785538016.450:624): avc: denied { write } for pid=7641 comm="syz.3.598" path="socket:[22669]" dev="sockfs" ino=22669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.814551][ T7644] 0: reclassify loop, rule prio 0, protocol 800 [ 107.858531][ T7648] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 107.864658][ T7648] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 107.868195][ T7648] tipc: Enabling of bearer rejected, already enabled [ 107.872867][ T7648] tipc: Resetting bearer [ 107.989669][ T42] audit: type=1400 audit(1785538016.640:625): avc: denied { append } for pid=7662 comm="syz.2.604" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.030405][ T42] audit: type=1400 audit(1785538016.680:626): avc: denied { bind } for pid=7668 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.053252][ T7664] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 108.072999][ T7664] kvm: pic: non byte read [ 108.076275][ T7664] kvm: pic: level sensitive irq not supported [ 108.076729][ T7664] kvm: pic: non byte read [ 108.106352][ T7676] warning: `syz.0.609' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.238504][ T7685] syzkaller0: entered promiscuous mode [ 108.241920][ T7685] syzkaller0: entered allmulticast mode [ 108.423755][ T42] audit: type=1400 audit(1785538017.080:627): avc: denied { write } for pid=7697 comm="syz.1.615" name="fs" dev="configfs" ino=12026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.610832][ T7716] netlink: 76 bytes leftover after parsing attributes in process `syz.0.620'. [ 108.825888][ T7736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.624'. [ 109.170478][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.407011][ T7774] tipc: Enabling of bearer rejected, failed to enable media [ 109.710941][ T7792] syz_tun: left promiscuous mode [ 109.717958][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.721482][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.723812][ T7799] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.737432][ T7799] kvm: pic: level sensitive irq not supported [ 109.818255][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.845932][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.932049][ T7808] capability: warning: `syz.2.640' uses deprecated v2 capabilities in a way that may be insecure [ 109.996623][ T7792] gretap2: left allmulticast mode [ 110.006447][ T7792] veth1: left promiscuous mode [ 110.014770][ T7792] bridge3: left promiscuous mode [ 110.036429][ T7792] bridge4: left promiscuous mode [ 110.042894][ T7792] bridge5: left promiscuous mode [ 110.060553][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.065954][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.075191][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.077689][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.081328][ T42] audit: type=1400 audit(1785538018.740:628): avc: denied { read append } for pid=7817 comm="syz.1.644" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.090149][ T42] audit: type=1400 audit(1785538018.740:629): avc: denied { open } for pid=7817 comm="syz.1.644" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.100771][ T42] audit: type=1400 audit(1785538018.740:630): avc: denied { ioctl } for pid=7817 comm="syz.1.644" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x6440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.179593][ T42] audit: type=1400 audit(1785538018.830:631): avc: denied { map } for pid=7821 comm="syz.1.647" path="/dev/sda1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.785505][ T7834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'. [ 111.240524][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.600623][ T7791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.652809][ T7842] syzkaller0: entered promiscuous mode [ 112.654831][ T7842] syzkaller0: entered allmulticast mode [ 112.676199][ T7839] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.688867][ T7839] kvm: pic: level sensitive irq not supported [ 112.847356][ T7859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.966143][ T7859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.039471][ T7859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.132564][ T7859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.250509][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.260500][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.264417][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.267767][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.320464][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.555394][ T7873] tipc: Enabled bearer , priority 0 [ 113.559305][ T7873] syzkaller0: entered promiscuous mode [ 113.562647][ T7873] syzkaller0: entered allmulticast mode [ 113.581557][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.662'. [ 113.589417][ T7873] tipc: Resetting bearer [ 113.595395][ T7872] tipc: Resetting bearer [ 113.611830][ T7872] tipc: Disabling bearer [ 113.628772][ T7875] syzkaller0: entered promiscuous mode [ 113.630977][ T7875] syzkaller0: entered allmulticast mode [ 113.701580][ T42] audit: type=1400 audit(1785538022.350:632): avc: denied { write } for pid=7876 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.734676][ T42] audit: type=1400 audit(1785538022.390:633): avc: denied { name_connect } for pid=7876 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 113.763333][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.664'. [ 113.818275][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 113.824812][ T7880] hsr_slave_0: left promiscuous mode [ 113.827258][ T7880] hsr_slave_1: left promiscuous mode [ 113.865314][ T42] audit: type=1400 audit(1785538022.520:634): avc: denied { connect } for pid=7876 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.001491][ T5747] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 114.003778][ T5747] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 114.156984][ T42] audit: type=1400 audit(1785538022.810:635): avc: denied { mounton } for pid=7889 comm="syz.1.668" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.164713][ T7891] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 114.169119][ T42] audit: type=1400 audit(1785538022.820:636): avc: denied { read write } for pid=7889 comm="syz.1.668" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.176606][ T42] audit: type=1400 audit(1785538022.820:637): avc: denied { open } for pid=7889 comm="syz.1.668" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.184338][ T42] audit: type=1400 audit(1785538022.830:638): avc: denied { create } for pid=7889 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.264349][ T7901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.268535][ T7901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.348735][ T7901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.352259][ T7901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.396818][ T7909] tipc: Enabling of bearer rejected, already enabled [ 114.409893][ T7909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.672'. [ 114.447965][ T7901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.452048][ T7901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.573942][ T7901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.578073][ T7901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.702803][ T5818] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.707312][ T5818] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.730640][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.734028][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.740518][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.743041][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.745739][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.748332][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.853173][ T7924] syzkaller0: entered promiscuous mode [ 114.855202][ T7924] syzkaller0: entered allmulticast mode [ 114.861851][ T7924] tipc: Enabled bearer , priority 0 [ 114.867838][ T7924] tipc: Resetting bearer [ 114.869913][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.873319][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.875978][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.878593][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.887128][ T7923] tipc: Resetting bearer [ 114.904635][ T7923] tipc: Disabling bearer [ 114.920594][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 114.940581][ T5818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.944205][ T5818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.947744][ T5818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.951489][ T5818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.997082][ T7934] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 115.098800][ T42] audit: type=1400 audit(1785538023.750:639): avc: denied { create } for pid=7942 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 115.120674][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.305104][ T41] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 115.308750][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.312402][ T41] usb 6-1: Product: syz [ 115.313973][ T41] usb 6-1: Manufacturer: syz [ 115.315480][ T41] usb 6-1: SerialNumber: syz [ 115.321184][ T42] audit: type=1400 audit(1785538023.980:640): avc: denied { open } for pid=7955 comm="syz.3.689" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 115.331902][ T42] audit: type=1400 audit(1785538023.980:641): avc: denied { ioctl } for pid=7955 comm="syz.3.689" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 115.332619][ T41] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 115.347657][ T41] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 115.356559][ T41] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 115.503344][ T5747] Bluetooth: hci3: unexpected subevent 0x19 length: 30 > 28 [ 115.508840][ T5747] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 115.732039][ T7964] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 118.050716][ T7961] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 118.058420][ T5890] usb 6-1: USB disconnect, device number 5 [ 118.067448][ T5890] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 118.076781][ T5890] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 118.082253][ T5890] ti_usb_3410_5052 6-1:2.0: device disconnected [ 118.304340][ T7969] ªªªªªªI¡§å!qƒú: renamed from lo [ 118.465863][ T7979] memory length for this resource is wrong [ 118.517206][ T7979] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 118.549612][ T7983] SELinux: invalid class [ 118.559611][ T7988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 118.562434][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.566587][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 118.583225][ T7983] SELinux: failed to load policy [ 118.633380][ T7995] syz_tun: entered allmulticast mode [ 118.641308][ T7995] ªªªªªªI¡§å!qƒú: left allmulticast mode [ 118.644782][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 118.662670][ T7995] syz_tun (unregistering): left allmulticast mode [ 118.760565][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 118.830522][ T5890] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 118.830522][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 118.929090][ T8004] syzkaller0: entered promiscuous mode [ 118.932969][ T8004] syzkaller0: entered allmulticast mode [ 118.992355][ T5890] usb 7-1: config 0 has no interfaces? [ 118.994246][ T5890] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.997828][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.011061][ T5890] usb 7-1: config 0 descriptor?? [ 119.071310][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 119.071324][ T42] audit: type=1400 audit(1785538027.730:652): avc: denied { name_bind } for pid=8005 comm="syz.3.705" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.211761][ T8009] bridge_slave_0: left allmulticast mode [ 119.214211][ T8009] bridge_slave_0: left promiscuous mode [ 119.216781][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.222160][ T7989] usb 41-1: recv xbuf, 0 [ 119.228125][ T13] vhci_hcd vhci_hcd.2: stop threads [ 119.229869][ T8009] bridge_slave_1: left allmulticast mode [ 119.230020][ T13] vhci_hcd vhci_hcd.2: release socket [ 119.234370][ T8009] bridge_slave_1: left promiscuous mode [ 119.237150][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.237653][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 119.248656][ T8009] bond0: (slave bond_slave_0): Releasing backup interface [ 119.256415][ T8009] bond0: (slave bond_slave_1): Releasing backup interface [ 119.271620][ T8009] team0: Port device team_slave_0 removed [ 119.279037][ T8009] team0: Port device team_slave_1 removed [ 119.282042][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.284700][ T8009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.289517][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.292574][ T8009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.296988][ T8009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.300568][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 119.319083][ T8010] team0: Refused to change device type [ 121.673509][ T7997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.700455][ T5890] usb 7-1: string descriptor 0 read error: -71 [ 121.714414][ T5890] usb 7-1: USB disconnect, device number 5 [ 