last executing test programs: 13.367426902s ago: executing program 3 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000540)={'pim6reg\x00', 0x600}) 12.334935878s ago: executing program 0 (id=1766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1800000}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x452, r0}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.920210726s ago: executing program 3 (id=1769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$getown(r1, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000640), 0x4) 11.895408664s ago: executing program 1 (id=1770): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000050) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000050) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 10.466610237s ago: executing program 2 (id=1772): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 9.763370329s ago: executing program 3 (id=1773): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x20100) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 9.374736593s ago: executing program 1 (id=1774): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0xfef6, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000300)={0x5, @win={{0x4, 0x4a3, 0x1, 0x2b9}, 0x0, 0x964, &(0x7f0000000080)={{0x11, 0xf4ec, 0x2, 0x5}}, 0x2, &(0x7f00000001c0)="548fb3a4a855dc30f769c85b6b5c060b0b71feec3e5d8d06e6dd4582aefafba4b6abd6cac0e5"}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) userfaultfd(0x80000) fsopen(&(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200)={0x5d, 0x401, 0xffffbe39, 0xe9, 0x7}, 0x14) 9.289860781s ago: executing program 0 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 9.082994843s ago: executing program 4 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) 8.870686553s ago: executing program 2 (id=1777): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x7) clock_gettime(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) 8.28848263s ago: executing program 3 (id=1778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x34343452}}) 8.10852894s ago: executing program 4 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000100)={0x18, 0x0, 0x2, 0x0, 0x0, 0x2}) getrlimit(0x1, &(0x7f00000000c0)) 7.891972646s ago: executing program 0 (id=1780): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000010) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x51) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0) 7.297645444s ago: executing program 2 (id=1781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000380)='fsi_master_gpio_clock_zeros\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000900)="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", 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 5.644091227s ago: executing program 2 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 5.551181323s ago: executing program 0 (id=1784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 5.437660838s ago: executing program 4 (id=1785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.82683607s ago: executing program 1 (id=1786): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.494817734s ago: executing program 0 (id=1787): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x8010, r0, 0x4aa5a000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.311201884s ago: executing program 4 (id=1788): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.432078495s ago: executing program 1 (id=1789): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 2.773698526s ago: executing program 4 (id=1790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, 0x0, 0x25, 0x5, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=@get={0xe0, 0x13, 0x1, 0x70bd28, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x1400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084) 2.041341319s ago: executing program 2 (id=1791): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x18, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@local, 0x18, r5}) 1.311750845s ago: executing program 1 (id=1792): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 1.311208241s ago: executing program 3 (id=1793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 570.369002ms ago: executing program 3 (id=1794): openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000020000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 557.450113ms ago: executing program 2 (id=1795): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000100)="05", 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="47c09d9d82b4a4d76f125a47810000000000000000000000000000000000000000298d5d3842e25c4b8f29eb7d149725d541e749f7b9ff5da0bfbb8df9cda9f97ebbdf82f023b87a284125575a619d6dae10f1ed70422de4c13f1032f1872cf9baeca962440d7aa5f8e8e96783bcc699652ef963896cf2b2bd7ff7abdecc01ee6772a4a7e5e27c1f55f9ba95fbc636342bd9334ccd40e7a8e1d3da8b8e25cf05adb9907ea68591004574a9c84d216e0ac4102d5433d51eb9e67634b400"/202, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) r5 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) copy_file_range(r1, &(0x7f00000000c0)=0x924b, r4, &(0x7f0000000280)=0x5, 0x48, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) write$char_usb(r1, &(0x7f0000000bc0), 0x0) syz_usb_disconnect(r0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0xffffffffffffff00, 0x28080) 67.479397ms ago: executing program 0 (id=1796): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec5617503"], 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 1 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/notes', 0x80240, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): 220.285519][ T30] audit: type=1400 audit(1766893276.360:405): avc: denied { write } for pid=7818 comm="syz.1.525" path="socket:[17053]" dev="sockfs" ino=17053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.285839][ T7819] Bluetooth: MGMT ver 1.23 [ 220.354542][ T3445] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.396056][ T3445] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.391800][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'. [ 223.757407][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 223.964249][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.981256][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 223.994441][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 1 [ 224.003802][ T9] usb 4-1: config 0 has an invalid interface number: 30 but max is 1 [ 224.020758][ T9] usb 4-1: config 0 has no interface number 0 [ 224.029108][ T9] usb 4-1: config 0 has no interface number 1 [ 224.048100][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 224.056920][ T9] usb 4-1: config 0 interface 30 has no altsetting 0 [ 224.083139][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=31.1b [ 224.109229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.125290][ T9] usb 4-1: Manufacturer:   [ 224.138423][ T9] usb 4-1: SerialNumber: 뉚池ꦚ냹㗑웤큮調鏥猪솔쵏 [ 224.168277][ T9] usb 4-1: config 0 descriptor?? [ 225.559572][ T9] uvcvideo 4-1:0.89: Found UVC 0.00 device (045e:0721) [ 225.577379][ T9] uvcvideo 4-1:0.89: No valid video chain found. [ 225.591433][ T9] usb 4-1: USB disconnect, device number 5 [ 228.543193][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 228.747372][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 228.754823][ T5891] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.765600][ T5891] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 228.799837][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.017817][ T5891] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 229.045207][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.079368][ T5891] usb 5-1: config 0 descriptor?? [ 229.627501][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.954603][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 229.968854][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.994373][ T9] usb 2-1: config 179 has no interface number 0 [ 230.004768][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 230.080216][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 230.092006][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.107200][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 230.119976][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.133292][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 230.142397][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.254827][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.035945][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 231.201137][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.210252][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.374881][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 231.387789][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 231.445356][ T6838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 232.481141][ T5891] usb 5-1: USB disconnect, device number 6 [ 233.261166][ T7366] usb 2-1: USB disconnect, device number 6 [ 233.267410][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 233.276899][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 233.452634][ T6838] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 233.481304][ T6838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.526502][ T7952] dvmrp6: entered allmulticast mode [ 233.537243][ T6838] usb 4-1: Product: syz [ 233.543160][ T6838] usb 4-1: Manufacturer: syz [ 233.550508][ T6838] usb 4-1: SerialNumber: syz [ 233.563176][ T7956] batadv_slave_0: entered promiscuous mode [ 233.572127][ T7956] batman_adv: batadv0: Adding interface: macsec1 [ 233.578647][ T7956] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.605089][ T7956] batman_adv: batadv0: Interface activated: macsec1 [ 234.017044][ T30] audit: type=1400 audit(1766893290.090:406): avc: denied { getopt } for pid=7960 comm="syz.0.562" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.132423][ T7967] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 234.182817][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 234.217474][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 234.568375][ T7978] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 235.069927][ T7981] syzkaller0: entered promiscuous mode [ 235.082702][ T7981] syzkaller0: entered allmulticast mode [ 235.747762][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 236.540562][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 236.558709][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 236.579589][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 236.629188][ T6838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.659854][ T6838] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 236.693399][ T6838] usb 4-1: USB disconnect, device number 6 [ 237.707639][ T8008] xt_hashlimit: max too large, truncated to 1048576 [ 237.715271][ T8008] No such timeout policy "syz1" [ 238.364365][ T30] audit: type=1400 audit(1766893294.440:407): avc: denied { ioctl } for pid=8020 comm="syz.2.580" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 238.647542][ T30] audit: type=1400 audit(1766893294.730:408): avc: denied { write } for pid=8012 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.960389][ T8046] netlink: zone id is out of range [ 240.965772][ T8046] netlink: zone id is out of range [ 240.971355][ T8046] netlink: zone id is out of range [ 240.981483][ T8046] netlink: zone id is out of range [ 240.991942][ T8046] netlink: zone id is out of range [ 241.020280][ T8046] netlink: zone id is out of range [ 241.086557][ T30] audit: type=1400 audit(1766893297.150:409): avc: denied { setopt } for pid=8044 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.086800][ T8046] netlink: zone id is out of range [ 241.124666][ T8046] netlink: zone id is out of range [ 241.162117][ T8046] netlink: zone id is out of range [ 241.167762][ T8046] netlink: zone id is out of range [ 241.212300][ T8043] sg_write: process 415 (syz.2.586) changed security contexts after opening file descriptor, this is not allowed. [ 241.237405][ T30] audit: type=1400 audit(1766893297.280:410): avc: denied { write } for pid=8042 comm="syz.2.586" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.501823][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 241.629351][ T30] audit: type=1400 audit(1766893297.710:411): avc: denied { write } for pid=8058 comm="syz.4.590" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.800842][ T8067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.817862][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 241.937489][ T30] audit: type=1400 audit(1766893297.710:412): avc: denied { ioctl } for pid=8058 comm="syz.4.590" path="/102/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.001490][ T30] audit: type=1400 audit(1766893297.900:413): avc: denied { ioctl } for pid=8066 comm="syz.2.591" path="socket:[18889]" dev="sockfs" ino=18889 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.944035][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 244.002618][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 244.017355][ T30] audit: type=1400 audit(1766893300.070:414): avc: denied { map } for pid=8083 comm="syz.0.595" path="socket:[18917]" dev="sockfs" ino=18917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.087472][ T8086] sp0: Synchronizing with TNC [ 244.150658][ T30] audit: type=1400 audit(1766893300.130:415): avc: denied { read } for pid=8083 comm="syz.0.595" path="socket:[18917]" dev="sockfs" ino=18917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.271443][ T8084] [U] [ 244.401658][ T30] audit: type=1400 audit(1766893300.220:416): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.556981][ T30] audit: type=1400 audit(1766893300.220:417): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.765972][ T30] audit: type=1400 audit(1766893300.220:418): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.778761][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 248.967991][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 249.198830][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.217575][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.226642][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.290951][ T9] usb 3-1: config 0 descriptor?? [ 249.326761][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 249.931034][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 249.999333][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.013354][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.078577][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.148058][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.187583][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.228307][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.287649][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 