last executing test programs: 4.367989912s ago: executing program 0 (id=1932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.178346123s ago: executing program 0 (id=1935): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0xb, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xa4}}, 0x0) 4.110347703s ago: executing program 0 (id=1936): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.070471744s ago: executing program 0 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa9}]}, 0x40}}, 0x0) 3.923678505s ago: executing program 0 (id=1938): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3.478223318s ago: executing program 0 (id=1941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) 2.199753896s ago: executing program 1 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r0, 0x2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9c, 0xf9, 0x83, 0x20, 0x403, 0xe0f4, 0x5415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x1, 0x80, 0xc, [{{0x9, 0x4, 0x9b, 0x8, 0x0, 0x8, 0x4, 0x1, 0x4}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) 2.196362746s ago: executing program 3 (id=1950): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x0, 0x3, 0x3, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x6, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.117902947s ago: executing program 3 (id=1952): write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 1.936634668s ago: executing program 3 (id=1955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.781935369s ago: executing program 3 (id=1960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x0, 0x0) 1.752688389s ago: executing program 2 (id=1961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.696297289s ago: executing program 2 (id=1962): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.638641749s ago: executing program 2 (id=1963): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.5588456s ago: executing program 2 (id=1964): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="ff0400004ec6"}) 1.386038931s ago: executing program 2 (id=1965): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x7fffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 1.138148043s ago: executing program 1 (id=1966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 846.647985ms ago: executing program 1 (id=1967): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xffffffee}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 766.211705ms ago: executing program 4 (id=1969): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}}, 0x0) 765.759425ms ago: executing program 4 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x74, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 757.669805ms ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 749.909065ms ago: executing program 1 (id=1972): r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) socket$netlink(0x10, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x81, 0x0, 0xfffffffd]}, &(0x7f00000001c0)=0x44) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 694.989195ms ago: executing program 4 (id=1973): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xd, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 655.798406ms ago: executing program 1 (id=1974): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x40, 0x13, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 655.532366ms ago: executing program 4 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="000000ffffffffffffffe6000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 655.000786ms ago: executing program 4 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r0, 0x2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9c, 0xf9, 0x83, 0x20, 0x403, 0xe0f4, 0x5415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x1, 0x80, 0xc, [{{0x9, 0x4, 0x9b, 0x8, 0x0, 0x8, 0x4, 0x1, 0x4}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) 517.058337ms ago: executing program 3 (id=1977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) 109.884589ms ago: executing program 1 (id=1978): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 58.5151ms ago: executing program 4 (id=1979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=1980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r0, 0x2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0) process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9c, 0xf9, 0x83, 0x20, 0x403, 0xe0f4, 0x5415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x1, 0x80, 0xc, [{{0x9, 0x4, 0x9b, 0x8, 0x0, 0x8, 0x4, 0x1, 0x4}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): .947769][ T60] usb 3-1: device descriptor read/64, error -71 [ 37.990594][ T30] audit: type=1400 audit(1762212632.443:212): avc: denied { ioctl } for pid=1159 comm="syz.3.332" path="socket:[21177]" dev="sockfs" ino=21177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.000034][ T1162] loop3: detected capacity change from 0 to 128 [ 38.217766][ T60] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 38.265877][ T1181] overlayfs: failed to clone upperpath [ 38.272373][ T30] audit: type=1400 audit(1762212888.720:213): avc: denied { remount } for pid=1180 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.422097][ T30] audit: type=1400 audit(1762212888.870:214): avc: denied { write } for pid=1185 comm="syz.4.344" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.481447][ T1197] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 38.490509][ T1197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.507802][ T645] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.515475][ T1203] overlayfs: failed to clone upperpath [ 38.521043][ T60] usb 3-1: device descriptor read/64, error -71 [ 38.539910][ T1207] loop4: detected capacity change from 0 to 128 [ 38.570120][ T1213] overlayfs: failed to clone upperpath [ 38.640157][ T1223] loop4: detected capacity change from 0 to 8192 [ 38.678168][ T333] loop4: p1 p2 p3 p4 [ 38.683084][ T333] loop4: p3 start 331777 is beyond EOD, truncated [ 38.689573][ T333] loop4: p4 size 262144 extends beyond EOD, truncated [ 38.698819][ T1223] loop4: p1 p2 p3 p4 [ 38.703653][ T1223] loop4: p3 start 331777 is beyond EOD, truncated [ 38.710185][ T1223] loop4: p4 size 262144 extends beyond EOD, truncated [ 38.747810][ T645] usb 4-1: Using ep0 maxpacket: 32 [ 38.811576][ T706] udevd[706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.811592][ T333] udevd[333]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.832154][ T705] udevd[705]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.846171][ T333] udevd[333]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.846472][ T705] udevd[705]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.859278][ T706] udevd[706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.875336][ T645] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.888198][ T645] usb 4-1: config 0 has no interface number 0 [ 38.894301][ T645] usb 4-1: config 0 interface 184 has no altsetting 0 [ 38.917818][ T60] usb 3-1: device descriptor read/64, error -71 [ 39.037863][ T60] usb usb3-port1: attempt power cycle [ 39.067822][ T645] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.076921][ T645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.085135][ T645] usb 4-1: Product: syz [ 39.089931][ T645] usb 4-1: Manufacturer: syz [ 39.094531][ T645] usb 4-1: SerialNumber: syz [ 39.099983][ T645] usb 4-1: config 0 descriptor?? [ 39.138149][ T645] smsc75xx v1.0.0 [ 39.225675][ T1256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 39.403824][ T1290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 39.447786][ T60] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 39.474942][ T1300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 39.594574][ T1324] overlayfs: failed to clone upperpath [ 39.617809][ T60] usb 3-1: device descriptor read/8, error -71 [ 39.787829][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 39.798679][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.887884][ T60] usb 3-1: device descriptor read/8, error -71 [ 40.585864][ T1359] loop4: detected capacity change from 0 to 128 [ 40.596373][ T1361] loop2: detected capacity change from 0 to 7 [ 40.638566][ T1363] loop2: detected capacity change from 0 to 256 [ 40.698864][ T1365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3510134640 (7020269280 ns) > initial count (5369474572 ns). Using initial count to start timer. [ 40.969967][ T1386] fuse: Bad value for 'user_id' [ 41.002028][ T1390] device syzkaller0 entered promiscuous mode [ 41.237912][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.277812][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 41.296357][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 41.315029][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 41.334416][ T645] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 41.348723][ T645] usb 4-1: USB disconnect, device number 4 [ 41.517764][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 41.657815][ T20] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 41.669309][ T20] usb 1-1: config 0 has no interface number 0 [ 41.680884][ T20] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 41.703538][ T20] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 41.725188][ T20] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.820711][ T1414] loop3: detected capacity change from 0 to 8192 [ 41.929638][ T20] usb 1-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 41.950668][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.977786][ T20] usb 1-1: Product: syz [ 41.988339][ T20] usb 1-1: Manufacturer: syz [ 42.013345][ T20] usb 1-1: SerialNumber: syz [ 42.039698][ T20] usb 1-1: config 0 descriptor?? [ 42.134217][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 42.134231][ T30] audit: type=1400 audit(1762212892.580:255): avc: denied { create } for pid=1450 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.220420][ T30] audit: type=1326 audit(1762212892.670:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.4.468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x0 [ 42.243416][ T30] audit: type=1400 audit(1762212892.670:257): avc: denied { mounton } for pid=1463 comm="syz.3.467" path="/59/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 42.320561][ T1469] loop4: detected capacity change from 0 to 512 [ 42.358387][ T1469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.370457][ T1469] EXT4-fs (loop4): 1 truncate cleaned up [ 42.376251][ T1469] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,barrier,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback. [ 42.415980][ T30] audit: type=1400 audit(1762212892.860:258): avc: denied { write } for pid=1459 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.257909][ T1500] input: syz0 as /devices/virtual/input/input4 [ 43.607772][ T346] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 43.766415][ T30] audit: type=1400 audit(1762212894.210:259): avc: denied { setopt } for pid=1507 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.967912][ T346] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 44.009576][ T645] usb 1-1: USB disconnect, device number 2 [ 44.042888][ T346] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.058027][ T346] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 44.067945][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.427836][ T20] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 44.579561][ T1545] bridge0: port 3(vlan0) entered blocking state [ 44.585836][ T1545] bridge0: port 3(vlan0) entered disabled state [ 44.592532][ T1545] device vlan0 entered promiscuous mode [ 44.598136][ T1545] device syz_tun entered promiscuous mode [ 45.505242][ T1561] device wireguard0 entered promiscuous mode [ 45.703320][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.748007][ T20] usb 3-1: not running at top speed; connect to a high speed hub [ 45.827924][ T20] usb 3-1: config 1 has an invalid interface number: 23 but max is 0 [ 45.836089][ T20] usb 3-1: config 1 has no interface number 0 [ 45.842689][ T20] usb 3-1: config 1 interface 23 has no altsetting 0 [ 45.868942][ T1581] tipc: Started in network mode [ 45.873921][ T1581] tipc: Node identity 36b9df7b29a3, cluster identity 4711 [ 45.881252][ T1581] tipc: Enabled bearer , priority 0 [ 45.888484][ T1581] device syzkaller0 entered promiscuous mode [ 45.896764][ T1581] tipc: Resetting bearer [ 45.903125][ T1580] tipc: Resetting bearer [ 45.909761][ T1580] tipc: Disabling bearer [ 46.005915][ T30] audit: type=1326 audit(1762212896.450:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe425a6c9 code=0x7ffc0000 [ 46.029442][ T20] usb 3-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=52.80 [ 46.029518][ T30] audit: type=1326 audit(1762212896.450:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe425a6c9 code=0x7ffc0000 [ 46.038526][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.038549][ T20] usb 3-1: Product: syz [ 46.038565][ T20] usb 3-1: Manufacturer: syz [ 46.038578][ T20] usb 3-1: SerialNumber: syz [ 46.068440][ T30] audit: type=1326 audit(1762212896.450:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2fe425a6c9 code=0x7ffc0000 [ 46.107087][ T30] audit: type=1326 audit(1762212896.450:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe425a6c9 code=0x7ffc0000 [ 46.130464][ T30] audit: type=1326 audit(1762212896.450:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe425a6c9 code=0x7ffc0000 [ 46.423105][ T20] usb 3-1: USB disconnect, device number 10 [ 46.526232][ T289] usb 4-1: USB disconnect, device number 5 [ 46.957898][ T289] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.156634][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 47.156650][ T30] audit: type=1400 audit(1762212897.600:307): avc: denied { getopt } for pid=1611 comm="syz.4.525" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.197712][ T1614] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 47.297887][ T289] usb 4-1: device descriptor read/64, error -71 [ 47.323866][ T30] audit: type=1400 audit(1762212897.770:308): avc: denied { read } for pid=1622 comm="syz.0.530" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.331319][ T1623] binder: 1622:1623 ioctl c0306201 200000004a40 returned -14 [ 47.346533][ T30] audit: type=1400 audit(1762212897.770:309): avc: denied { open } for pid=1622 comm="syz.0.530" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.447849][ T39] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.457557][ T30] audit: type=1400 audit(1762212897.780:310): avc: denied { ioctl } for pid=1622 comm="syz.0.530" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.484883][ T30] audit: type=1400 audit(1762212897.780:311): avc: denied { set_context_mgr } for pid=1622 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.507310][ T30] audit: type=1400 audit(1762212897.780:312): avc: denied { map } for pid=1622 comm="syz.0.530" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.531607][ T30] audit: type=1400 audit(1762212897.780:313): avc: denied { call } for pid=1622 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.550603][ T30] audit: type=1400 audit(1762212897.780:314): avc: denied { transfer } for pid=1622 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.640394][ T1628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 47.656373][ T30] audit: type=1326 audit(1762212898.100:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1629 comm="syz.1.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x0 [ 47.697830][ T645] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.708050][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 47.717833][ T289] usb 4-1: device descriptor read/64, error -71 [ 47.827818][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.838119][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 47.847771][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.937810][ T645] usb 1-1: Using ep0 maxpacket: 32 [ 47.987805][ T289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 48.017873][ T39] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 48.026980][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.035085][ T39] usb 3-1: Product: syz [ 48.039360][ T39] usb 3-1: Manufacturer: syz [ 48.044393][ T39] usb 3-1: SerialNumber: syz [ 48.049632][ T39] usb 3-1: config 0 descriptor?? [ 48.057855][ T645] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 48.069021][ T645] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 48.080237][ T645] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.108481][ T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 48.114613][ T1633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 48.118441][ T645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.137632][ T645] usb 1-1: config 0 descriptor?? [ 48.157852][ T1625] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 48.178271][ T645] hub 1-1:0.0: USB hub found [ 48.257804][ T289] usb 4-1: device descriptor read/64, error -71 [ 48.291653][ T20] usb 3-1: USB disconnect, device number 11 [ 48.397957][ T645] hub 1-1:0.0: 1 port detected [ 48.508074][ T30] audit: type=1400 audit(1762212898.960:316): avc: denied { write } for pid=1640 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.647883][ T289] usb 4-1: device descriptor read/64, error -71 [ 48.767864][ T289] usb usb4-port1: attempt power cycle [ 48.833063][ T1652] usb 1-1: USB disconnect, device number 3 [ 48.902830][ T1653] hub 1-0:1.0: USB hub found [ 48.907707][ T1653] hub 1-0:1.0: 1 port detected [ 49.059515][ T645] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 49.177774][ T289] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.347899][ T289] usb 4-1: device descriptor read/8, error -71 [ 49.607890][ T289] usb 4-1: device descriptor read/8, error -71 [ 49.694144][ T1667] loop3: detected capacity change from 0 to 512 [ 49.730299][ T1667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.780718][ T1667] EXT4-fs (loop3): 1 truncate cleaned up [ 49.793085][ T1667] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback. [ 50.257834][ T645] usb 1-1: device descriptor read/64, error -71 [ 50.456197][ T1683] binder: binder_mmap: 1682 200000000000-200000003000 bad vm_flags failed -1 [ 50.977804][ T645] usb 1-1: Using ep0 maxpacket: 32 [ 51.207852][ T645] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 51.216415][ T645] usb 1-1: config 0 has no interface number 0 [ 51.485568][ T645] usb 1-1: config 0 interface 184 has no altsetting 0 [ 51.647871][ T645] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 51.657104][ T645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.665141][ T645] usb 1-1: Product: syz [ 51.669375][ T645] usb 1-1: Manufacturer: syz [ 51.674012][ T645] usb 1-1: SerialNumber: syz [ 51.681019][ T645] usb 1-1: config 0 descriptor?? [ 51.719726][ T645] smsc75xx v1.0.0 [ 51.944953][ T1711] device syzkaller0 entered promiscuous mode [ 52.677823][ T645] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 52.764219][ T645] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 52.817969][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 52.817983][ T30] audit: type=1400 audit(1762212903.270:342): avc: denied { validate_trans } for pid=1728 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.059018][ T1733] netlink: 52 bytes leftover after parsing attributes in process `syz.4.572'. [ 53.068020][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.075221][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.088226][ T1733] syz.4.572 (1733) used greatest stack depth: 19808 bytes left [ 53.137823][ T1675] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 53.377783][ T1675] usb 4-1: Using ep0 maxpacket: 32 [ 53.497842][ T1675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.508819][ T1675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.518582][ T1675] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.527618][ T1675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.536367][ T1675] usb 4-1: config 0 descriptor?? [ 53.578206][ T1675] hub 4-1:0.0: USB hub found [ 53.667828][ T645] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 53.687783][ T645] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 53.697447][ T645] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 53.707763][ T30] audit: type=1400 audit(1762212904.160:343): avc: denied { create } for pid=1746 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.729946][ T645] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 53.736877][ T30] audit: type=1400 audit(1762212904.180:344): avc: denied { setopt } for pid=1746 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.757425][ T645] usb 1-1: USB disconnect, device number 4 [ 53.767429][ T30] audit: type=1400 audit(1762212904.180:345): avc: denied { write } for pid=1746 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.797828][ T1675] hub 4-1:0.0: 1 port detected [ 54.088033][ T1675] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 54.094589][ T1675] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 54.372711][ T1770] device wireguard0 entered promiscuous mode [ 54.412025][ T1777] KVM: debugfs: duplicate directory 1777-5 [ 54.458045][ T1675] usbhid 4-1:0.0: can't add hid device: -71 [ 54.464092][ T1675] usbhid: probe of 4-1:0.0 failed with error -71 [ 54.518161][ T1675] usb 4-1: USB disconnect, device number 10 [ 55.462112][ T30] audit: type=1400 audit(1762212905.800:346): avc: denied { ioctl } for pid=1804 comm="syz.0.598" path="socket:[23524]" dev="sockfs" ino=23524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.573359][ T30] audit: type=1326 audit(1762212906.020:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.2.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x0 [ 55.677019][ T1829] loop2: detected capacity change from 0 to 512 [ 55.729035][ T1829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.771801][ T1829] EXT4-fs (loop2): 1 truncate cleaned up [ 55.777566][ T1829] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback. [ 56.061416][ T1847] 9pnet: Insufficient options for proto=fd [ 56.307767][ T289] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.687896][ T289] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.699665][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.808183][ T289] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.842223][ T289] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 56.919228][ T289] usb 1-1: Manufacturer: syz [ 57.038093][ T289] usb 1-1: config 0 descriptor?? [ 57.279848][ T346] usb 1-1: USB disconnect, device number 5 [ 57.807917][ T30] audit: type=1400 audit(1762212908.240:348): avc: denied { connect } for pid=1895 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.894004][ T30] audit: type=1400 audit(1762212908.340:349): avc: denied { create } for pid=1908 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 58.877838][ T1675] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 58.927559][ T1937] overlayfs: missing 'workdir' [ 58.936953][ T1937] overlayfs: failed to clone upperpath [ 59.177784][ T1675] usb 4-1: device descriptor read/64, error -71 [ 59.408959][ T30] audit: type=1326 audit(1762212909.860:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.433508][ T30] audit: type=1326 audit(1762212909.860:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.457229][ T30] audit: type=1326 audit(1762212909.860:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.480635][ T30] audit: type=1326 audit(1762212909.860:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.504117][ T30] audit: type=1326 audit(1762212909.860:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.569763][ T30] audit: type=1326 audit(1762212909.860:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.593683][ T30] audit: type=1326 audit(1762212909.860:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.617420][ T30] audit: type=1326 audit(1762212909.860:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.686826][ T30] audit: type=1326 audit(1762212909.860:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1947 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 59.694230][ T1675] usb 4-1: device descriptor read/64, error -71 [ 60.001713][ T1962] tmpfs: Unknown parameter 'usrquota' [ 60.047771][ T1675] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 60.568456][ T1675] usb 4-1: device descriptor read/64, error -71 [ 60.902074][ T1977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 61.427683][ T1997] device bridge1 entered promiscuous mode [ 61.911346][ T2007] overlayfs: workdir and upperdir must be separate subtrees [ 62.061021][ T2012] overlayfs: failed to clone upperpath [ 63.519970][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 63.519985][ T30] audit: type=1400 audit(1762212913.930:380): avc: denied { associate } for pid=2033 comm="syz.4.682" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 63.936565][ T2054] device syzkaller0 entered promiscuous mode [ 65.131925][ T2075] virtio-fs: tag not found [ 65.162727][ T30] audit: type=1400 audit(1762212915.610:381): avc: denied { create } for pid=2078 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.229015][ T30] audit: type=1400 audit(1762212915.640:382): avc: denied { write } for pid=2078 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.600473][ T30] audit: type=1400 audit(1762212915.640:383): avc: denied { read } for pid=2078 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.928485][ T30] audit: type=1400 audit(1762212916.380:384): avc: denied { ioctl } for pid=2103 comm="syz.3.706" path="socket:[24980]" dev="sockfs" ino=24980 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.151378][ T30] audit: type=1400 audit(1762212916.600:385): avc: denied { write } for pid=2108 comm="syz.3.710" name="fib_trie" dev="proc" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.317941][ T20] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 66.607450][ T2117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 66.847652][ T30] audit: type=1400 audit(1762212917.290:386): avc: denied { create } for pid=2121 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.384155][ T20] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.392900][ T20] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 67.403139][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.412116][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 67.423398][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 67.497804][ T30] audit: type=1400 audit(1762212917.930:387): avc: denied { create } for pid=2134 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.527965][ T30] audit: type=1400 audit(1762212917.930:388): avc: denied { connect } for pid=2134 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.552534][ T30] audit: type=1400 audit(1762212917.930:389): avc: denied { ioctl } for pid=2134 comm="syz.3.719" path="socket:[25044]" dev="sockfs" ino=25044 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.607843][ T20] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.619994][ T20] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.637233][ T20] usb 3-1: Product: syz [ 67.644269][ T20] usb 3-1: Manufacturer: syz [ 67.688165][ T20] cdc_wdm 3-1:1.0: skipping garbage [ 67.693627][ T20] cdc_wdm 3-1:1.0: skipping garbage [ 67.740932][ T20] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 68.021399][ T60] usb 3-1: USB disconnect, device number 12 [ 68.186658][ T346] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.204341][ T346] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.334677][ T2157] fido_id[2157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.996350][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 68.996365][ T30] audit: type=1400 audit(1762212919.440:394): avc: denied { write } for pid=2172 comm="syz.2.728" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.728051][ T2189] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 69.756624][ T30] audit: type=1400 audit(1762212920.170:395): avc: denied { read append } for pid=2181 comm="syz.2.730" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.844279][ T30] audit: type=1400 audit(1762212920.170:396): avc: denied { open } for pid=2181 comm="syz.2.730" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.905949][ T30] audit: type=1400 audit(1762212920.350:397): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.917220][ T2195] device syzkaller0 entered promiscuous mode [ 70.197871][ T289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 70.547409][ T2213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2213 comm=syz.3.740 [ 70.560378][ T2213] fuse: Unknown parameter 'ãÅB¤¦Š†³ôÚfç3?$žñ±Û¬*í¡Õn‚’Ï[@Ϭ0xffffffffffffffff' [ 70.627870][ T289] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 70.636345][ T289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.647145][ T289] usb 3-1: config 0 has no interface number 0 [ 70.653482][ T289] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 70.663466][ T289] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.827898][ T289] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 70.870911][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.900726][ T289] usb 3-1: Product: syz [ 70.905108][ T289] usb 3-1: Manufacturer: syz [ 70.910341][ T289] usb 3-1: SerialNumber: syz [ 71.595111][ T289] usb 3-1: config 0 descriptor?? [ 71.780757][ T30] audit: type=1400 audit(1762212922.230:398): avc: denied { shutdown } for pid=2221 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.417791][ T289] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 72.938011][ T289] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 72.954113][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.962908][ T289] usb 4-1: Product: syz [ 72.967604][ T289] usb 4-1: Manufacturer: syz [ 73.790953][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 73.804379][ T20] usb 3-1: USB disconnect, device number 13 [ 74.064108][ T289] usb 4-1: SerialNumber: syz [ 74.074953][ T289] usb 4-1: config 0 descriptor?? [ 75.061862][ T30] audit: type=1326 audit(1762212925.510:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.085783][ T30] audit: type=1326 audit(1762212925.510:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.369908][ T30] audit: type=1326 audit(1762212925.510:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.393404][ T30] audit: type=1326 audit(1762212925.510:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.417062][ T30] audit: type=1400 audit(1762212925.510:403): avc: denied { bind } for pid=2283 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.438423][ T30] audit: type=1326 audit(1762212925.510:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.465012][ T30] audit: type=1326 audit(1762212925.510:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.718623][ T2298] netlink: 'syz.1.770': attribute type 12 has an invalid length. [ 75.727845][ T30] audit: type=1326 audit(1762212925.510:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.752338][ T30] audit: type=1326 audit(1762212925.510:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.967249][ T30] audit: type=1326 audit(1762212925.510:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6de166c9 code=0x7ffc0000 [ 75.994141][ T346] usb 4-1: USB disconnect, device number 13 [ 76.361248][ T2313] hub 1-0:1.0: USB hub found [ 76.366940][ T2313] hub 1-0:1.0: 1 port detected [ 76.597093][ T2322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.782'. [ 76.709198][ T2328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.777'. [ 78.364527][ T2348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 78.373616][ T2348] device bridge_slave_1 left promiscuous mode [ 78.380247][ T2348] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.582092][ T510] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 78.877804][ T60] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.877810][ T1675] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 78.947854][ T510] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 78.956130][ T510] usb 4-1: config 0 has no interface number 0 [ 79.127793][ T1675] usb 3-1: Using ep0 maxpacket: 32 [ 79.477839][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 79.507886][ T510] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=5f.35 [ 79.517076][ T510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.525408][ T510] usb 4-1: Product: syz [ 79.529848][ T510] usb 4-1: Manufacturer: syz [ 79.534489][ T510] usb 4-1: SerialNumber: syz [ 79.540325][ T510] usb 4-1: config 0 descriptor?? [ 79.588472][ T510] usb-storage 4-1:0.111: USB Mass Storage device detected [ 79.597871][ T60] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.606320][ T60] usb 1-1: config 0 has no interface number 0 [ 79.612977][ T510] usb-storage 4-1:0.111: device ignored [ 79.619553][ T60] usb 1-1: config 0 interface 184 has no altsetting 0 [ 79.627827][ T1675] usb 3-1: config 18 has an invalid interface number: 88 but max is 0 [ 79.644918][ T1675] usb 3-1: config 18 has no interface number 0 [ 79.652312][ T2379] netlink: 76 bytes leftover after parsing attributes in process `syz.4.803'. [ 79.661322][ T1675] usb 3-1: config 18 interface 88 has no altsetting 0 [ 79.662059][ T510] usb 4-1: USB disconnect, device number 14 [ 79.787799][ T60] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.796966][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.805041][ T60] usb 1-1: Product: syz [ 80.084218][ T60] usb 1-1: Manufacturer: syz [ 80.089012][ T60] usb 1-1: SerialNumber: syz [ 80.094725][ T60] usb 1-1: config 0 descriptor?? [ 80.138466][ T60] smsc75xx v1.0.0 [ 80.197855][ T1675] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 80.206892][ T1675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.215601][ T1675] usb 3-1: Product: syz [ 80.220022][ T1675] usb 3-1: Manufacturer: syz [ 80.224618][ T1675] usb 3-1: SerialNumber: syz [ 80.377919][ T510] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 80.762860][ T510] usb 4-1: Using ep0 maxpacket: 16 [ 80.797857][ T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 80.808870][ T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.887851][ T510] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.896896][ T510] usb 4-1: config 1 has no interface number 1 [ 80.903018][ T510] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 80.913501][ T510] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 80.917814][ T1675] asix 3-1:18.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 80.926434][ T510] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.936964][ T1675] asix: probe of 3-1:18.88 failed with error -71 [ 80.955939][ T1675] usb 3-1: USB disconnect, device number 14 [ 81.098020][ T510] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.107303][ T510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.115519][ T510] usb 4-1: Product: syz [ 81.119946][ T510] usb 4-1: Manufacturer: syz [ 81.124544][ T510] usb 4-1: SerialNumber: syz [ 81.390161][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 81.390183][ T30] audit: type=1400 audit(1762212931.840:419): avc: denied { mount } for pid=2420 comm="syz.4.818" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.647963][ T510] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 81.797807][ T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.812765][ T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 81.828609][ T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.844253][ T60] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 81.863012][ T60] usb 1-1: USB disconnect, device number 6 [ 81.970116][ T30] audit: type=1400 audit(1762212932.420:420): avc: denied { bind } for pid=2435 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.053106][ T30] audit: type=1400 audit(1762212932.500:421): avc: denied { setopt } for pid=2441 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.489834][ T2457] device syzkaller0 entered promiscuous mode [ 82.507857][ T510] usb 4-1: current rate 9338498 is different from the runtime rate 9338507 [ 82.598491][ T1675] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.867697][ T510] usb 4-1: USB disconnect, device number 15 [ 82.901648][ T30] audit: type=1400 audit(1762212933.350:422): avc: denied { mount } for pid=2475 comm="syz.1.839" name="/" dev="ramfs" ino=25737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.027762][ T1675] usb 1-1: Using ep0 maxpacket: 16 [ 83.102320][ T30] audit: type=1400 audit(1762212933.550:423): avc: denied { link } for pid=2475 comm="syz.1.839" name="file1" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.200574][ T706] udevd[706]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.208034][ T1675] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.225587][ T1675] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.236340][ T1675] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.399416][ T2494] device syzkaller0 entered promiscuous mode [ 83.417952][ T1675] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.430196][ T1675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.444068][ T1675] usb 1-1: Product: syz [ 83.459242][ T2498] netlink: 44 bytes leftover after parsing attributes in process `syz.4.847'. [ 83.469376][ T1675] usb 1-1: Manufacturer: syz [ 83.475788][ T1675] usb 1-1: SerialNumber: syz [ 83.957870][ T1675] usb 1-1: 0:2 : does not exist [ 84.014073][ T2516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'. [ 84.027760][ T2516] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.034955][ T2516] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.160054][ T2527] device syzkaller0 entered promiscuous mode [ 84.282019][ T2539] input: syz0 as /devices/virtual/input/input6 [ 84.289551][ T30] audit: type=1400 audit(1762212934.740:424): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=746 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.322317][ T30] audit: type=1400 audit(1762212934.740:425): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=746 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.355069][ T30] audit: type=1400 audit(1762212934.740:426): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=746 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.670950][ T2550] overlayfs: failed to clone upperpath [ 85.235604][ T30] audit: type=1400 audit(1762212935.680:427): avc: denied { search } for pid=2571 comm="syz.1.881" name="/" dev="configfs" ino=13148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.258355][ T30] audit: type=1400 audit(1762212935.690:428): avc: denied { read } for pid=2571 comm="syz.1.881" name="/" dev="configfs" ino=13148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.500993][ T1675] usb 1-1: USB disconnect, device number 7 [ 85.721113][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.862280][ T2617] bridge0: port 3(gretap0) entered blocking state [ 87.868837][ T2617] bridge0: port 3(gretap0) entered disabled state [ 87.884442][ T2617] device gretap0 entered promiscuous mode [ 88.550921][ T2625] hub 1-0:1.0: USB hub found [ 88.633136][ T2625] hub 1-0:1.0: 1 port detected [ 88.670565][ T2633] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.677850][ T2633] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.141961][ T2638] overlayfs: missing 'workdir' [ 89.150834][ T2638] overlayfs: failed to clone upperpath [ 89.316088][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 89.316103][ T30] audit: type=1400 audit(1762212939.761:430): avc: denied { write } for pid=2640 comm="syz.3.906" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.981014][ T30] audit: type=1400 audit(1762212948.438:431): avc: denied { getopt } for pid=2687 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.044566][ T2696] tipc: Enabling of bearer rejected, failed to enable media [ 91.047788][ T289] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.177768][ T20] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 91.297750][ T289] usb 1-1: Using ep0 maxpacket: 32 [ 91.417764][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 91.417795][ T289] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 91.431105][ T289] usb 1-1: config 0 has no interface number 0 [ 91.437164][ T289] usb 1-1: config 0 interface 184 has no altsetting 0 [ 91.537826][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 91.547553][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 91.557212][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 91.607820][ T289] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 91.617013][ T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.625320][ T289] usb 1-1: Product: syz [ 91.629667][ T289] usb 1-1: Manufacturer: syz [ 91.634308][ T289] usb 1-1: SerialNumber: syz [ 91.641248][ T289] usb 1-1: config 0 descriptor?? [ 91.688214][ T289] smsc75xx v1.0.0 [ 91.737842][ T20] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 91.747119][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.755134][ T20] usb 3-1: Product: syz [ 91.759594][ T20] usb 3-1: Manufacturer: syz [ 91.764170][ T20] usb 3-1: SerialNumber: syz [ 91.769461][ T20] usb 3-1: config 0 descriptor?? [ 91.787842][ T2686] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.012210][ T20] usb 3-1: USB disconnect, device number 15 [ 92.347808][ T289] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 92.359871][ T289] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.627938][ T289] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 92.639185][ T289] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 92.650154][ T289] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 92.660711][ T289] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 93.154507][ T30] audit: type=1326 audit(1762212950.608:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.178378][ T30] audit: type=1326 audit(1762212950.608:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.202364][ T30] audit: type=1326 audit(1762212950.608:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.227122][ T30] audit: type=1326 audit(1762212950.608:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.250666][ T30] audit: type=1326 audit(1762212950.608:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.274334][ T30] audit: type=1326 audit(1762212950.608:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.298020][ T30] audit: type=1326 audit(1762212950.608:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.321911][ T30] audit: type=1326 audit(1762212950.608:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 93.742346][ T645] usb 1-1: USB disconnect, device number 8 [ 93.837664][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 95.078548][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 95.078562][ T30] audit: type=1326 audit(1762212952.538:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.115085][ T30] audit: type=1326 audit(1762212952.568:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.156133][ T30] audit: type=1326 audit(1762212952.608:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.273334][ T2855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 95.484512][ T30] audit: type=1326 audit(1762212952.608:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.563892][ T30] audit: type=1326 audit(1762212952.608:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.587363][ T30] audit: type=1326 audit(1762212952.608:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.610754][ T30] audit: type=1326 audit(1762212952.608:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.633927][ T30] audit: type=1326 audit(1762212952.608:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.657209][ T30] audit: type=1326 audit(1762212952.608:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 95.685106][ T30] audit: type=1326 audit(1762212952.608:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 96.157761][ T624] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 96.207879][ T645] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 96.217795][ T289] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.396275][ T2899] netlink: 'syz.4.1009': attribute type 16 has an invalid length. [ 96.404221][ T2899] netlink: 'syz.4.1009': attribute type 3 has an invalid length. [ 96.412045][ T2899] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.1009'. [ 96.467870][ T645] usb 4-1: Using ep0 maxpacket: 32 [ 96.612868][ T289] usb 1-1: Using ep0 maxpacket: 16 [ 96.657833][ T624] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 96.689037][ T624] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 96.709222][ T645] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.727613][ T645] usb 4-1: config 0 has no interface number 0 [ 96.733891][ T645] usb 4-1: config 0 interface 184 has no altsetting 0 [ 96.768293][ T289] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.782956][ T289] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.795846][ T289] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.807531][ T289] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 96.814932][ T624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.848484][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.923008][ T645] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.037443][ T289] usb 1-1: config 0 descriptor?? [ 97.043396][ T624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.058822][ T645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.073906][ T624] usb 3-1: SerialNumber: syz [ 97.079555][ T645] usb 4-1: Product: syz [ 97.438617][ T645] usb 4-1: Manufacturer: syz [ 97.443243][ T645] usb 4-1: SerialNumber: syz [ 97.456090][ T645] usb 4-1: config 0 descriptor?? [ 97.482035][ T2912] overlayfs: failed to clone upperpath [ 97.488200][ T624] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 