121.789219][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 121.797337][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.800146][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.816252][ T8021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8021 comm=syz.0.710 [ 121.906324][ T42] audit: type=1400 audit(1785538030.560:653): avc: denied { append } for pid=8037 comm="syz.3.716" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.924901][ T42] audit: type=1400 audit(1785538030.580:654): avc: denied { ioctl } for pid=8037 comm="syz.3.716" path="socket:[24292]" dev="sockfs" ino=24292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.943878][ T8041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.953626][ T8040] zram0: detected capacity change from 0 to 8 [ 122.078618][ T8038] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 122.085416][ T8038] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 122.088103][ T42] audit: type=1400 audit(1785538030.740:655): avc: denied { create } for pid=8044 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 122.093281][ T8038] cramfs: wrong magic [ 122.151087][ T5890] e1000 0000:00:06.0 eth0: Reset adapter [ 122.155244][ T42] audit: type=1400 audit(1785538030.810:656): avc: denied { watch watch_reads } for pid=8047 comm="syz.2.719" path="/proc/413/net/dev_snmp6" dev="proc" ino=4026533377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 122.161568][ T8048] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 122.170922][ T42] audit: type=1400 audit(1785538030.820:657): avc: denied { getopt } for pid=8047 comm="syz.2.719" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.179423][ T42] audit: type=1400 audit(1785538030.830:658): avc: denied { write } for pid=8049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.220620][ T42] audit: type=1400 audit(1785538030.870:659): avc: denied { write } for pid=8053 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.387810][ T42] audit: type=1400 audit(1785538031.040:660): avc: denied { read } for pid=8060 comm="syz.1.722" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.400489][ T42] audit: type=1400 audit(1785538031.040:661): avc: denied { open } for pid=8060 comm="syz.1.722" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.767223][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 124.441653][ T5890] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 127.917557][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 127.917578][ T42] audit: type=1400 audit(1785538036.570:672): avc: denied { write } for pid=8102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.970192][ T42] audit: type=1400 audit(1785538036.620:673): avc: denied { write } for pid=8105 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.296552][ T42] audit: type=1400 audit(1785538038.950:674): avc: denied { write } for pid=8108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.354937][ T42] audit: type=1400 audit(1785538039.010:675): avc: denied { write } for pid=8111 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.198290][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 132.201630][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 132.269388][ T42] audit: type=1400 audit(1785538040.920:676): avc: denied { append } for pid=8132 comm="syz.3.735" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.395236][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 132.434609][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 132.464793][ T5747] Bluetooth: hci3: unexpected event for opcode 0x041c [ 132.495201][ T5747] Bluetooth: hci3: unexpected event for opcode 0x202f [ 132.527023][ T5747] Bluetooth: hci3: unexpected event for opcode 0x200b [ 132.587304][ T5747] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 132.607010][ T8185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.618588][ T42] audit: type=1800 audit(1785538041.270:677): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.762" name="idVendor" dev="configfs" ino=24372 res=0 errno=0 [ 132.622216][ T8191] fuse: Bad value for 'group_id' [ 132.625322][ T42] audit: type=1800 audit(1785538041.270:678): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.762" name="serialnumber" dev="configfs" ino=22332 res=0 errno=0 [ 132.627257][ T8191] fuse: Bad value for 'group_id' [ 132.634807][ T42] audit: type=1800 audit(1785538041.280:679): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.762" name="manufacturer" dev="configfs" ino=22333 res=0 errno=0 [ 132.644145][ T42] audit: type=1800 audit(1785538041.280:680): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.762" name="product" dev="configfs" ino=22334 res=0 errno=0 [ 132.646697][ T8191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=8191 comm=syz.1.761 [ 132.652995][ T42] audit: type=1400 audit(1785538041.280:681): avc: denied { write } for pid=8190 comm="syz.3.762" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.683147][ T8194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 132.685861][ T8194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.699002][ T8194] vhci_hcd vhci_hcd.0: Device attached [ 132.704499][ T8191] dns_resolver: Unsupported content type (234) [ 132.717210][ T8197] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 132.724984][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 132.729020][ T5818] vhci_hcd vhci_hcd.3: release socket [ 132.732852][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 132.734147][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 132.764382][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937806][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 132.949331][ T8217] syzkaller0: entered promiscuous mode [ 132.952213][ T8217] syzkaller0: entered allmulticast mode [ 133.136920][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 133.136973][ T42] audit: type=1400 audit(1785538041.790:699): avc: denied { create } for pid=8218 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.393989][ T42] audit: type=1400 audit(1785538041.850:700): avc: denied { write } for pid=8224 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.015350][ T42] audit: type=1800 audit(1785538042.670:701): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.785" name="cluster_name" dev="configfs" ino=22386 res=0 errno=0 [ 134.023357][ T42] audit: type=1800 audit(1785538042.680:702): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.785" name="local" dev="configfs" ino=21494 res=0 errno=0 [ 134.076556][ T42] audit: type=1400 audit(1785538042.730:703): avc: denied { write } for pid=8254 comm="syz.2.786" name="configs" dev="configfs" ino=11056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.089373][ T8255] UDC core: g1: couldn't find an available