250.544438][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 250.590231][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.647095][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.677888][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.732757][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.750366][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.774733][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.803187][ T9] pwc: Registered as video103. [ 250.831176][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 250.885316][ T9] usb 3-1: USB disconnect, device number 11 [ 252.533398][ T5815] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.852953][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 253.265630][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.274189][ T5815] usb 3-1: config 0 has no interface number 0 [ 253.286818][ T5815] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.335219][ T5815] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.389705][ T5815] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 253.497357][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.554160][ T5815] usb 3-1: config 0 descriptor?? [ 253.886266][ T8165] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 254.065554][ T8183] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 254.161383][ T8165] team0: Port device dummy0 added [ 254.698557][ T8183] team0: Port device dummy0 removed [ 254.726691][ T8183] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 254.879542][ T8165] net_ratelimit: 5 callbacks suppressed [ 254.879556][ T8165] openvswitch: netlink: Key type 4127 is out of range max 32 [ 254.901773][ T5815] uclogic 0003:28BD:0071.0005: pen parameters not found [ 254.909239][ T5815] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 255.216414][ T5815] usb 3-1: USB disconnect, device number 12 [ 255.271954][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.285274][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.628652][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 255.949611][ T8211] bridge1: port 1(veth3) entered blocking state [ 255.959396][ T8213] netlink: 'syz.2.635': attribute type 10 has an invalid length. [ 255.967113][ T8213] netlink: 55 bytes leftover after parsing attributes in process `syz.2.635'. [ 255.998779][ T8211] bridge1: port 1(veth3) entered disabled state [ 256.005225][ T8211] veth3: entered allmulticast mode [ 256.050205][ T8211] veth3: entered promiscuous mode [ 256.104238][ T8217] netlink: 'syz.0.636': attribute type 39 has an invalid length. [ 256.109697][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 256.179155][ T8219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.627814][ T7366] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.789547][ T7366] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 257.214518][ T7366] usb 5-1: config 0 has no interface number 0 [ 257.220816][ T7366] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 257.229910][ T7366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.255515][ T7366] usb 5-1: config 0 descriptor?? [ 257.526629][ T5813] Bluetooth: hci1: adv larger than maximum supported [ 257.526671][ T5813] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 257.534697][ T5813] Bluetooth: hci1: Malformed LE Event: 0x0d [ 257.547972][ T7366] usb 5-1: string descriptor 0 read error: -71 [ 257.548918][ T7366] usb-storage 5-1:0.168: USB Mass Storage device detected [ 258.020547][ T7366] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 258.140056][ T7366] usb 5-1: USB disconnect, device number 7 [ 258.643558][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 258.643574][ T30] audit: type=1400 audit(1766893314.720:422): avc: denied { ioctl } for pid=8263 comm="syz.3.649" path="socket:[19628]" dev="sockfs" ino=19628 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 258.679683][ T8264] syzkaller0: entered promiscuous mode [ 258.685444][ T8264] syzkaller0: entered allmulticast mode [ 259.916355][ T30] audit: type=1400 audit(1766893315.990:423): avc: denied { ioctl } for pid=8286 comm="syz.1.656" path="socket:[19255]" dev="sockfs" ino=19255 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.494711][ T8317] set match dimension is over the limit! [ 263.823712][ T8334] tipc: Failed to remove unknown binding: 66,1,1/0:1627789200/1627789202 [ 263.832324][ T8334] tipc: Failed to remove unknown binding: 66,1,1/0:1627789200/1627789202 [ 264.111548][ T7366] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.827506][ T7366] usb 4-1: Using ep0 maxpacket: 8 [ 265.018495][ T7366] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 265.082987][ T7366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.155170][ T7366] usb 4-1: Product: syz [ 265.218234][ T7366] usb 4-1: Manufacturer: syz [ 265.249179][ T7366] usb 4-1: SerialNumber: syz [ 265.255334][ T7366] usb 4-1: config 0 descriptor?? [ 265.630774][ T7366] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 265.666026][ T7366] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 265.906848][ T7366] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 265.938630][ T7366] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 265.975731][ T7366] usb 4-1: USB disconnect, device number 7 [ 266.234779][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 267.332215][ T8369] tipc: Started in network mode [ 267.337720][ T8369] tipc: Node identity 4, cluster identity 4711 [ 267.353627][ T8369] tipc: Node number set to 4 [ 268.333312][ T8398] xt_bpf: check failed: parse error [ 269.942387][ T8418] syzkaller0: entered promiscuous mode [ 270.059047][ T8418] syzkaller0: entered allmulticast mode [ 270.668254][ T30] audit: type=1400 audit(1766893582.748:424): avc: denied { read write } for pid=8426 comm="syz.4.697" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 270.742026][ T30] audit: type=1400 audit(1766893582.748:425): avc: denied { open } for pid=8426 comm="syz.4.697" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 274.354948][ T8462] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 274.748793][ T8462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.895275][ T8468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.924395][ T8468] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.991831][ T8468] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 275.055045][ T8471] ip6erspan0: entered promiscuous mode [ 275.081684][ T8471] bond1: (slave ip6erspan0): making interface the new active one [ 275.103744][ T30] audit: type=1400 audit(1766893587.178:426): avc: denied { setopt } for pid=8473 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 275.189127][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 275.199033][ T8471] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 275.236366][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 275.238102][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 275.277543][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.419647][ T8480] bond1: (slave bond0): Enslaving as an active interface with an up link [ 275.429746][ T8477] bond1: option mode: unable to set because the bond device has slaves [ 275.692436][ T30] audit: type=1400 audit(1766893587.628:427): avc: denied { setopt } for pid=8485 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.439696][ T30] audit: type=1400 audit(1766893589.518:428): avc: denied { read append } for pid=8504 comm="syz.1.720" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 277.557390][ T30] audit: type=1400 audit(1766893589.548:429): avc: denied { open } for pid=8504 comm="syz.1.720" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 277.666621][ T30] audit: type=1400 audit(1766893589.548:430): avc: denied { ioctl } for pid=8504 comm="syz.1.720" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 277.705756][ T8508] netlink: 140 bytes leftover after parsing attributes in process `syz.0.722'. [ 278.277548][ T30] audit: type=1400 audit(1766893590.328:431): avc: denied { connect } for pid=8501 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.486589][ T8545] bridge2: entered promiscuous mode [ 280.031154][ T8545] bridge2: entered allmulticast mode [ 280.060546][ T8545] team0: Port device bridge2 added [ 280.071583][ T8548] bridge0: port 3(team0) entered blocking state [ 280.080967][ T8548] bridge0: port 3(team0) entered disabled state [ 280.118496][ T8548] team0: entered allmulticast mode [ 280.144563][ T8548] team_slave_0: entered allmulticast mode [ 280.167493][ T8548] team_slave_1: entered allmulticast mode [ 280.183268][ T8548] team0: entered promiscuous mode [ 280.188570][ T8548] team_slave_0: entered promiscuous mode [ 280.194500][ T8548] team_slave_1: entered promiscuous mode [ 280.245586][ T8548] bridge0: port 3(team0) entered blocking state [ 280.252395][ T8548] bridge0: port 3(team0) entered forwarding state [ 280.834830][ T5815] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 281.081831][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.102411][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.112213][ T5815] usb 2-1: Product: syz [ 281.116434][ T5815] usb 2-1: Manufacturer: syz [ 281.121186][ T30] audit: type=1400 audit(1766893593.188:432): avc: denied { create } for pid=8556 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 281.147413][ T5815] usb 2-1: SerialNumber: syz [ 281.154753][ T5815] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 281.186728][ T30] audit: type=1400 audit(1766893593.198:433): avc: denied { ioctl } for pid=8556 comm="syz.2.732" path="socket:[20854]" dev="sockfs" ino=20854 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 281.219892][ T30] audit: type=1400 audit(1766893593.258:434): avc: denied { firmware_load } for pid=7366 comm="kworker/1:9" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 281.253220][ T7366] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.405835][ T7366] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 282.629903][ T7366] ath9k_htc: Failed to initialize the device [ 283.343611][ T7366] usb 2-1: ath9k_htc: USB layer deinitialized [ 283.404153][ T5815] usb 2-1: USB disconnect, device number 7 [ 285.103544][ T8590] xt_cgroup: invalid path, errno=-2 [ 286.189900][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.745'. [ 287.465057][ T8623] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 287.540557][ T8625] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 287.553622][ T8625] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 288.653683][ T30] audit: type=1400 audit(1766893600.728:435): avc: denied { create } for pid=8633 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.809776][ T30] audit: type=1400 audit(1766893600.848:436): avc: denied { connect } for pid=8633 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.883994][ T30] audit: type=1400 audit(1766893600.848:437): avc: denied { write } for pid=8633 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.149933][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 290.284252][ T8649] bridge0: port 1(veth5) entered blocking state [ 291.270121][ T8649] bridge0: port 1(veth5) entered disabled state [ 291.276830][ T8649] veth5: entered allmulticast mode [ 291.285654][ T30] audit: type=1400 audit(1766893603.238:438): avc: denied { node_bind } for pid=8656 comm="syz.3.758" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 291.288728][ T8649] veth5: entered promiscuous mode [ 292.351161][ T8653] bridge0: port 2(veth7) entered blocking state [ 292.352726][ T3939] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.373621][ T3939] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.381712][ T8653] bridge0: port 2(veth7) entered disabled state [ 292.898648][ T8653] veth7: entered allmulticast mode [ 292.933390][ T8653] veth7: entered promiscuous mode [ 293.069634][ T30] audit: type=1400 audit(1766893605.148:439): avc: denied { relabelfrom } for pid=8681 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 293.117353][ T30] audit: type=1400 audit(1766893605.168:440): avc: denied { relabelto } for pid=8681 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 294.387942][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 294.395154][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.868350][ T5815] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 294.878099][ T30] audit: type=1400 audit(1766893606.958:441): avc: denied { write } for pid=8708 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 295.168846][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.195555][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.215631][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.239463][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.254795][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.270769][ T5815] usb 4-1: config 0 descriptor?? [ 295.604970][ T8718] netlink: 'syz.4.772': attribute type 12 has an invalid length. [ 295.930951][ T5815] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 296.646031][ T8733] netlink: 140 bytes leftover after parsing attributes in process `syz.3.769'. [ 296.667095][ T8733] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 296.698052][ T8733] CIFS mount error: No usable UNC path provided in device string! [ 296.698052][ T8733] [ 296.768619][ T8738] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 296.793149][ T8738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.804905][ T8733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.858432][ T5815] usb 4-1: USB disconnect, device number 8 [ 296.885948][ T8738] bond3: (slave veth5): Enslaving as an active interface with a down link [ 296.919646][ T8741] bond3: (slave dummy0): making interface the new active one [ 297.008351][ T8741] dummy0: entered promiscuous mode [ 297.057780][ T8741] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 297.081419][ T8738] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 297.089754][ T8738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.777'. [ 297.116153][ T8738] bond3: (slave dummy0): Releasing active interface [ 298.448426][ T6838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 298.708984][ T6838] usb 5-1: Using ep0 maxpacket: 32 [ 298.812408][ T6838] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 298.822512][ T6838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.830532][ T6838] usb 5-1: Product: syz [ 298.834660][ T6838] usb 5-1: Manufacturer: syz [ 298.847502][ T6838] usb 5-1: SerialNumber: syz [ 298.882061][ T6838] usb 5-1: config 0 descriptor?? [ 298.901618][ T6838] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 298.925873][ T6838] dvb-usb: bulk message failed: -22 (2/0) [ 298.953561][ T6838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.980463][ T6838] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 298.997012][ T6838] usb 5-1: media controller created [ 299.133738][ T8758] cxusb: i2c wr: len=79 is too big! [ 299.133738][ T8758] [ 299.142379][ T6838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.163146][ T6838] usb 5-1: selecting invalid altsetting 7 [ 299.577042][ T6838] cxusb: set interface failed [ 299.581851][ T6838] dvb-usb: bulk message failed: -22 (1/0) [ 299.605336][ T30] audit: type=1400 audit(1766893611.298:442): avc: denied { connect } for pid=8775 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.625879][ T30] audit: type=1400 audit(1766893611.298:443): avc: denied { write } for pid=8775 comm="syz.2.786" laddr=fe80::906a:69ff:fef4:9cf7 lport=42988 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.729777][ T8782] syzkaller1: entered promiscuous mode [ 299.735331][ T8782] syzkaller1: entered allmulticast mode [ 299.802948][ T6838] DVB: Unable to find symbol lgdt330x_attach() [ 300.000514][ T6838] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 300.018062][ T8789] syzkaller0: entered promiscuous mode [ 300.033747][ T8789] syzkaller0: entered allmulticast mode [ 300.083087][ T6838] rc_core: IR keymap rc-dvico-portable not found [ 300.094363][ T6838] Registered IR keymap rc-empty [ 300.134606][ T6838] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 300.186909][ T6838] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 300.234330][ T30] audit: type=1400 audit(1766893612.308:444): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=3323 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.262781][ T6838] dvb-usb: schedule remote query interval to 100 msecs. [ 300.312490][ T6838] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 300.315463][ T30] audit: type=1400 audit(1766893612.338:445): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3323 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.422824][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 300.504511][ T30] audit: type=1400 audit(1766893612.338:446): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3323 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.584343][ T6838] dvb-usb: bulk message failed: -22 (1/0) [ 300.664428][ T30] audit: type=1400 audit(1766893612.408:447): avc: denied { bind } for pid=8792 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.727472][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 300.837408][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 301.415633][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 301.451283][ T8823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.800'. [ 301.461738][ T8823] netlink: 59 bytes leftover after parsing attributes in process `syz.3.800'. [ 301.479348][ T8823] netlink: 59 bytes leftover after parsing attributes in process `syz.3.800'. [ 301.567368][ T6838] dvb-usb: bulk message failed: -22 (1/0) [ 301.677358][ T6838] dvb-usb: bulk message failed: -22 (1/0) [ 301.829784][ T7366] usb 5-1: USB disconnect, device number 8 [ 302.460144][ T7366] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 302.471097][ T8837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.804'. [ 304.312066][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.319444][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.081659][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.132535][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.571189][ T3939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.597667][ T3939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.616872][ T3939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.652001][ T3939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.962231][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 307.081310][ T8885] geneve2: entered promiscuous mode [ 307.086568][ T8885] geneve2: entered allmulticast mode [ 307.130502][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.262625][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.296780][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.325296][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.978711][ T9] IPVS: starting estimator thread 0... [ 309.087440][ T8911] IPVS: using max 43 ests per chain, 103200 per kthread [ 312.368581][ T8945] bridge1: entered promiscuous mode [ 312.379816][ T8945] bridge1: entered allmulticast mode [ 312.393926][ T8945] team0: Port device bridge1 added [ 312.543021][ T8945] bridge0: port 3(team0) entered blocking state [ 312.571402][ T8945] bridge0: port 3(team0) entered disabled state [ 312.587521][ T8945] team0: entered allmulticast mode [ 312.607383][ T8945] team_slave_0: entered allmulticast mode [ 312.613151][ T8945] team_slave_1: entered allmulticast mode [ 312.646462][ T8945] team0: entered promiscuous mode [ 312.685316][ T8945] team_slave_0: entered promiscuous mode [ 312.721841][ T8945] team_slave_1: entered promiscuous mode [ 312.730357][ T8951] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 312.789135][ T8951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.822933][ T8954] bond1: (slave geneve2): making interface the new active one [ 312.858413][ T8954] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 312.867202][ T3445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.876622][ T3445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.877372][ T6838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 312.926371][ T3445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.966486][ T3445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.013442][ T8951] bond1: entered promiscuous mode [ 313.029937][ T8951] geneve2: entered promiscuous mode [ 313.494504][ T6838] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.503771][ T6838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.514511][ T6838] usb 1-1: Product: syz [ 313.533262][ T6838] usb 1-1: Manufacturer: syz [ 313.547815][ T6838] usb 1-1: SerialNumber: syz [ 313.570590][ T6838] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.594162][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.303464][ T7366] usb 1-1: USB disconnect, device number 4 [ 314.627420][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 314.646601][ T9] ath9k_htc: Failed to initialize the device [ 314.681525][ T7366] usb 1-1: ath9k_htc: USB layer deinitialized [ 314.850225][ T30] audit: type=1400 audit(1766893626.928:448): avc: denied { create } for pid=8974 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.310373][ T30] audit: type=1400 audit(1766893627.388:449): avc: denied { connect } for pid=8974 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.947072][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.981872][ T8984] bond0: (slave rose0): Enslaving as an active interface with an up link [ 316.010874][ T30] audit: type=1400 audit(1766893627.538:450): avc: denied { write } for pid=8974 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.714245][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.721974][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.010671][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 318.203662][ T9015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.213888][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 318.262906][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.308315][ T9019] bond2: (slave bond0): making interface the new active one [ 318.325491][ T9019] bond2: (slave bond0): Enslaving as an active interface with an up link [ 318.868398][ T30] audit: type=1400 audit(1766893630.948:451): avc: denied { ioctl } for pid=9022 comm="syz.3.852" path="socket:[22107]" dev="sockfs" ino=22107 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 318.923867][ T9031] netlink: 'syz.3.852': attribute type 10 has an invalid length. [ 319.020119][ T30] audit: type=1400 audit(1766893631.098:452): avc: denied { write } for pid=9033 comm="syz.3.855" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 319.133854][ T9032] syzkaller0: entered promiscuous mode [ 319.165787][ T9032] syzkaller0: entered allmulticast mode [ 319.174922][ T30] audit: type=1400 audit(1766893631.098:453): avc: denied { open } for pid=9033 comm="syz.3.855" path="/176/file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 324.667643][ T7366] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.247446][ T7366] usb 5-1: Using ep0 maxpacket: 8 [ 325.460831][ T7366] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 325.477504][ T7366] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.491793][ T7366] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.502039][ T7366] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.512613][ T7366] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.526261][ T7366] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.535570][ T7366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.773445][ T7366] usb 5-1: usb_control_msg returned -32 [ 325.782341][ T7366] usbtmc 5-1:16.0: can't read capabilities [ 327.985824][ T6244] usb 5-1: USB disconnect, device number 9 [ 328.219471][ T9129] netlink: 'syz.3.879': attribute type 4 has an invalid length. [ 328.902615][ T6244] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 329.098717][ T6244] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.111733][ T6244] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.139788][ T6244] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.327379][ T6244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.809640][ T9124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.825378][ T6244] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.660523][ T6838] usb 5-1: USB disconnect, device number 10 [ 330.759892][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 330.793979][ T30] audit: type=1400 audit(1766893642.868:454): avc: denied { read } for pid=9153 comm="syz.0.886" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 330.846702][ T30] audit: type=1400 audit(1766893642.868:455): avc: denied { open } for pid=9153 comm="syz.0.886" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 330.899470][ T30] audit: type=1400 audit(1766893642.898:456): avc: denied { append } for pid=9153 comm="syz.0.886" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 331.047482][ T9166] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 331.063031][ T9166] libceph: resolve '400' (ret=-3): failed [ 331.304567][ T30] audit: type=1400 audit(1766893643.368:457): avc: denied { write } for pid=9168 comm="syz.1.891" name="xfrm_stat" dev="proc" ino=4026533297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 332.059068][ T9124] syz.4.878 (9124) used greatest stack depth: 19496 bytes left [ 332.538559][ T9183] gfs2: gfs2 mount does not exist [ 333.271570][ T9189] lo speed is unknown, defaulting to 1000 [ 333.278262][ T9189] lo speed is unknown, defaulting to 1000 [ 333.293781][ T9189] lo speed is unknown, defaulting to 1000 [ 333.326899][ T9189] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 333.382809][ T9189] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 333.480738][ T30] audit: type=1400 audit(1766893645.508:458): avc: denied { module_request } for pid=9186 comm="syz.4.896" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 333.577327][ T9189] lo speed is unknown, defaulting to 1000 [ 333.593371][ T9189] lo speed is unknown, defaulting to 1000 [ 333.609296][ T9189] lo speed is unknown, defaulting to 1000 [ 333.625647][ T9189] lo speed is unknown, defaulting to 1000 [ 333.643096][ T9189] lo speed is unknown, defaulting to 1000 [ 334.234916][ T9196] xt_socket: unknown flags 0x50 [ 336.330092][ T6838] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 336.488568][ T6838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.502945][ T6838] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 336.537448][ T6838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.575843][ T6838] usb 4-1: config 0 descriptor?? [ 337.320058][ T6838] wacom 0003:056A:0000.0007: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 337.347875][ T6838] wacom 0003:056A:0000.0007: hidraw0: USB HID v0.07 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 337.353131][ T30] audit: type=1400 audit(1766893649.428:459): avc: denied { ioctl } for pid=9215 comm="syz.3.905" path="socket:[23331]" dev="sockfs" ino=23331 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.437646][ T6838] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0007/input/input11 [ 337.514596][ T6838] usb 4-1: USB disconnect, device number 9 [ 337.810812][ T9237] m1Ie5n: entered promiscuous mode [ 338.076513][ T30] audit: type=1400 audit(1766893650.128:460): avc: denied { name_connect } for pid=9240 comm="syz.0.911" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 338.742458][ T9251] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 339.599209][ T30] audit: type=1400 audit(1766893651.588:461): avc: denied { ioctl } for pid=9253 comm="syz.1.915" path="socket:[23600]" dev="sockfs" ino=23600 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 340.237004][ T9264] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 340.940379][ T9261] overlayfs: statfs failed on './file0' [ 341.432298][ T30] audit: type=1400 audit(1766893653.048:462): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 342.509642][ T9302] CIFS: Unable to determine destination address [ 342.522313][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 342.733690][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 343.202134][ T9306] bridge1: entered allmulticast mode [ 343.247978][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 343.970264][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 343.980154][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 344.183669][ T9318] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 344.636486][ T4142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.645468][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 344.656642][ T4142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.690569][ T4142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.742185][ T4142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.762920][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 346.607888][ T9341] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 350.379805][ T9380] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 351.054723][ T9400] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 351.310578][ T9406] netlink: 'syz.2.953': attribute type 4 has an invalid length. [ 351.742241][ T9400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.058347][ T9415] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 352.066073][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.954'. [ 352.456969][ T9412] bond2: (slave veth7): Enslaving as an active interface with a down link [ 352.483920][ T9415] dummy0: entered promiscuous mode [ 353.219053][ T9396] kexec: Could not allocate control_code_buffer [ 353.331856][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.959'. [ 353.508120][ T9429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9429 comm=syz.2.959 [ 356.712394][ T30] audit: type=1400 audit(1766893668.788:463): avc: denied { read } for pid=9459 comm="syz.1.968" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.809952][ T30] audit: type=1400 audit(1766893668.838:464): avc: denied { open } for pid=9459 comm="syz.1.968" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.872161][ T30] audit: type=1400 audit(1766893668.848:465): avc: denied { ioctl } for pid=9459 comm="syz.1.968" path="socket:[24649]" dev="sockfs" ino=24649 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 356.931685][ T30] audit: type=1400 audit(1766893668.898:466): avc: denied { ioctl } for pid=9459 comm="syz.1.968" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 357.115511][ T30] audit: type=1400 audit(1766893669.188:467): avc: denied { nlmsg_read } for pid=9462 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.097414][ T5815] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 358.284268][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.374108][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.416695][ T5815] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 358.484117][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.517916][ T5815] usb 5-1: config 0 descriptor?? [ 359.444482][ T5815] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 360.602945][ T5815] usb 5-1: USB disconnect, device number 11 [ 361.112694][ T9506] befs: (nullb0): invalid magic header [ 361.123820][ T30] audit: type=1400 audit(1766893673.178:468): avc: denied { mounton } for pid=9503 comm="syz.3.979" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 362.256095][ T30] audit: type=1400 audit(1766893674.328:469): avc: denied { setopt } for pid=9516 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.290210][ T9517] input: syz1 as /devices/virtual/input/input14 [ 362.339667][ T9515] Bluetooth: MGMT ver 1.23 [ 362.550392][ T9525] syzkaller0: entered promiscuous mode [ 362.555898][ T9525] syzkaller0: entered allmulticast mode [ 363.757346][ T5921] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.907415][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 363.914414][ T5921] usb 2-1: config 0 has no interfaces? [ 363.921948][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.960766][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.991146][ T5921] usb 2-1: Product: syz [ 364.007481][ T5921] usb 2-1: Manufacturer: syz [ 364.023701][ T5921] usb 2-1: SerialNumber: syz [ 364.056317][ T5921] usb 2-1: config 0 descriptor?? [ 364.436788][ T9573] netlink: 'syz.4.995': attribute type 21 has an invalid length. [ 364.524408][ T5921] usb 2-1: USB disconnect, device number 8 [ 365.208620][ T9564] tipc: Enabling of bearer rejected, failed to enable media [ 365.231727][ T9573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.995'. [ 365.441508][ T9580] rdma_op ffff888035cc19f0 conn xmit_rdma 0000000000000000 [ 367.635026][ T9604] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 367.892283][ T30] audit: type=1400 audit(1766893679.728:470): avc: denied { relabelto } for pid=9597 comm="syz.4.1001" name="169" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 368.395283][ T30] audit: type=1400 audit(1766893679.728:471): avc: denied { associate } for pid=9597 comm="syz.4.1001" name="169" dev="tmpfs" ino=907 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 368.432804][ T30] audit: type=1400 audit(1766893679.728:472): avc: denied { mounton } for pid=9597 comm="syz.4.1001" path="/169" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 368.460329][ T30] audit: type=1400 audit(1766893679.738:473): avc: denied { mount } for pid=9597 comm="syz.4.1001" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 369.503445][ T30] audit: type=1400 audit(1766893680.318:474): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 369.524406][ T30] audit: type=1400 audit(1766893680.388:475): avc: denied { remove_name } for pid=5811 comm="syz-executor" name="binderfs" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 369.860173][ T30] audit: type=1400 audit(1766893680.388:476): avc: denied { rmdir } for pid=5811 comm="syz-executor" name="169" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 369.914668][ T6838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.047566][ T30] audit: type=1326 audit(1766893680.938:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.2.998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff5f38f749 code=0x0 [ 370.090031][ T6838] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.106194][ T6838] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.234181][ T6838] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.292940][ T6838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.853415][ T9611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.993331][ T6838] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.066098][ T9631] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 371.238153][ T9631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.478564][ T9641] netlink: 'syz.2.1010': attribute type 10 has an invalid length. [ 371.564607][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'. [ 371.610721][ T9641] dummy0: entered promiscuous mode [ 371.643437][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 371.650504][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 371.660786][ T9641] bond0: (slave dummy0): Releasing backup interface [ 371.667371][ T9609] ceph: No mds server is up or the cluster is laggy [ 371.932187][ T9635] bond1: (slave veth11): Enslaving as an active interface with a down link [ 371.968339][ T9637] dummy0: left promiscuous mode [ 371.999770][ T9637] bond1: (slave dummy0): making interface the new active one [ 372.028671][ T9637] dummy0: entered promiscuous mode [ 372.034253][ T9637] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 372.360242][ T5815] usb 2-1: USB disconnect, device number 9 [ 372.999612][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 373.830124][ T9671] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 373.952483][ T9671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.994556][ T9673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.182224][ T9673] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.288609][ T9684] xt_socket: unknown flags 0x50 [ 375.111480][ T9673] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 375.191529][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1018'. [ 375.693579][ T9686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.887645][ T7366] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 376.270424][ T30] audit: type=1400 audit(1766893688.348:478): avc: denied { read } for pid=9696 comm="syz.0.1027" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.293078][ T7366] usb 4-1: Using ep0 maxpacket: 8 [ 376.299041][ T30] audit: type=1400 audit(1766893688.368:479): avc: denied { open } for pid=9696 comm="syz.0.1027" path="/217/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.308033][ T9702] overlayfs: failed lookup in lower (newroot/208, name='bus', err=-40): overlapping layers [ 376.325249][ T7366] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 376.367821][ T30] audit: type=1400 audit(1766893688.408:480): avc: denied { ioctl } for pid=9696 comm="syz.0.1027" path="/217/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.398569][ T7366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.406588][ T7366] usb 4-1: Product: syz [ 376.411457][ T7366] usb 4-1: Manufacturer: syz [ 376.416102][ T7366] usb 4-1: SerialNumber: syz [ 376.455057][ T7366] usb 4-1: config 0 descriptor?? [ 376.587900][ T7366] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 378.137826][ T7366] gspca_sonixj: reg_w1 err -110 [ 378.161124][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.167531][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.287685][ T7366] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 378.437466][ T30] audit: type=1400 audit(1766893690.508:481): avc: denied { read } for pid=9726 comm="syz.4.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.176657][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 379.204841][ T7366] usb 4-1: USB disconnect, device number 10 [ 379.878379][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 379.917120][ T9732] xfrm1: entered promiscuous mode [ 379.957625][ T9732] xfrm1: entered allmulticast mode [ 380.258828][ T9748] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 380.410682][ T9753] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1042'. [ 380.799135][ T9754] binder_alloc: 9746: binder_alloc_buf, no vma [ 380.834692][ T9748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.931412][ T9748] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 380.940160][ T9751] bond2: (slave veth3): Enslaving as an active interface with a down link [ 380.965719][ T9748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'. [ 381.006635][ T9755] bond2: (slave dummy0): making interface the new active one [ 381.144140][ T9755] dummy0: entered promiscuous mode [ 381.189102][ T9755] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 381.236327][ T9757] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.253577][ T9748] bond2: (slave dummy0): Releasing active interface [ 381.302029][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 381.366547][ T9764] tipc: Enabling of bearer rejected, failed to enable media [ 381.685322][ T30] audit: type=1400 audit(1766893693.738:482): avc: denied { ioctl } for pid=9776 comm="syz.1.1049" path="socket:[25127]" dev="sockfs" ino=25127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.727773][ T7366] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.973975][ T7366] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.103625][ T7366] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.339899][ T7366] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.349329][ T7366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.375061][ T9770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 383.367934][ T7366] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.413078][ T30] audit: type=1400 audit(1766893696.478:483): avc: denied { getopt } for pid=9797 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.856844][ T30] audit: type=1326 audit(1766893696.908:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.329382][ T6244] usb 1-1: USB disconnect, device number 5 [ 385.349816][ T30] audit: type=1326 audit(1766893696.918:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.494675][ T30] audit: type=1326 audit(1766893696.918:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.522498][ T30] audit: type=1326 audit(1766893696.918:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.703329][ T30] audit: type=1326 audit(1766893696.918:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.726736][ T30] audit: type=1326 audit(1766893696.928:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 385.751771][ T30] audit: type=1326 audit(1766893696.928:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 386.256965][ T30] audit: type=1326 audit(1766893696.928:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ced8f749 code=0x7ffc0000 [ 386.350594][ T6244] IPVS: starting estimator thread 0... [ 386.702917][ T9829] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1062'. [ 387.147330][ T9820] IPVS: using max 48 ests per chain, 115200 per kthread [ 387.823423][ T30] audit: type=1400 audit(1766893699.898:492): avc: denied { write } for pid=9843 comm="syz.2.1067" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 387.958454][ T8666] dummy0: left promiscuous mode [ 389.567720][ T30] audit: type=1400 audit(1766893701.638:493): avc: denied { name_bind } for pid=9864 comm="syz.4.1077" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 389.698752][ T9877] netlink: 'syz.3.1076': attribute type 17 has an invalid length. [ 389.760638][ T30] audit: type=1400 audit(1766893701.838:494): avc: denied { setopt } for pid=9867 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.611779][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.621640][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.713180][ T9877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.898272][ T9890] xt_SECMARK: invalid mode: 2 [ 390.919965][ T9882] : entered promiscuous mode [ 391.326501][ T9891] syzkaller0: entered promiscuous mode [ 391.347575][ T9891] syzkaller0: entered allmulticast mode [ 391.403875][ T30] audit: type=1400 audit(1766893703.478:495): avc: denied { getopt } for pid=9893 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 392.119811][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 392.186875][ T30] audit: type=1400 audit(1766893704.258:496): avc: denied { write } for pid=9900 comm="syz.1.1086" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.786247][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.811496][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.917488][ T6244] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 394.241760][ T6244] usb 5-1: Using ep0 maxpacket: 32 [ 394.258658][ T6244] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 394.266845][ T6244] usb 5-1: config 0 has no interface number 0 [ 394.273675][ T6244] usb 5-1: config 0 interface 184 has no altsetting 0 [ 394.338940][ T9930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.749004][ T6244] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 394.759130][ T6244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.767601][ T6244] usb 5-1: Product: syz [ 394.772643][ T6244] usb 5-1: Manufacturer: syz [ 394.777685][ T6244] usb 5-1: SerialNumber: syz [ 394.793174][ T6244] usb 5-1: config 0 descriptor?? [ 394.804225][ T6244] smsc75xx v1.0.0 [ 395.202368][ T9942] SELinux: Context : is not valid (left unmapped). [ 395.221326][ T30] audit: type=1400 audit(1766893707.288:497): avc: denied { relabelto } for pid=9936 comm="syz.3.1095" name="rdma.current" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 395.508167][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 395.531616][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 