UDC or it's busy [ 134.238801][ T8268] random: crng reseeded on system resumption [ 134.240436][ T42] audit: type=1400 audit(1785538042.890:704): avc: denied { write } for pid=8267 comm="syz.2.790" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.248171][ T42] audit: type=1400 audit(1785538042.890:705): avc: denied { ioctl } for pid=8267 comm="syz.2.790" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.542597][ T5747] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 134.688746][ T42] audit: type=1400 audit(1785538043.340:706): avc: denied { write } for pid=8302 comm="syz.3.804" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.719573][ T8307] comedi comedi3: pcl724: I/O base address or length out of range [ 134.763849][ T5747] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 134.818493][ T5747] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 134.819499][ T8317] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.913456][ T42] audit: type=1400 audit(1785538043.570:707): avc: denied { write } for pid=8318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.925609][ T8326] comedi comedi3: dt2817: a I/O base address must be specified [ 134.966230][ T42] audit: type=1400 audit(1785538043.620:708): avc: denied { write } for pid=8327 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.996159][ T8329] block device autoloading is deprecated and will be removed. [ 135.485970][ T8364] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 135.517990][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 135.712803][ T8374] ±ÿ: renamed from lo [ 136.257189][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.260072][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.333126][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.343224][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.423516][ T8409] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 136.541676][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.547026][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.550775][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.555084][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.675640][ T8437] tipc: Enabling of bearer rejected, failed to enable media [ 136.930743][ T5818] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.934630][ T5818] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.938558][ T5818] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.942425][ T5818] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.140868][ T5850] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 137.141316][ T8470] netlink: 84 bytes leftover after parsing attributes in process `syz.0.870'. [ 137.150575][ T8470] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 137.293304][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 137.297850][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 137.302136][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.306519][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 137.310974][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 137.315690][ T5850] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 137.322013][ T5850] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 137.325845][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.329427][ T5850] usb 7-1: Product: syz [ 137.331440][ T5850] usb 7-1: Manufacturer: syz [ 137.338669][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.342623][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.345730][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.348749][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.351961][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.360089][ T8464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.367175][ T5850] usb 7-1: USB2VGA dongle found at address 6 [ 137.376636][ T5850] usb 7-1: Allocated 8 output buffers [ 137.382938][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8488 comm=syz.0.878 [ 137.384690][ T5850] usb 7-1: Failed to early initialize device [ 137.387896][ T8488] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 137.451910][ T8488] macvtap1: entered allmulticast mode [ 137.467953][ T8488] macvtap2: entered allmulticast mode [ 137.486352][ T8488] bond8: (slave bridge6): making interface the new active one [ 137.489331][ T8488] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 137.578971][ T8464] usb 7-1: Failed to initialize device [ 137.595639][ T8425] usb 7-1: USB disconnect, device number 6 [ 138.330509][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.333353][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.336066][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.338650][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.342438][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.347110][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.356717][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.365561][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.525324][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'. [ 138.558578][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 138.558596][ T42] audit: type=1400 audit(1785538047.210:712): avc: denied { connect } for pid=8531 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.602349][ T8536] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 138.604783][ T8536] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 138.607203][ T8537] netlink: 240 bytes leftover after parsing attributes in process `syz.0.901'. [ 138.613029][ T42] audit: type=1400 audit(1785538047.260:713): avc: denied { setopt } for pid=8531 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.728406][ T8554] gsmld_receive_buf: 00000000: f9 . [ 138.736800][ T8554] gsmld_receive_buf: 00000000: 03 . [ 138.745382][ T8554] gsmld_receive_buf: 00000000: 3f ? [ 138.766049][ T8554] gsmld_receive_buf: 00000000: 01 . [ 138.768945][ T42] audit: type=1400 audit(1785538047.420:714): avc: denied { connect } for pid=8559 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.775225][ T8554] gsmld_receive_buf: 00000000: 1c . [ 138.779166][ T42] audit: type=1400 audit(1785538047.420:715): avc: denied { setopt } for pid=8559 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.784088][ T8554] gsmld_receive_buf: 00000000: f9 . [ 139.010484][ T8424] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 139.160521][ T8424] usb 7-1: Using ep0 maxpacket: 8 [ 139.163803][ T8424] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.167048][ T8424] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 139.171225][ T8424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.177181][ T8424] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 139.180043][ T8424] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 139.182770][ T8424] usb 7-1: Product: syz [ 139.184040][ T8424] usb 7-1: Manufacturer: syz [ 139.185495][ T8424] usb 7-1: SerialNumber: syz [ 139.189114][ T8424] usb 7-1: config 0 descriptor?? [ 139.230515][ T8424] rc_core: IR keymap rc-imon-rsc not found [ 139.232864][ T8424] Registered IR keymap rc-empty [ 139.236425][ T8424] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 139.240844][ T8424] input: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 139.246076][ T42] audit: type=1400 audit(1785538047.900:716): avc: denied { read } for pid=5134 comm="acpid" name="event4" dev="devtmpfs" ino=3109 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.255168][ T42] audit: type=1400 audit(1785538047.900:717): avc: denied { open } for pid=5134 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3109 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.264597][ T42] audit: type=1400 audit(1785538047.900:718): avc: denied { ioctl } for pid=5134 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3109 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.334159][ T42] audit: type=1400 audit(1785538047.990:719): avc: denied { getopt } for pid=8567 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.406961][ T42] audit: type=1400 audit(1785538048.060:720): avc: denied { ioctl } for pid=8556 comm="syz.2.910" path="/dev/input/event4" dev="devtmpfs" ino=3109 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.422593][ T5889] usb 7-1: USB disconnect, device number 7 [ 139.680521][ T8581] pimreg: entered allmulticast mode [ 139.683718][ T8581] pimreg: left allmulticast mode [ 139.690292][ T8583] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 139.693124][ T8583] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 140.039746][ T42] audit: type=1400 audit(1785538048.690:721): avc: denied { write } for pid=8604 comm="syz.2.928" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.081249][ T8424] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 140.128293][ T8615] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 140.163903][ T8615] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 140.174417][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'. [ 140.178126][ T8615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.179757][ T5818] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.234050][ T8424] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 140.244959][ T8424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.249612][ T8424] usb 6-1: Product: syz [ 140.252688][ T8424] usb 6-1: Manufacturer: syz [ 140.254408][ T8424] usb 6-1: SerialNumber: syz [ 140.259992][ T8424] usb 6-1: config 0 descriptor?? [ 140.291044][ T5818] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.356609][ T8634] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 140.399059][ T8636] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 140.470484][ T6167] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 140.471719][ T8425] usb 6-1: USB disconnect, device number 6 [ 140.621887][ T6167] usb 7-1: Using ep0 maxpacket: 32 [ 140.627415][ T6167] usb 7-1: unable to get BOS descriptor or descriptor too short [ 140.631997][ T6167] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 140.639530][ T6167] usb 7-1: string descriptor 0 read error: -22 [ 140.643128][ T6167] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 140.646991][ T6167] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 140.729072][ T8645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.945'. [ 140.881407][ T5890] usb 7-1: USB disconnect, device number 8 [ 141.031578][ T8658] Bluetooth: hci0: unsupported parameter 255 [ 141.036466][ T8658] Bluetooth: hci0: unsupported parameter 255 [ 141.410678][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 141.661745][ T8691] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 141.688616][ T8691] bond9: entered promiscuous mode [ 141.691435][ T8691] 8021q: adding VLAN 0 to HW filter on device bond9 [ 141.707842][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.965'. [ 141.711686][ T8691] bond9: entered allmulticast mode [ 141.733779][ T8691] bond9: (slave bridge7): making interface the new active one [ 141.736995][ T8691] bridge7: entered promiscuous mode [ 141.739353][ T8691] bridge7: entered allmulticast mode [ 141.743524][ T8691] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 141.760456][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 141.821310][ T8699] fuse: fd is not a fuse device [ 141.882900][ T8701] Bluetooth: hci0: unsupported parameter 255 [ 141.884901][ T8701] Bluetooth: hci0: unsupported parameter 255 [ 141.943050][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.946739][ T5890] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 141.951427][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.955163][ T5890] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.959931][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 141.964869][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.971131][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.975088][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.978454][ T5890] usb 6-1: Product: syz [ 141.982958][ T5890] usb 6-1: Manufacturer: syz [ 141.992881][ T8677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.997487][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 141.999859][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 142.004567][ T5890] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 142.008915][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol [ 142.204413][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 142.206639][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 142.209144][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 142.211237][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 142.213683][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 142.216233][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 142.218189][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 142.223340][ T8424] usb 6-1: USB disconnect, device number 7 [ 142.495893][ T8732] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 142.514332][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.532381][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.534845][ T8732] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 142.538433][ T8732] bond4: (slave gre1): Error -95 calling set_mac_address [ 142.585164][ T8739] gretap2: entered promiscuous mode [ 142.590676][ T8739] bond4: (slave gretap2): making interface the new active one [ 142.593651][ T8739] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 142.623224][ T8732] macvlan2: entered promiscuous