395.540543][ T30] audit: type=1400 audit(1766893707.288:498): avc: denied { associate } for pid=9936 comm="syz.3.1095" name="rdma.current" dev="tmpfs" ino=1231 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 395.906755][ T30] audit: type=1400 audit(1766893707.948:499): avc: denied { unlink } for pid=5820 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 396.198708][ T9949] syzkaller0: entered promiscuous mode [ 396.244531][ T9949] syzkaller0: entered allmulticast mode [ 396.270178][ T9951] kvm: pic: single mode not supported [ 396.271299][ T9949] tipc: Started in network mode [ 396.272677][ T9951] kvm: pic: single mode not supported [ 396.276801][ T9949] tipc: Node identity 72fab1f5de4a, cluster identity 4711 [ 396.282570][ T9951] kvm: pic: single mode not supported [ 396.287867][ T9949] tipc: Enabled bearer , priority 0 [ 396.309654][ T9951] kvm: pic: single mode not supported [ 396.309670][ T9951] kvm: pic: level sensitive irq not supported [ 396.315288][ T9948] tipc: Resetting bearer [ 396.318893][ T9951] kvm: pic: single mode not supported [ 396.327150][ T9951] kvm: pic: level sensitive irq not supported [ 396.339126][ T9951] kvm: pic: level sensitive irq not supported [ 396.346093][ T9948] tipc: Disabling bearer [ 396.367656][ T7366] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 396.614519][ T7366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.625647][ T7366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.638134][ T7366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.653858][ T7366] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.115096][ T7366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.154919][ T7366] usb 3-1: config 0 descriptor?? [ 397.419013][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 398.041626][ T7366] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 398.054444][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 398.065758][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 398.153188][ T6244] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 398.573642][ T6244] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 398.639772][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 398.648958][ T6244] usb 5-1: USB disconnect, device number 12 [ 399.730161][ T7366] usb 3-1: USB disconnect, device number 13 [ 399.970994][ T9992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1110'. [ 400.063043][ T9994] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 404.413043][T10028] random: crng reseeded on system resumption [ 405.036497][T10027] netlink: 'syz.0.1119': attribute type 1 has an invalid length. [ 405.298489][ T6838] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 405.679328][ T6838] usb 2-1: Using ep0 maxpacket: 32 [ 405.711130][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 405.812539][ T6838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.826668][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 405.902251][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 405.917225][ T6838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.931237][T10027] bond3: entered promiscuous mode [ 405.936269][T10027] bond3: entered allmulticast mode [ 405.951987][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 405.977833][T10027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.978358][ T6838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.008083][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.015462][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.031490][T10032] erspan1: entered allmulticast mode [ 406.037521][ T5921] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 406.091670][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.094515][T10032] bond3: (slave erspan1): making interface the new active one [ 406.115518][ T6838] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 406.127586][T10032] erspan1: entered promiscuous mode [ 406.137801][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.178708][ T6838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.200066][T10032] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 406.234790][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.301973][ T5891] hid-generic 0004:0003:0001.000A: unknown main item tag 0x0 [ 406.324330][ T5921] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 406.407441][ T6838] usb 2-1: config 0 descriptor?? [ 406.420857][ T5921] usb 1-1: config 0 has no interface number 0 [ 406.486650][ T5921] usb 1-1: config 0 interface 97 has no altsetting 0 [ 406.533867][ T5891] hid-generic 0004:0003:0001.000A: hidraw0: HID v0.05 Device [syz0] on syz1 [ 406.619855][ T5921] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=30.45 [ 406.877991][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.021978][ T5921] usb 1-1: config 0 descriptor?? [ 407.170400][ T6838] usbhid 2-1:0.0: can't add hid device: -71 [ 407.193813][ T5921] usb 1-1: can't set config #0, error -71 [ 407.209243][ T6838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 407.267610][ T5921] usb 1-1: USB disconnect, device number 6 [ 407.289596][ T6838] usb 2-1: USB disconnect, device number 10 [ 407.357870][T10047] fido_id[10047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 409.798967][ T30] audit: type=1400 audit(1766893721.528:500): avc: denied { getopt } for pid=10078 comm="syz.0.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 410.044117][T10089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1134'. [ 410.053970][T10089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1134'. [ 411.217979][T10098] tmpfs: Unknown parameter 'quotode_hardlimit' [ 414.109794][T10129] syz_tun: entered allmulticast mode [ 414.165690][T10128] syz_tun: left allmulticast mode [ 415.357949][ T6244] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 415.588189][ T6838] IPVS: starting estimator thread 0... [ 415.977586][ T6244] usb 3-1: Using ep0 maxpacket: 32 [ 415.987655][ T6244] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 415.997647][ T6244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.008922][ T6244] usb 3-1: Product: syz [ 416.019068][ T6244] usb 3-1: Manufacturer: syz [ 416.032706][T10145] IPVS: using max 77 ests per chain, 184800 per kthread [ 416.040028][ T6244] usb 3-1: SerialNumber: syz [ 416.051385][ T6244] usb 3-1: config 0 descriptor?? [ 416.069002][ T6244] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 416.076679][ T6244] dvb-usb: bulk message failed: -22 (2/0) [ 416.099223][ T6244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.123921][ T6244] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 416.132772][ T6244] usb 3-1: media controller created [ 416.152434][ T6244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.204171][ T6244] usb 3-1: selecting invalid altsetting 7 [ 416.217298][ T6244] cxusb: set interface failed [ 416.231371][ T6244] dvb-usb: bulk message failed: -22 (1/0) [ 416.286196][T10135] cxusb: i2c wr: len=79 is too big! [ 416.286196][T10135] [ 416.375079][ T6244] DVB: Unable to find symbol lgdt330x_attach() [ 416.397366][ T6244] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 416.709040][ T30] audit: type=1400 audit(1766893728.788:501): avc: denied { getopt } for pid=10148 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.227406][ T6244] rc_core: IR keymap rc-dvico-portable not found [ 417.236350][ T6244] Registered IR keymap rc-empty [ 417.275077][ T6244] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 417.534327][ T6244] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input16 [ 418.119584][ T6244] dvb-usb: schedule remote query interval to 100 msecs. [ 418.126575][ T6244] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 418.227422][ T6244] dvb-usb: bulk message failed: -22 (1/0) [ 418.245824][ T6838] usb 3-1: USB disconnect, device number 14 [ 418.536137][ T6838] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 418.670817][T10202] syzkaller0: entered promiscuous mode [ 418.816298][T10202] syzkaller0: entered allmulticast mode [ 419.842916][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 419.858020][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 419.911109][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 419.954978][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 419.968220][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 420.005147][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 420.042156][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 420.087478][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 420.125287][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 420.134897][T10206] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 421.355002][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 421.493002][ T5813] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 421.807407][ T6838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 422.314480][ T6838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.334951][ T6838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 422.380353][ T6838] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 422.410613][ T6838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.432332][ T6838] usb 5-1: Product: syz [ 422.436553][ T6838] usb 5-1: Manufacturer: syz [ 422.457339][ T6838] usb 5-1: SerialNumber: syz [ 422.490611][ T6838] usb 5-1: config 0 descriptor?? [ 422.513154][ T6838] usb 5-1: ucan: probing device on interface #0 [ 422.532796][ T6838] usb 5-1: ucan: invalid EP count (0) [ 422.540516][ T6838] usb 5-1: ucan: probe failed; try to update the device firmware [ 423.422201][T10225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.554015][T10240] vlan2: entered allmulticast mode [ 423.559739][T10240] bond_slave_1: entered allmulticast mode [ 423.566391][T10240] bond4: (slave vlan2): Opening slave failed [ 424.093882][T10239] bond4: (slave veth7): Enslaving as an active interface with a down link [ 424.146351][ T7366] usb 5-1: USB disconnect, device number 13 [ 424.267644][ T6244] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 424.952237][ T6244] usb 4-1: Using ep0 maxpacket: 32 [ 424.960213][ T30] audit: type=1400 audit(1766893736.948:502): avc: denied { setopt } for pid=10261 comm="syz.0.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 425.001273][ T6244] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 425.023443][ T6244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.280170][ T6244] usb 4-1: Product: syz [ 425.314157][ T6244] usb 4-1: Manufacturer: syz [ 425.325708][ T6244] usb 4-1: SerialNumber: syz [ 425.346030][ T6244] usb 4-1: config 0 descriptor?? [ 425.365451][ T6244] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 425.434966][ T6244] dvb-usb: bulk message failed: -22 (2/0) [ 425.445788][ T6244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 425.461260][ T6244] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 425.478043][ T6244] usb 4-1: media controller created [ 425.492825][ T6244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.677698][ T30] audit: type=1400 audit(1766893737.678:503): avc: denied { bind } for pid=10268 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 425.709155][T10270] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 425.833209][T10252] cxusb: i2c wr: len=79 is too big! [ 425.833209][T10252] [ 426.399113][ T6244] usb 4-1: selecting invalid altsetting 7 [ 426.410217][ T6244] cxusb: set interface failed [ 426.424653][ T6244] dvb-usb: bulk message failed: -22 (1/0) [ 427.098782][ T6244] DVB: Unable to find symbol lgdt330x_attach() [ 427.110211][ T6244] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 427.520532][ T30] audit: type=1400 audit(1766893739.598:504): avc: denied { create } for pid=10289 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 427.559231][ T6244] rc_core: IR keymap rc-dvico-portable not found [ 427.565594][ T6244] Registered IR keymap rc-empty [ 427.598702][ T6244] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 427.613156][ T30] audit: type=1400 audit(1766893739.618:505): avc: denied { sys_admin } for pid=10289 comm="syz.3.1176" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 427.648337][ T6244] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 427.681783][ T6244] dvb-usb: schedule remote query interval to 100 msecs. [ 427.690425][ T6244] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 427.712875][ T6244] usb 4-1: USB disconnect, device number 11 [ 427.847365][ T6838] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 428.298096][ T6838] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 428.316911][ T6244] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 428.328997][ T6838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.344822][ T6838] usb 3-1: Product: syz [ 428.363891][ T6838] usb 3-1: Manufacturer: syz [ 428.370707][ T30] audit: type=1400 audit(1766893740.448:506): avc: denied { read } for pid=10298 comm="syz.0.1178" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.381113][ T6838] usb 3-1: SerialNumber: syz [ 428.586689][T10290] overlayfs: failed to resolve './file2': -2 [ 428.745645][ T6838] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 428.745699][ T30] audit: type=1400 audit(1766893740.818:507): avc: denied { ioctl } for pid=10280 comm="syz.2.1174" path="socket:[27021]" dev="sockfs" ino=27021 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.563507][ T6838] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 429.577190][ T6838] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 429.726823][ T6838] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 430.147428][ T6838] usb 3-1: USB disconnect, device number 15 [ 430.709124][ T30] audit: type=1400 audit(1766893742.768:508): avc: denied { execute } for pid=10315 comm="syz.0.1184" path="/file1" dev="ramfs" ino=26404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 430.808780][ T30] audit: type=1400 audit(1766893742.888:509): avc: denied { setopt } for pid=10313 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 430.863140][T10326] validate_nla: 38 callbacks suppressed [ 430.863156][T10326] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 430.936152][ T30] audit: type=1400 audit(1766893742.888:510): avc: denied { mount } for pid=10319 comm="syz.3.1181" name="/" dev="autofs" ino=26407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 431.256851][ T30] audit: type=1400 audit(1766893743.328:511): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.717907][ T30] audit: type=1400 audit(1766893744.798:512): avc: denied { getopt } for pid=10349 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 432.939038][T10353] netlink: 'syz.0.1193': attribute type 11 has an invalid length. [ 435.712354][T10368] team0: Port device team_slave_0 removed [ 436.444303][ T30] audit: type=1400 audit(1766893748.518:513): avc: denied { map } for pid=10374 comm="syz.2.1200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.537371][ T30] audit: type=1400 audit(1766893748.518:514): avc: denied { execute } for pid=10374 comm="syz.2.1200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 437.230486][T10386] lo: entered allmulticast mode [ 437.235604][T10386] tunl0: entered allmulticast mode [ 437.241222][T10386] gre0: entered allmulticast mode [ 437.246428][T10386] gretap0: entered allmulticast mode [ 437.256416][T10386] erspan0: entered allmulticast mode [ 437.263224][T10386] ip_vti0: entered allmulticast mode [ 437.269738][T10386] ip6_vti0: entered allmulticast mode [ 437.281127][T10386] sit0: entered allmulticast mode [ 437.401161][T10386] ip6tnl0: entered allmulticast mode [ 437.417538][T10386] ip6gre0: entered allmulticast mode [ 437.539033][T10386] ip6gretap0: entered allmulticast mode [ 437.556923][T10386] bridge0: entered allmulticast mode [ 437.564847][T10386] bond0: entered allmulticast mode [ 438.022519][T10386] bond_slave_0: entered allmulticast mode [ 438.037885][ T30] audit: type=1400 audit(1766893750.108:515): avc: denied { read } for pid=10395 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.688533][T10386] team0: entered allmulticast mode [ 438.688548][T10386] team_slave_1: entered allmulticast mode [ 438.688621][T10386] dummy0: left promiscuous mode [ 438.688663][T10386] dummy0: entered allmulticast mode [ 438.699474][T10386] nlmon0: entered allmulticast mode [ 438.699632][T10386] caif0: entered allmulticast mode [ 438.699745][T10386] vxcan0: entered allmulticast mode [ 438.699869][T10386] vxcan1: entered allmulticast mode [ 438.699981][T10386] veth0: entered allmulticast mode [ 438.700096][T10386] veth1: entered allmulticast mode [ 438.700200][T10386] wg0: entered allmulticast mode [ 438.700322][T10386] wg1: entered allmulticast mode [ 438.700432][T10386] wg2: entered allmulticast mode [ 438.705093][T10386] veth0_to_bridge: entered allmulticast mode [ 438.705214][T10386] veth1_to_bridge: entered allmulticast mode [ 438.705327][T10386] veth0_to_bond: entered allmulticast mode [ 438.705441][T10386] veth1_to_bond: entered allmulticast mode [ 438.705554][T10386] veth1_to_team: entered allmulticast mode [ 438.705669][T10386] veth0_to_batadv: entered allmulticast mode [ 438.705731][T10386] batadv_slave_0: entered allmulticast mode [ 438.705789][T10386] veth1_to_batadv: entered allmulticast mode [ 438.705848][T10386] batadv_slave_1: entered allmulticast mode [ 438.705909][T10386] xfrm0: entered allmulticast mode [ 438.705969][T10386] veth0_to_hsr: entered allmulticast mode [ 438.706031][T10386] hsr_slave_0: entered allmulticast mode [ 438.706149][T10386] veth1_to_hsr: entered allmulticast mode [ 438.706216][T10386] hsr_slave_1: entered allmulticast mode [ 438.706287][T10386] hsr0: entered allmulticast mode [ 438.706352][T10386] veth1_virt_wifi: entered allmulticast mode [ 438.706413][T10386] veth0_virt_wifi: entered allmulticast mode [ 438.706476][T10386] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 438.706539][T10386] veth1_vlan: entered allmulticast mode [ 438.706599][T10386] veth0_vlan: entered allmulticast mode [ 438.706659][T10386] vlan0: entered allmulticast mode [ 438.706719][T10386] vlan1: entered allmulticast mode [ 438.706777][T10386] macvlan0: entered allmulticast mode [ 438.706838][T10386] macvlan1: entered allmulticast mode [ 438.706896][T10386] ipvlan0: entered allmulticast mode [ 438.706956][T10386] ipvlan1: entered allmulticast mode [ 438.707017][T10386] veth1_macvtap: entered allmulticast mode [ 438.707075][T10386] veth0_macvtap: entered allmulticast mode [ 438.707132][T10386] macvtap0: entered allmulticast mode [ 438.708932][T10386] macsec0: entered allmulticast mode [ 438.709038][T10386] geneve0: entered allmulticast mode [ 438.709147][T10386] geneve1: entered allmulticast mode [ 438.709275][T10386] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 438.709482][T10386] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 438.709604][T10386] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 438.709717][T10386] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 438.709834][T10386] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 438.709944][T10386] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 438.710140][T10386] bond1: entered allmulticast mode [ 438.710154][T10386] ip6gretap1: entered allmulticast mode [ 438.710399][T10386] bond2: left promiscuous mode [ 438.710413][T10386] bond2: entered allmulticast mode [ 438.716541][T10404] netlink: 'syz.2.1206': attribute type 2 has an invalid length. [ 439.037547][T10386] bridge1: entered allmulticast mode [ 439.038611][T10386] veth2: entered allmulticast mode [ 439.038749][T10386] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 439.044036][T10386] bond3: entered allmulticast mode [ 439.053804][T10404] netlink: 'syz.2.1206': attribute type 8 has an invalid length. [ 439.053816][T10404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'. [ 439.054581][T10386] veth4: entered allmulticast mode [ 439.054939][T10386] veth5: entered allmulticast mode [ 439.057180][T10386] geneve2: left promiscuous mode [ 439.058465][T10386] m1Ie5n: entered allmulticast mode [ 439.058547][T10386] : entered allmulticast mode [ 439.058950][T10386] bond4: entered allmulticast mode [ 439.060909][T10386] veth6: entered allmulticast mode [ 439.061145][T10386] veth7: entered allmulticast mode [ 439.063490][ T3939] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.063529][ T3939] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.063555][ T3939] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.063589][ T3939] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.214500][T10408] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 440.234165][ T5921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.242370][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.248843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.457402][T10424] fuse: Bad value for 'fd' [ 440.489281][T10424] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 440.518171][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 440.526343][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.547408][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.567568][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 440.595078][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.624190][ T5921] usb 1-1: config 0 descriptor?? [ 440.802495][ T5921] hub 1-1:0.0: USB hub found [ 441.037939][ T5921] hub 1-1:0.0: 1 port detected [ 442.219899][ T6838] hub 1-1:0.0: activate --> -90 [ 442.509727][T10444] ip6t_srh: unknown srh invflags 7F00 [ 443.428354][ T5921] usb 1-1-port1: cannot disable (err = -32) [ 444.139733][ T6244] usb 1-1: USB disconnect, device number 7 [ 444.482264][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 444.497454][ T7366] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 444.897596][ T7366] usb 5-1: Using ep0 maxpacket: 8 [ 444.903996][ T7366] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 444.917694][ T7366] usb 5-1: config 0 has no interface number 0 [ 444.926364][ T7366] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 444.937264][ T7366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.951132][ T7366] usb 5-1: Product: syz [ 445.092543][ T7366] usb 5-1: Manufacturer: syz [ 445.193896][ T7366] usb 5-1: SerialNumber: syz [ 445.346652][ T7366] usb 5-1: config 0 descriptor?? [ 445.369358][ T7366] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 445.386970][ T7366] pctv452e: pctv452e_power_ctrl: 1 [ 445.386970][ T7366] [ 445.401649][ T7366] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 445.401649][ T7366] [ 445.424815][ T7366] dvb-usb: bulk message failed: -22 (5/0) [ 445.578105][ T7366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.609090][ T7366] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 446.047314][ T7366] usb 5-1: media controller created [ 446.053003][ T7366] dvb-usb: bulk message failed: -22 (8/0) [ 446.093262][ T7366] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 446.217136][ T7366] dvb-usb: MAC address reading failed. [ 446.252124][ T7366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.748721][ T7366] DVB: Unable to find symbol stb0899_attach() [ 446.761644][ T7366] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 447.067429][ T7366] rc_core: IR keymap rc-tt-1500 not found [ 447.087534][ T7366] Registered IR keymap rc-empty [ 447.097672][ T7366] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 447.243815][ T7366] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 447.711132][ T7366] dvb-usb: schedule remote query interval to 100 msecs. [ 447.718629][ T7366] pctv452e: pctv452e_power_ctrl: 0 [ 447.718629][ T7366] [ 447.725985][ T7366] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 447.778857][ T7366] usb 5-1: USB disconnect, device number 14 [ 448.564310][ T7366] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 451.882101][T10534] kAFS: unable to lookup cell '' [ 451.888504][T10534] kAFS: unable to lookup cell '(,c' [ 452.411711][T10539] ptrace attach of "./syz-executor exec"[5820] was attempted by " [ 454.487319][ T30] audit: type=1400 audit(1766893766.558:516): avc: denied { ioctl } for pid=10559 comm="syz.0.1244" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 455.189533][ T30] audit: type=1400 audit(1766893767.258:517): avc: denied { ioctl } for pid=10559 comm="syz.0.1244" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x4806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.567604][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 455.643650][T10581] /dev/nullb0: Can't open blockdev [ 456.083504][ T6838] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 456.647328][ T6838] usb 3-1: Using ep0 maxpacket: 32 [ 456.653885][ T6838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.699826][ T6838] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 456.730611][ T6838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.773167][ T6838] usb 3-1: config 0 descriptor?? [ 457.309677][ T30] audit: type=1400 audit(1766893769.388:518): avc: denied { getopt } for pid=10585 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 458.350215][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 458.360679][T10605] xt_hashlimit: max too large, truncated to 1048576 [ 458.377509][T10605] xt_hashlimit: overflow, rate too high: 0 [ 459.291615][T10610] orangefs_mount: mount request failed with -4 [ 459.558156][ T6244] usb 3-1: USB disconnect, device number 16 [ 459.587714][ T5813] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 459.596306][ T5813] Bluetooth: hci4: Injecting HCI hardware error event [ 459.605455][ T5813] Bluetooth: hci4: hardware error 0x00 [ 459.655717][T10617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 459.662258][T10617] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.221963][T10617] vhci_hcd vhci_hcd.0: Device attached [ 460.267058][T10623] vhci_hcd: connection closed [ 460.278892][T10190] vhci_hcd vhci_hcd.4: stop threads [ 460.296878][T10190] vhci_hcd vhci_hcd.4: release socket [ 460.308596][T10190] vhci_hcd vhci_hcd.4: disconnect device [ 461.278629][T10643] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1264'. [ 461.497378][ T30] audit: type=1400 audit(1766893773.528:519): avc: denied { create } for pid=10641 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 461.677351][ T5813] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 461.827514][ T30] audit: type=1400 audit(1766893773.538:520): avc: denied { write } for pid=10641 comm="syz.4.1266" path="socket:[27982]" dev="sockfs" ino=27982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 461.895772][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 465.623633][ T30] audit: type=1400 audit(1766893777.688:521): avc: denied { mount } for pid=10685 comm="syz.3.1276" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 466.007475][T10698] ======================================================= [ 466.007475][T10698] WARNING: The mand mount option has been deprecated and [ 466.007475][T10698] and is ignored by this kernel. Remove the mand [ 466.007475][T10698] option from the mount to silence this warning. [ 466.007475][T10698] ======================================================= [ 467.367529][ T30] audit: type=1400 audit(1766893778.128:522): avc: denied { mount } for pid=10689 comm="syz.2.1279" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 467.390323][ T30] audit: type=1400 audit(1766893778.158:523): avc: denied { unmount } for pid=10689 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 469.221837][ T5921] hid_parser_main: 189 callbacks suppressed [ 469.221854][ T5921] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 469.246137][ T5921] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.852781][ T30] audit: type=1400 audit(1766893783.928:524): avc: denied { bind } for pid=10747 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 471.953676][T10750] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 471.988618][T10750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.152823][T10750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.177650][T10750] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 472.267519][ T7366] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 472.357862][T10750] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 472.437625][T10754] gretap1: entered promiscuous mode [ 472.460802][T10754] bond5: (slave gretap1): making interface the new active one [ 472.557908][ T7366] usb 4-1: Using ep0 maxpacket: 32 [ 472.699427][T10754] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 472.772860][ T7366] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.817395][ T7366] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.948492][T10756] macvlan2: entered promiscuous mode [ 472.953797][T10756] macvlan2: entered allmulticast mode [ 472.973649][T10756] bond5: entered promiscuous mode [ 472.995423][ T7366] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 473.010961][T10756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 473.020360][ T7366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.051961][T10756] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 473.077294][ T7366] usb 4-1: Product: syz [ 473.081484][ T7366] usb 4-1: Manufacturer: syz [ 473.086067][ T7366] usb 4-1: SerialNumber: syz [ 473.294948][ T7366] usb 4-1: config 0 descriptor?? [ 473.321321][T10756] bond5: left promiscuous