mode [ 142.625427][ T8732] macvlan2: entered allmulticast mode [ 142.628235][ T8732] bond4: entered promiscuous mode [ 142.633264][ T8732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.638284][ T8732] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 142.643675][ T8732] bond4: left promiscuous mode [ 143.773075][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 143.773093][ T42] audit: type=1400 audit(1785538052.430:731): avc: denied { bpf } for pid=8809 comm="syz.0.1013" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.779552][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 143.788538][ T42] audit: type=1400 audit(1785538052.430:732): avc: denied { perfmon } for pid=8809 comm="syz.0.1013" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.865840][ T8812] bond10: entered promiscuous mode [ 143.868084][ T8812] bond10: entered allmulticast mode [ 143.964533][ T8823] IPVS: Error connecting to the multicast addr [ 144.064807][ T8831] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 144.148411][ T8831] bridge3: entered promiscuous mode [ 144.153728][ T8831] bond5: (slave bridge3): making interface the new active one [ 144.156489][ T8831] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 144.170177][ T8831] bridge4: entered promiscuous mode [ 144.173720][ T8831] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 144.682205][ T8425] libceph: connect (2)0.0.0.0:6789 error -22 [ 144.685468][ T8425] libceph: ceph_tcp_connect failed: -22 [ 144.688507][ T8425] libceph: mon0 (2)0.0.0.0:6789 connect error [ 144.956171][ T8425] libceph: connect (2)0.0.0.0:6789 error -22 [ 144.962984][ T8425] libceph: ceph_tcp_connect failed: -22 [ 144.967476][ T8425] libceph: mon0 (2)0.0.0.0:6789 connect error [ 145.071177][ T42] audit: type=1400 audit(1785538053.720:733): avc: denied { write } for pid=8894 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.076715][ T8895] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 145.083627][ T8895] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 145.095303][ T8895] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 145.105971][ T8895] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.123375][ T8895] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.220498][ T8424] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 145.370449][ T8424] usb 6-1: Using ep0 maxpacket: 32 [ 145.376700][ T8424] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 145.383397][ T8424] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 145.387519][ T8424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.391481][ T8424] usb 6-1: Product: syz [ 145.393392][ T8424] usb 6-1: Manufacturer: syz [ 145.395497][ T8424] usb 6-1: SerialNumber: syz [ 145.400093][ T8424] usb 6-1: config 0 descriptor?? [ 145.411152][ T8424] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 145.414894][ T8424] dvb-usb: bulk message failed: -22 (4/0) [ 145.417689][ T8424] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.422956][ T8424] dvb-usb: bulk message failed: -22 (5/0) [ 145.425446][ T8424] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.437316][ T8424] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.442158][ T8424] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 145.445942][ T8424] usb 6-1: media controller created [ 145.460206][ T8424] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.480773][ T8425] libceph: connect (2)0.0.0.0:6789 error -22 [ 145.483733][ T8425] libceph: ceph_tcp_connect failed: -22 [ 145.485817][ T8425] libceph: mon0 (2)0.0.0.0:6789 connect error [ 145.487663][ T8424] usb 6-1: selecting invalid altsetting 3 [ 145.490425][ T8424] ttusb2: set interface to alts=3 failed [ 145.519892][ T8424] DVB: Unable to find symbol tda10086_attach() [ 145.523810][ T8424] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 145.528632][ T8424] dvb-usb: bulk message failed: -22 (4/0) [ 145.531217][ T8424] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.535557][ T8424] dvb-usb: bulk message failed: -22 (5/0) [ 145.537941][ T8424] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.545469][ T8424] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 145.613081][ T8891] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 145.620245][ T8891] dvb-usb: bulk message failed: -22 (7/0) [ 145.623102][ T8891] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 145.627391][ T8891] ttusb2: i2c transfer failed. [ 145.632118][ T8424] usb 6-1: USB disconnect, device number 8 [ 145.677159][ T8424] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 145.730483][ T8872] ceph: No mds server is up or the cluster is laggy [ 146.472611][ T42] audit: type=1400 audit(1785538055.130:734): avc: denied { append } for pid=8927 comm="syz.1.1065" name="zone_size" dev="configfs" ino=29771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 146.495359][ T42] audit: type=1800 audit(1785538055.130:735): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1065" name="zone_size" dev="configfs" ino=29771 res=0 errno=0 [ 146.636326][ T8939] netlink: 'syz.3.1068': attribute type 12 has an invalid length. [ 146.656599][ T8939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1068'. [ 146.678383][ T8943] netlink: 'syz.1.1071': attribute type 4 has an invalid length. [ 146.773912][ T8950] overlayfs: failed to resolve './cgroup': -2 [ 146.956310][ T8964] x_tables: ip_tables: sctp.0 match: invalid size 296 (kernel) != (user) 344 [ 147.683199][ T42] audit: type=1800 audit(1785538056.340:736): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1115" name="product" dev="configfs" ino=29101 res=0 errno=0 [ 147.830279][ T42] audit: type=1800 audit(1785538056.480:737): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1120" name="zoned" dev="configfs" ino=30012 res=0 errno=0 [ 148.135864][ T42] audit: type=1800 audit(1785538056.790:738): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1135" name="b_vendor_code" dev="configfs" ino=29111 res=0 errno=0 [ 148.253183][ T9088] team0: entered allmulticast mode [ 148.260428][ T9088] team_slave_0: entered allmulticast mode [ 148.265108][ T9088] team_slave_1: entered allmulticast mode [ 148.309113][ T42] audit: type=1400 audit(1785538056.950:739): avc: denied { write } for pid=9091 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.481858][ T42] audit: type=1400 audit(1785538057.140:740): avc: denied { execute } for pid=9103 comm="syz.0.1148" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 148.865213][ T42] audit: type=1400 audit(1785538057.520:741): avc: denied { shutdown } for pid=9123 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.928985][ T9131] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 148.943409][ T9130] IPVS: stopping backup sync thread 9131 ... [ 149.054315][ T42] audit: type=1400 audit(1785538057.710:742): avc: denied { remount } for pid=9142 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 149.062408][ T42] audit: type=1400 audit(1785538057.720:743): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 149.093327][ T42] audit: type=1400 audit(1785538057.740:744): avc: denied { read } for pid=9144 comm="syz.0.1166" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.285657][ T9161] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 149.763368][ T9175] Bluetooth: MGMT ver 1.23 [ 150.414388][ T9224] i2c i2c-0: new_device: Missing parameters [ 150.891674][ T8424] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 151.040498][ T8424] usb 7-1: Using ep0 maxpacket: 8 [ 151.045731][ T8424] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 151.049261][ T8424] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.054161][ T8424] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.058825][ T8424] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 151.063855][ T8424] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.068146][ T8424] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.074082][ T8424] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.077998][ T8424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.141943][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000c04a [ 151.163676][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100003791 [ 151.178958][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfff9 [ 151.205314][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6584 [ 151.236210][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1990 [ 151.240256][ T9261] kvm: kvm [9259]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 151.293828][ T8424] usb 7-1: GET_CAPABILITIES returned 0 [ 151.296305][ T8424] usbtmc 7-1:16.0: can't read capabilities [ 151.504371][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 151.508413][ T9245] usbtmc 7-1:16.0: Unable to send data, error -71 [ 151.516256][ T8425] usb 7-1: USB disconnect, device number 9 [ 152.060598][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 152.149453][ T9304] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 152.210617][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 152.215215][ T10] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 152.222808][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 152.226456][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.229790][ T10] usb 6-1: Product: syz [ 152.231926][ T10] usb 6-1: Manufacturer: syz [ 152.233916][ T10] usb 6-1: SerialNumber: syz [ 152.239811][ T10] usb 6-1: config 0 descriptor?? [ 152.252995][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 152.256338][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 152.263377][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 152.267673][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 152.270061][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 152.285809][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.290162][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 152.293644][ T10] usb 6-1: media controller created [ 152.310576][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.331753][ T10] usb 6-1: selecting invalid altsetting 3 [ 152.334500][ T10] ttusb2: set interface to alts=3 failed [ 152.361114][ T10] DVB: Unable to find symbol tda10086_attach() [ 152.364008][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 152.368004][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 152.370448][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 152.374579][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 152.376841][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 152.383408][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 152.440104][ T9323] bridge_slave_0: left allmulticast mode [ 152.444293][ T9323] bridge_slave_0: left promiscuous mode [ 152.447003][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.449948][ T9288] dvb-usb: bulk message failed: -22 (7/0) [ 152.454396][ T9288] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 152.458133][ T9288] ttusb2: i2c transfer failed. [ 152.459431][ T9323] bridge_slave_1: left allmulticast mode [ 152.462433][ T9323] bridge_slave_1: left promiscuous mode [ 152.464777][ T5890] usb 6-1: USB disconnect, device number 9 [ 152.465160][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.474906][ T9323] bond0: (slave bond_slave_0): Releasing backup interface [ 152.480280][ T9323] bond0: (slave bond_slave_1): Releasing backup interface [ 152.496841][ T9323] team0: Port device team_slave_0 removed [ 152.498008][ T5890] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 152.503514][ T9323] team0: Port device team_slave_1 removed [ 152.506325][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.513272][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.518952][ T9323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.528277][ T9324] team0: Port device xfrm0 added [ 152.545586][ T9323] tipc: Enabled bearer , priority 0 [ 152.603084][ T9330] fuse: fd is not a fuse device [ 153.670542][ T6167] tipc: Node number set to 2148985468 [ 153.919311][ T9375] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 153.960577][ T5890] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 154.130866][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 154.135602][ T5890] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 154.140204][ T5890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 154.143763][ T5890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.147198][ T5890] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.152956][ T5890] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.156856][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.372058][ T5890] usb 7-1: GET_CAPABILITIES returned 0 [ 154.373778][ T5890] usbtmc 7-1:16.0: can't read capabilities [ 154.575199][ T6167] usb 7-1: USB disconnect, device number 10 [ 155.061010][ T5818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.064320][ T5818] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.067347][ T5818] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.070758][ T5818] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.090513][ T5890] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 155.242445][ T5890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.246643][ T5890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.259534][ T5890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.263946][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.484020][ T5890] usb 6-1: GET_CAPABILITIES returned 0 [ 155.491807][ T5890] usbtmc 6-1:16.0: can't read capabilities [ 