mode [ 473.595899][ T30] audit: type=1400 audit(1766893785.668:525): avc: denied { setopt } for pid=10759 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 474.896303][ T5921] usb 4-1: USB disconnect, device number 12 [ 477.303858][T10798] can0: slcan on ttyS3. [ 479.349574][T10787] can0 (unregistered): slcan off ttyS3. [ 479.917318][ T7366] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 480.190328][ T7366] usb 1-1: Using ep0 maxpacket: 8 [ 480.218310][ T7366] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 480.236541][ T7366] usb 1-1: config 2 has no interface number 0 [ 480.251903][ T7366] usb 1-1: config 2 interface 31 has no altsetting 0 [ 480.406102][ T7366] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 480.432453][ T7366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.452616][ T7366] usb 1-1: Product: syz [ 480.456768][ T7366] usb 1-1: Manufacturer: syz [ 480.480762][ T7366] usb 1-1: SerialNumber: syz [ 480.530826][ T7366] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 482.306826][ T6838] usb 1-1: USB disconnect, device number 8 [ 485.438632][T10867] input: syz1 as /devices/virtual/input/input19 [ 488.399195][ T30] audit: type=1400 audit(1766893800.468:526): avc: denied { setopt } for pid=10895 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 492.738025][ T30] audit: type=1400 audit(1766893804.578:527): avc: denied { getopt } for pid=10940 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 495.092005][T10970] Invalid source name [ 495.096100][T10970] UBIFS error (pid: 10970): cannot open "./file0", error -22 [ 495.985936][ T30] audit: type=1400 audit(1766893807.168:528): avc: denied { mounton } for pid=10967 comm="syz.3.1347" path="/292/file0" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 497.016470][T10983] capability: warning: `syz.2.1350' uses 32-bit capabilities (legacy support in use) [ 498.988948][T11008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11008 comm=syz.0.1359 [ 499.530706][ T30] audit: type=1400 audit(1766893811.528:529): avc: denied { remount } for pid=11004 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 500.668924][T11024] vlan2: entered promiscuous mode [ 500.674222][T11024] vlan2: entered allmulticast mode [ 501.077839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.084221][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.273397][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 503.214354][T11064] batman_adv: batadv0: Adding interface: ipvlan2 [ 503.220775][T11064] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.246477][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.256941][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.266865][T11064] batman_adv: batadv0: Interface activated: ipvlan2 [ 503.790733][T11067] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1372'. [ 504.021487][T11072] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1374'. [ 504.068592][ T30] audit: type=1400 audit(1766893816.118:530): avc: denied { write } for pid=11069 comm="syz.1.1373" name="file0" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 505.261362][T11088] syzkaller0: entered promiscuous mode [ 505.266833][T11088] syzkaller0: entered allmulticast mode [ 513.036597][T11125] delete_channel: no stack [ 514.025111][ T30] audit: type=1400 audit(1766893826.098:531): avc: denied { bind } for pid=11145 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 514.107975][T11148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.676567][ T30] audit: type=1400 audit(1766893829.748:532): avc: denied { bind } for pid=11176 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 520.892739][ T30] audit: type=1400 audit(1766893832.968:533): avc: denied { mount } for pid=11210 comm="syz.2.1414" name="/" dev="hugetlbfs" ino=31089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 520.937370][T11211] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 520.937370][T11211] [ 521.122850][ T30] audit: type=1400 audit(1766893833.008:534): avc: denied { remount } for pid=11210 comm="syz.2.1414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 521.160768][ T5815] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 521.191876][ T5815] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 521.559853][ T30] audit: type=1400 audit(1766893833.608:535): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 521.615601][ T5815] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 521.801628][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 522.107310][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 522.117617][ T5815] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 522.125875][ T5815] usb 2-1: config 0 has no interface number 0 [ 522.133013][ T5815] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 522.143776][ T5815] usb 2-1: config 0 interface 196 has no altsetting 0 [ 522.152627][ T5815] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 522.162563][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.170700][ T5815] usb 2-1: Product: syz [ 522.174943][ T5815] usb 2-1: Manufacturer: syz [ 522.199981][ T5815] usb 2-1: SerialNumber: syz [ 522.268383][ T5815] usb 2-1: config 0 descriptor?? [ 522.302030][T11208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.787052][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 522.795225][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 522.806048][ T5815] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 522.817289][ T5815] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 522.839083][ T5815] usb 2-1: USB disconnect, device number 11 [ 522.962286][T11238] syzkaller0: entered promiscuous mode [ 522.970589][T11238] syzkaller0: entered allmulticast mode [ 524.458705][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 525.196452][T11262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11262 comm=syz.1.1425 [ 526.973499][ T30] audit: type=1400 audit(1766893839.048:536): avc: denied { ioctl } for pid=11276 comm="syz.1.1429" path="socket:[30418]" dev="sockfs" ino=30418 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 529.292784][T11301] Bluetooth: MGMT ver 1.23 [ 529.381893][ T30] audit: type=1400 audit(1766893841.428:537): avc: denied { node_bind } for pid=11291 comm="syz.4.1434" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 533.689129][ T30] audit: type=1400 audit(1766893845.768:538): avc: denied { ioctl } for pid=11347 comm="syz.1.1459" path="socket:[30588]" dev="sockfs" ino=30588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.614889][T11359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11359 comm=syz.4.1452 [ 534.750817][T11362] syzkaller0: entered promiscuous mode [ 534.756388][T11362] syzkaller0: entered allmulticast mode [ 535.391069][ T30] audit: type=1400 audit(1766893847.378:539): avc: denied { ioctl } for pid=11367 comm="syz.3.1455" path="socket:[30680]" dev="sockfs" ino=30680 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 536.226831][T11374] random: crng reseeded on system resumption [ 537.108217][T11387] binder_alloc: binder_alloc_mmap_handler: 11381 200000ffc000-200000ffd000 already mapped failed -16 [ 538.714103][T11402] binder_alloc: 11401: binder_alloc_buf, no vma [ 541.947641][T11437] fuse: Bad value for 'fd' [ 544.181093][T11458] mkiss: ax0: crc mode is auto. [ 555.844717][T11571] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1507'. [ 556.590340][T11584] 9pnet_virtio: no channels available for device syz [ 557.539782][ T30] audit: type=1400 audit(1766893869.568:540): avc: denied { nlmsg_read } for pid=11590 comm="syz.2.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 559.477349][ T6838] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 559.697631][ T6838] usb 3-1: Using ep0 maxpacket: 32 [ 559.796791][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.864020][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.874456][ T6838] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.886375][ T6838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.898324][ T6838] usb 3-1: config 0 descriptor?? [ 559.919718][ T6838] hub 3-1:0.0: USB hub found [ 560.586375][ T6838] hub 3-1:0.0: 1 port detected [ 561.132793][ T6838] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 561.215616][T11634] gfs2: error -5 reading superblock [ 562.514357][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.563029][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.583453][ T6838] usb 3-1: USB disconnect, device number 17 [ 563.106784][T11664] tipc: Enabled bearer , priority 0 [ 563.136035][T11664] syzkaller0: entered promiscuous mode [ 563.144999][T11664] syzkaller0: entered allmulticast mode [ 564.010060][T11668] tipc: Resetting bearer [ 564.157417][T11661] tipc: Resetting bearer [ 565.003961][T11661] tipc: Disabling bearer [ 568.934587][T11723] netlink: 'syz.2.1544': attribute type 6 has an invalid length. [ 568.946062][T11723] netlink: 'syz.2.1544': attribute type 6 has an invalid length. [ 570.332003][ T7366] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 570.528328][T11737] tipc: Enabling of bearer rejected, failed to enable media [ 570.855781][ T30] audit: type=1400 audit(1766893882.558:541): avc: denied { mount } for pid=11734 comm="syz.2.1552" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 570.887263][ T7366] usb 2-1: Using ep0 maxpacket: 32 [ 570.965062][ T7366] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 570.984850][ T7366] usb 2-1: config 0 has no interface number 0 [ 571.007398][ T7366] usb 2-1: config 0 interface 12 has no altsetting 0 [ 571.016805][ T7366] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 571.051290][ T7366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.060005][ T7366] usb 2-1: Product: syz [ 571.064176][ T7366] usb 2-1: Manufacturer: syz [ 571.069064][ T7366] usb 2-1: SerialNumber: syz [ 571.137098][ T30] audit: type=1400 audit(1766893883.198:542): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 571.144902][ T7366] usb 2-1: config 0 descriptor?? [ 571.188253][ T7366] f81534 2-1:0.12: required endpoints missing [ 571.602743][ T7366] usb 2-1: USB disconnect, device number 12 [ 574.507373][ T6838] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 574.764193][ T6838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 574.825531][ T6838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 574.990686][ T6838] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 575.078874][ T6838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.086875][ T6838] usb 2-1: Product: syz [ 575.141680][T11789] tipc: Started in network mode [ 575.146706][T11789] tipc: Node identity e29ec649fd14, cluster identity 4711 [ 575.154247][T11789] tipc: Enabled bearer , priority 0 [ 575.164323][T11789] syzkaller0: entered promiscuous mode [ 575.170129][T11789] syzkaller0: entered allmulticast mode [ 575.181516][T11789] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 575.267405][ T6838] usb 2-1: Manufacturer: syz [ 575.272020][ T6838] usb 2-1: SerialNumber: syz [ 575.723671][ T6838] usb 2-1: config 0 descriptor?? [ 575.762762][T11792] tipc: Resetting bearer [ 575.815415][T11788] tipc: Resetting bearer [ 576.642834][T11788] tipc: Disabling bearer [ 577.130935][ T5921] tipc: Node number set to 529188425 [ 577.196927][ T6838] usb 2-1: USB disconnect, device number 13 [ 577.307038][T11760] udevd[11760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.658699][T11841] tipc: Enabled bearer , priority 0 [ 581.470670][T11848] syzkaller0: entered promiscuous mode [ 581.476457][T11848] syzkaller0: entered allmulticast mode [ 581.813781][T11856] 9p: Bad value for 'rfdno' [ 582.786342][ T30] audit: type=1400 audit(1766893894.858:543): avc: denied { read } for pid=11868 comm="syz.2.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 582.842195][ T30] audit: type=1400 audit(1766893894.888:544): avc: denied { write } for pid=11868 comm="syz.2.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.583032][T11895] vlan0: entered promiscuous mode [ 585.618565][T11895] vlan0: entered allmulticast mode [ 585.623766][T11895] hsr_slave_1: entered allmulticast mode [ 586.120263][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 592.711738][T11972] vivid-001: ================= START STATUS ================= [ 592.857412][T11972] vivid-001: Radio HW Seek Mode: Bounded [ 593.319667][T11972] vivid-001: Radio Programmable HW Seek: false [ 593.334362][T11972] vivid-001: RDS Rx I/O Mode: Block I/O [ 593.370052][T11972] vivid-001: Generate RBDS Instead of RDS: false [ 593.387296][T11972] vivid-001: RDS Reception: true [ 593.423867][T11972] vivid-001: RDS Program Type: 0 inactive [ 593.442603][T11972] vivid-001: RDS PS Name: inactive [ 593.525109][T11972] vivid-001: RDS Radio Text: inactive [ 593.534797][T11972] vivid-001: RDS Traffic Announcement: false inactive [ 593.543302][T11972] vivid-001: RDS Traffic Program: false inactive [ 593.549913][T11972] vivid-001: RDS Music: false inactive [ 593.565554][T11972] vivid-001: ================== END STATUS ================== [ 593.792377][ T30] audit: type=1400 audit(1766893905.848:545): avc: denied { shutdown } for pid=11971 comm="syz.0.