155.527813][ T42] audit: type=1400 audit(1785538064.180:745): avc: denied { write } for pid=9430 comm="syz.3.1295" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.530100][ T9431] [ 155.535951][ T9431] ====================================================== [ 155.538175][ T9431] WARNING: possible circular locking dependency detected [ 155.538692][ T42] audit: type=1400 audit(1785538064.180:746): avc: denied { write } for pid=9430 comm="syz.3.1295" name="functions" dev="configfs" ino=11055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.540381][ T9431] syzkaller #0 Tainted: G L [ 155.540391][ T9431] ------------------------------------------------------ [ 155.540395][ T9431] syz.3.1295/9431 is trying to acquire lock: [ 155.540402][ T9431] ffff88802d4be570 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3fa/0x950 [ 155.560478][ T9431] [ 155.560478][ T9431] but task is already holding lock: [ 155.563490][ T9431] ffff88803b10db80 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 155.567443][ T9431] [ 155.567443][ T9431] which lock already depends on the new lock. [ 155.567443][ T9431] [ 155.571781][ T9431] [ 155.571781][ T9431] the existing dependency chain (in reverse order) is: [ 155.575437][ T9431] [ 155.575437][ T9431] -> #3 (&sb->s_type->i_mutex_key#30){++++}-{4:4}: [ 155.578961][ T9431] lock_acquire+0x1b9/0x370 [ 155.581027][ T9431] down_write+0x8b/0x1f0 [ 155.582590][ T9431] configfs_depend_item_unlocked+0xf3/0x6a0 [ 155.584885][ T9431] usbg_make_tpg+0x261/0x620 [ 155.587015][ T9431] target_fabric_make_tpg+0xab/0x8c0 [ 155.589493][ T9431] configfs_mkdir+0x51e/0xb70 [ 155.591668][ T9431] vfs_mkdir+0x361/0x850 [ 155.593673][ T9431] filename_mkdirat+0x48b/0x5e0 [ 155.595898][ T9431] __x64_sys_mkdir+0x6b/0x90 [ 155.598004][ T9431] do_syscall_64+0x115/0x870 [ 155.600146][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.602728][ T9431] [ 155.602728][ T9431] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 155.605851][ T9431] lock_acquire+0x1b9/0x370 [ 155.607922][ T9431] __mutex_lock+0x1a4/0x1bd0 [ 155.610031][ T9431] tcm_set_name+0x29/0xb0 [ 155.612070][ T9431] function_make+0x21c/0x3f0 [ 155.614207][ T9431] configfs_mkdir+0x51e/0xb70 [ 155.616423][ T9431] vfs_mkdir+0x361/0x850 [ 155.618297][ T9431] filename_mkdirat+0x48b/0x5e0 [ 155.620031][ T9431] __x64_sys_mkdir+0x6b/0x90 [ 155.621654][ T9431] do_syscall_64+0x115/0x870 [ 155.623654][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.626337][ T9431] [ 155.626337][ T9431] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 155.629224][ T9431] lock_acquire+0x1b9/0x370 [ 155.630819][ T9431] __mutex_lock+0x1a4/0x1bd0 [ 155.632475][ T9431] uvcg_frame_w_width_store+0x12c/0x370 [ 155.634318][ T9431] configfs_write_iter+0x302/0x4e0 [ 155.636092][ T9431] vfs_write+0x6ac/0x1050 [ 155.637617][ T9431] ksys_write+0x12a/0x250 [ 155.639144][ T9431] do_syscall_64+0x115/0x870 [ 155.640804][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.642801][ T9431] [ 155.642801][ T9431] -> #0 (&p->frag_sem){++++}-{4:4}: [ 155.645060][ T9431] check_prev_add+0xeb/0xe60 [ 155.646691][ T9431] __lock_acquire+0x136c/0x1a40 [ 155.648398][ T9431] lock_acquire+0x1b9/0x370 [ 155.650004][ T9431] down_write_killable+0x93/0x250 [ 155.651752][ T9431] configfs_rmdir+0x3fa/0x950 [ 155.653959][ T9431] vfs_rmdir+0x328/0x8a0 [ 155.655778][ T9431] filename_rmdir+0x31a/0x5c0 [ 155.657427][ T9431] __x64_sys_rmdir+0x46/0x70 [ 155.659031][ T9431] do_syscall_64+0x115/0x870 [ 155.660674][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.662722][ T9431] [ 155.662722][ T9431] other info that might help us debug this: [ 155.662722][ T9431] [ 155.665868][ T9431] Chain exists of: [ 155.665868][ T9431] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#30 [ 155.665868][ T9431] [ 155.670001][ T9431] Possible unsafe locking scenario: [ 155.670001][ T9431] [ 155.672299][ T9431] CPU0 CPU1 [ 155.674042][ T9431] ---- ---- [ 155.675730][ T9431] lock(&sb->s_type->i_mutex_key#30); [ 155.677432][ T9431] lock(&opts->dep_lock); [ 155.679603][ T9431] lock(&sb->s_type->i_mutex_key#30); [ 155.681991][ T9431] lock(&p->frag_sem); [ 155.683345][ T9431] [ 155.683345][ T9431] *** DEADLOCK *** [ 155.683345][ T9431] [ 155.683762][ T8425] usb 6-1: USB disconnect, device number 10 [ 155.685784][ T9431] 3 locks held by syz.3.1295/9431: [ 155.685797][ T9431] #0: ffff888023e24450 (sb_writers#20){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 155.693857][ T9431] #1: ffff888039eec3c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 155.698324][ T9431] #2: ffff88803b10db80 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 155.702418][ T9431] [ 155.702418][ T9431] stack backtrace: [ 155.704880][ T9431] CPU: 3 UID: 0 PID: 9431 Comm: syz.3.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.704909][ T9431] Tainted: [L]=SOFTLOCKUP [ 155.704915][ T9431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.704925][ T9431] Call Trace: [ 155.704944][ T9431] [ 155.704952][ T9431] dump_stack_lvl+0x100/0x190 [ 155.704988][ T9431] print_circular_bug.cold+0x178/0x1c7 [ 155.705018][ T9431] check_noncircular+0x146/0x160 [ 155.705041][ T9431] check_prev_add+0xeb/0xe60 [ 155.705063][ T9431] __lock_acquire+0x136c/0x1a40 [ 155.705088][ T9431] lock_acquire+0x1b9/0x370 [ 155.705108][ T9431] ? configfs_rmdir+0x3fa/0x950 [ 155.705130][ T9431] ? __pfx___might_resched+0x10/0x10 [ 155.705155][ T9431] down_write_killable+0x93/0x250 [ 155.705178][ T9431] ? configfs_rmdir+0x3fa/0x950 [ 155.705201][ T9431] ? __pfx_down_write_killable+0x10/0x10 [ 155.705223][ T9431] ? configfs_rmdir+0x3be/0x950 [ 155.705247][ T9431] configfs_rmdir+0x3fa/0x950 [ 155.705273][ T9431] ? __pfx_configfs_rmdir+0x10/0x10 [ 155.705296][ T9431] ? __pfx_down_write+0x10/0x10 [ 155.705320][ T9431] vfs_rmdir+0x328/0x8a0 [ 155.705347][ T9431] filename_rmdir+0x31a/0x5c0 [ 155.705368][ T9431] ? __pfx_filename_rmdir+0x10/0x10 [ 155.705391][ T9431] ? do_getname+0x191/0x390 [ 155.705415][ T9431] __x64_sys_rmdir+0x46/0x70 [ 155.705434][ T9431] do_syscall_64+0x115/0x870 [ 155.705455][ T9431] ? clear_bhb_loop+0x40/0x90 [ 155.705475][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.705494][ T9431] RIP: 0033:0x7fd5e0f9e019 [ 155.705511][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.705529][ T9431] RSP: 002b:00007fd5e1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 155.705548][ T9431] RAX: ffffffffffffffda RBX: 00007fd5e1225fa0 RCX: 00007fd5e0f9e019 [ 155.705560][ T9431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 155.705572][ T9431] RBP: 00007fd5e103500c R08: 0000000000000000 R09: 0000000000000000 [ 155.705582][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.705592][ T9431] R13: 00007fd5e1226038 R14: 00007fd5e1225fa0 R15: 00007ffdcfc3b248 [ 155.705616][ T9431]