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.151496][T12031] sp0: Synchronizing with TNC [ 598.615077][ T5813] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 598.868953][T12044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1628'. [ 602.082395][ T5813] Bluetooth: hci1: Malformed Event: 0x2f [ 602.627918][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 602.640752][ T5813] Bluetooth: hci1: Injecting HCI hardware error event [ 602.649719][ T5813] Bluetooth: hci1: hardware error 0x00 [ 605.278143][ T5813] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 608.596308][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 608.618367][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 608.879701][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 608.888227][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 608.983038][T12135] ceph: No mds server is up or the cluster is laggy [ 610.327257][ T30] audit: type=1400 audit(1766893922.018:546): avc: denied { mounton } for pid=12148 comm="syz.2.1656" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 610.463994][T12156] tipc: Enabled bearer , priority 0 [ 610.491493][T12156] syzkaller0: entered promiscuous mode [ 610.509329][T12156] syzkaller0: entered allmulticast mode [ 610.821573][T12156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.019847][T12156] tipc: Resetting bearer [ 611.043477][T12155] tipc: Resetting bearer [ 611.183507][T12155] tipc: Disabling bearer [ 614.468538][T12199] can0: slcan on ttyS3. [ 615.354659][T12192] can0 (unregistered): slcan off ttyS3. [ 616.192506][T12214] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 620.442177][T12244] : entered promiscuous mode [ 622.141442][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 623.154276][ T30] audit: type=1400 audit(1766893935.228:547): avc: denied { create } for pid=12277 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 623.631070][ T30] audit: type=1400 audit(1766893935.708:548): avc: denied { listen } for pid=12277 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 623.653419][ T30] audit: type=1400 audit(1766893935.728:549): avc: denied { accept } for pid=12277 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 623.913257][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.289880][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.966727][ T30] audit: type=1400 audit(1766893937.038:550): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 626.004750][T12300] tipc: Enabled bearer , priority 0 [ 626.161305][T12303] syzkaller0: entered promiscuous mode [ 626.237528][T12303] syzkaller0: entered allmulticast mode [ 626.238701][T12304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 626.253835][T12304] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 626.263792][T12304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.495711][T12300] tipc: Resetting bearer [ 626.510661][T12300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.519146][T12300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.598910][T12299] tipc: Resetting bearer [ 626.638393][T12299] tipc: Disabling bearer [ 628.099933][T12317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1695'. [ 629.610330][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1701'. [ 629.750352][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1701'. [ 635.372073][T12387] 9p: Could not find request transport: un [ 635.533960][T12395] overlayfs: failed to clone upperpath [ 635.563398][T12396] tipc: Enabled bearer , priority 0 [ 635.579198][T12396] syzkaller0: entered promiscuous mode [ 635.599174][T12396] syzkaller0: entered allmulticast mode [ 635.619387][T12396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 635.706805][T12396] tipc: Resetting bearer [ 635.914759][T12394] tipc: Resetting bearer [ 636.123544][T12394] tipc: Disabling bearer [ 636.876501][T12406] syzkaller0: entered promiscuous mode [ 636.887363][T12406] syzkaller0: entered allmulticast mode [ 638.074750][ T30] audit: type=1400 audit(1766893949.748:551): avc: denied { setattr } for pid=12418 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 639.056147][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 639.249323][ T30] audit: type=1400 audit(1766893951.328:552): avc: denied { mounton } for pid=12429 comm="syz.2.1726" path="/342/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 642.412337][T12461] overlayfs: failed to clone upperpath [ 643.148874][ T30] audit: type=1400 audit(1766893955.228:553): avc: denied { append } for pid=12463 comm="syz.0.1735" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 643.149461][T12466] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 650.166450][ T30] audit: type=1400 audit(1766893962.238:554): avc: denied { create } for pid=12532 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 651.417383][ T5891] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 651.583762][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.594435][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.631363][ T5891] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 651.645149][ T5891] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 651.654855][ T5891] usb 2-1: Manufacturer: syz [ 651.669394][ T5891] usb 2-1: SerialNumber: syz [ 651.684795][ T5891] usb 2-1: config 0 descriptor?? [ 653.300297][ T5891] usb 2-1: USB disconnect, device number 14 [ 654.799265][T12582] fuse: Bad value for 'fd' [ 657.280144][T12606] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 657.288164][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1772'. [ 657.437382][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 657.474597][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.538921][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.654573][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.778446][ T5921] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 658.351383][ T5921] usb 2-1: config 0 has no interfaces? [ 658.356922][ T5921] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 659.062976][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.080598][ T5921] usb 2-1: config 0 descriptor?? [ 660.460905][ T5921] usb 2-1: USB disconnect, device number 15 [ 771.757124][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 771.764103][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5810/1:b..l [ 771.772337][ C0] rcu: (detected by 0, t=10502 jiffies, g=45625, q=47 ncpus=2) [ 771.779937][ C0] task:syz-executor state:R running task stack:23000 pid:5810 tgid:5810 ppid:5806 task_flags:0x400140 flags:0x00080000 [ 771.793965][ C0] Call Trace: [ 771.797226][ C0] [ 771.800134][ C0] ? __schedule+0x10b9/0x6150 [ 771.804786][ C0] __schedule+0x1139/0x6150 [ 771.809272][ C0] ? trace_sched_exit_tp+0xd1/0x110 [ 771.814458][ C0] ? __pfx___schedule+0x10/0x10 [ 771.819281][ C0] ? mark_held_locks+0x49/0x80 [ 771.824015][ C0] preempt_schedule_irq+0x51/0x90 [ 771.829007][ C0] irqentry_exit+0x1d8/0x8c0 [ 771.833578][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.839526][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 771.844693][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 b9 ee 0e 0f 82 74 02 00 00 8b 35 ba e9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 771.864271][ C0] RSP: 0018:ffffc90002f66d58 EFLAGS: 00000206 [ 771.870311][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000846d540c [ 771.878252][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 771.886189][ C0] RBP: 0000000000000002 R08: 000000001402bbf6 R09: 0000000061402bbf [ 771.894128][ C0] R10: 0000000000000002 R11: ffff8880754654b0 R12: 0000000000000000 [ 771.902066][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.910019][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 771.915194][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.921317][ C0] is_module_text_address+0x33/0x220 [ 771.926576][ C0] ? is_module_text_address+0x1f/0x220 [ 771.932005][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.938128][ C0] kernel_text_address+0x81/0x100 [ 771.943123][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 771.948290][ C0] __kernel_text_address+0xd/0x40 [ 771.953285][ C0] unwind_get_return_address+0x59/0xa0 [ 771.958715][ C0] arch_stack_walk+0xa6/0x100 [ 771.963377][ C0] stack_trace_save+0x8e/0xc0 [ 771.968024][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 771.973366][ C0] ? __lock_acquire+0x436/0x2890 [ 771.978275][ C0] save_stack+0x160/0x1f0 [ 771.982575][ C0] ? __pfx_save_stack+0x10/0x10 [ 771.987402][ C0] ? post_alloc_hook+0x1af/0x220 [ 771.992319][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 771.997920][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 772.003958][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 772.008956][ C0] ? alloc_pages_noprof+0x131/0x390 [ 772.014143][ C0] ? pte_alloc_one+0x1e/0x3d0 [ 772.018800][ C0] ? __pte_alloc+0x6d/0x3f0 [ 772.023270][ C0] ? copy_page_range+0x3f3e/0x6780 [ 772.028362][ C0] ? dup_mmap+0xbea/0x20e0 [ 772.032764][ C0] ? copy_process+0x3b9f/0x7430 [ 772.037587][ C0] ? kernel_clone+0xfc/0x910 [ 772.042150][ C0] ? __do_sys_clone+0xce/0x120 [ 772.046886][ C0] ? do_syscall_64+0xcd/0xf80 [ 772.051538][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.057579][ C0] ? __lock_acquire+0x436/0x2890 [ 772.062488][ C0] __set_page_owner+0x91/0x560 [ 772.067224][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 772.072570][ C0] ? bad_range+0x261/0x4c0 [ 772.076971][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.082143][ C0] post_alloc_hook+0x1af/0x220 [ 772.086882][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 772.092313][ C0] ? __pfx___might_resched+0x10/0x10 [ 772.097568][ C0] ? should_fail_alloc_page+0xee/0x130 [ 772.103000][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 772.108859][ C0] ? kasan_save_stack+0x42/0x60 [ 772.113697][ C0] ? kasan_save_track+0x14/0x30 [ 772.118533][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 772.123557][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 772.129160][ C0] ? ptlock_alloc+0x1f/0x70 [ 772.133635][ C0] ? pte_alloc_one+0x84/0x3d0 [ 772.138283][ C0] ? __pte_alloc+0x6d/0x3f0 [ 772.142753][ C0] ? copy_page_range+0x3f3e/0x6780 [ 772.147841][ C0] ? copy_process+0x3b9f/0x7430 [ 772.152682][ C0] ? __lock_acquire+0x436/0x2890 [ 772.157614][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.164025][ C0] ? __lock_acquire+0x436/0x2890 [ 772.168955][ C0] ? __lock_acquire+0x436/0x2890 [ 772.173877][ C0] ? __lock_acquire+0x436/0x2890 [ 772.178789][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.184663][ C0] ? policy_nodemask+0xea/0x4e0 [ 772.189490][ C0] alloc_pages_mpol+0x1fb/0x550 [ 772.194318][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 772.199664][ C0] alloc_pages_noprof+0x131/0x390 [ 772.204659][ C0] pte_alloc_one+0x1e/0x3d0 [ 772.209137][ C0] __pte_alloc+0x6d/0x3f0 [ 772.213440][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 772.218360][ C0] ? __pfx___might_resched+0x10/0x10 [ 772.223614][ C0] ? copy_page_range+0x22fb/0x6780 [ 772.228699][ C0] copy_page_range+0x3f3e/0x6780 [ 772.233620][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 772.238880][ C0] ? __pfx___might_resched+0x10/0x10 [ 772.244130][ C0] ? __pfx_mas_store+0x10/0x10 [ 772.248879][ C0] ? dup_mmap+0xba4/0x20e0 [ 772.253273][ C0] ? down_write+0x14d/0x200 [ 772.257757][ C0] ? up_write+0x282/0x4e0 [ 772.262060][ C0] dup_mmap+0xbea/0x20e0 [ 772.266278][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 772.270940][ C0] copy_process+0x3b9f/0x7430 [ 772.275599][ C0] ? do_wp_page+0x1c04/0x5010 [ 772.280251][ C0] ? __pfx_copy_process+0x10/0x10 [ 772.285248][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 772.290262][ C0] kernel_clone+0xfc/0x910 [ 772.294649][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 772.299645][ C0] __do_sys_clone+0xce/0x120 [ 772.304204][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 772.309367][ C0] ? count_memcg_events+0x122/0x290 [ 772.314539][ C0] ? do_user_addr_fault+0x843/0x1370 [ 772.319797][ C0] do_syscall_64+0xcd/0xf80 [ 772.324274][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.330134][ C0] RIP: 0033:0x7fbbb3585e93 [ 772.334515][ C0] RSP: 002b:00007fff0a226ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 772.342903][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbb3585e93 [ 772.350843][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 772.358784][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 772.366734][ C0] R10: 00005555702037d0 R11: 0000000000000246 R12: 0000000000000000 [ 772.374689][ C0] R13: 00000000000927c0 R14: 00000000000a2bea R15: 00007fff0a227090 [ 772.382654][ C0] [ 772.385652][ C0] rcu: rcu_preempt kthread starved for 10562 jiffies! g45625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 772.396818][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 772.406755][ C0] rcu: RCU grace-period kthread stack dump: [ 772.412609][ C0] task:rcu_preempt state:R running task stack:28024 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 772.426079][ C0] Call Trace: [ 772.429346][ C0] [ 772.432260][ C0] ? __schedule+0x10b9/0x6150 [ 772.436928][ C0] __schedule+0x1139/0x6150 [ 772.441438][ C0] ? __pfx___schedule+0x10/0x10 [ 772.446259][ C0] ? find_held_lock+0x2b/0x80 [ 772.450911][ C0] ? schedule+0x2d7/0x3a0 [ 772.455222][ C0] schedule+0xe7/0x3a0 [ 772.459263][ C0] schedule_timeout+0x123/0x290 [ 772.464083][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 772.469421][ C0] ? __pfx_process_timeout+0x10/0x10 [ 772.474678][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 772.480453][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 772.485884][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 772.490619][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 772.495873][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.501042][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 772.505947][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 772.510770][ C0] rcu_gp_kthread+0x26d/0x380 [ 772.515419][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.520587][ C0] ? rcu_is_watching+0x12/0xc0 [ 772.525325][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.530508][ C0] ? __kthread_parkme+0x19e/0x250 [ 772.535518][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.540690][ C0] kthread+0x3c5/0x780 [ 772.544735][ C0] ? __pfx_kthread+0x10/0x10 [ 772.549296][ C0] ? rcu_is_watching+0x12/0xc0 [ 772.554029][ C0] ? __pfx_kthread+0x10/0x10 [ 772.558591][ C0] ret_from_fork+0x983/0xb10 [ 772.563186][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 772.568285][ C0] ? __switch_to+0x7af/0x10d0 [ 772.572942][ C0] ? __pfx_kthread+0x10/0x10 [ 772.577510][ C0] ret_from_fork_asm+0x1a/0x30 [ 772.582257][ C0] [ 772.585246][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 772.591538][ C0] Sending NMI from CPU 0 to CPUs 1: [ 772.596725][ C1] NMI backtrace for cpu 1 [ 772.596736][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.596753][ C1] Tainted: [L]=SOFTLOCKUP [ 772.596758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.596765][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 772.596782][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 772.596794][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 772.596806][ C1] RAX: 0000000002901ac9 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 772.596814][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 772.596822][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 772.596830][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 772.596838][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 772.596846][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 772.596859][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.596867][ C1] CR2: 0000001b2ff0dff8 CR3: 000000002a14f000 CR4: 00000000003526f0 [ 772.596876][ C1] Call Trace: [ 772.596882][ C1] [ 772.596886][ C1] default_idle+0x13/0x20 [ 772.596902][ C1] default_idle_call+0x6c/0xb0 [ 772.596918][ C1] do_idle+0x38d/0x510 [ 772.596937][ C1] ? __pfx_do_idle+0x10/0x10 [ 772.596956][ C1] cpu_startup_entry+0x4f/0x60 [ 772.596973][ C1] start_secondary+0x21d/0x2d0 [ 772.596985][ C1] ? __pfx_start_secondary+0x10/0x10 [ 772.596999][ C1] common_startup_64+0x13e/0x148 [ 772.597030][ C1]