97.498522][ T645] smsc75xx v1.0.0 [ 97.503708][ T2912] overlayfs: failed to clone lowerpath [ 97.509460][ T624] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 97.517830][ T624] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 97.697917][ T289] hid-generic 0003:1E71:2009.0002: item fetching failed at offset 4/5 [ 97.707430][ T289] hid-generic: probe of 0003:1E71:2009.0002 failed with error -22 [ 97.787520][ T289] usb 3-1: USB disconnect, device number 16 [ 97.898874][ T624] usb 1-1: USB disconnect, device number 9 [ 98.207698][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 98.218649][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 98.487893][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 98.547651][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 98.557357][ T645] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 98.567137][ T645] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 99.493371][ T332] usb 4-1: USB disconnect, device number 16 [ 100.040099][ T3006] hub 1-0:1.0: USB hub found [ 100.044933][ T3006] hub 1-0:1.0: 1 port detected [ 100.077572][ T332] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 100.233066][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 100.327561][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 100.447583][ T332] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.459437][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.485108][ T332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.577519][ T346] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.047756][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.057101][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.066511][ T332] usb 4-1: Product: syz [ 101.071551][ T332] usb 4-1: Manufacturer: syz [ 101.076316][ T332] usb 4-1: SerialNumber: syz [ 101.107522][ T346] usb 1-1: Using ep0 maxpacket: 32 [ 101.228037][ T346] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.238568][ T346] usb 1-1: config 0 has no interface number 0 [ 101.254361][ T346] usb 1-1: config 0 interface 184 has no altsetting 0 [ 101.417651][ T346] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.430082][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.446417][ T346] usb 1-1: Product: syz [ 101.554297][ T346] usb 1-1: Manufacturer: syz [ 101.560225][ T346] usb 1-1: SerialNumber: syz [ 101.568990][ T332] usb 4-1: 0:2 : does not exist [ 101.575065][ T346] usb 1-1: config 0 descriptor?? [ 101.617902][ T346] smsc75xx v1.0.0 [ 101.775733][ T645] usb 4-1: USB disconnect, device number 17 [ 102.912036][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.919294][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.077431][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 103.097377][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.576864][ T3072] binder: 3071:3072 ioctl c0306201 200000000500 returned -14 [ 103.588093][ T3067] device wireguard0 entered promiscuous mode [ 103.969205][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 103.980297][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 103.993249][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 104.002886][ T346] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 105.311525][ T645] usb 1-1: USB disconnect, device number 10 [ 105.334513][ T3124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3124 comm=syz.0.1092 [ 105.436894][ T3134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'. [ 105.678825][ T3145] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 105.821226][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 105.821241][ T30] audit: type=1326 audit(1762212963.278:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.4.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x0 [ 105.867308][ T645] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 105.917224][ T60] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 106.127231][ T346] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.237303][ T645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.248259][ T645] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 106.257312][ T645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.266029][ T645] usb 3-1: config 0 descriptor?? [ 106.367205][ T346] usb 1-1: Using ep0 maxpacket: 32 [ 106.437258][ T60] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.446380][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.454491][ T60] usb 4-1: Product: syz [ 106.458695][ T60] usb 4-1: Manufacturer: syz [ 106.463268][ T60] usb 4-1: SerialNumber: syz [ 106.468513][ T60] usb 4-1: config 0 descriptor?? [ 106.487251][ T346] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.495498][ T346] usb 1-1: config 0 has no interface number 0 [ 106.501624][ T346] usb 1-1: config 0 interface 184 has no altsetting 0 [ 106.667223][ T346] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.676320][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.684392][ T346] usb 1-1: Product: syz [ 106.688783][ T346] usb 1-1: Manufacturer: syz [ 106.693417][ T346] usb 1-1: SerialNumber: syz [ 106.729276][ T346] usb 1-1: config 0 descriptor?? [ 106.761526][ T30] audit: type=1400 audit(1762212964.198:472): avc: denied { name_bind } for pid=3157 comm="syz.4.1105" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 106.783790][ T645] hid (null): unknown global tag 0xd [ 106.787590][ T346] smsc75xx v1.0.0 [ 106.790199][ T645] hid-generic 0003:1532:010D.0003: unknown global tag 0xd [ 106.799919][ T645] hid-generic 0003:1532:010D.0003: item 0 1 1 13 parsing failed [ 106.807760][ T645] hid-generic: probe of 0003:1532:010D.0003 failed with error -22 [ 106.892616][ T3166] overlayfs: failed to clone upperpath [ 107.261668][ T2833] usb 3-1: USB disconnect, device number 17 [ 107.970890][ T3186] input: syz1 as /devices/virtual/input/input7 [ 109.487135][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 109.494446][ T624] usb 4-1: USB disconnect, device number 18 [ 109.502538][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.652006][ T3203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1123'. [ 110.217058][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 110.228027][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 110.237880][ T346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 110.247980][ T346] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 110.258094][ T346] usb 1-1: USB disconnect, device number 11 [ 111.105233][ T3245] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1137'. [ 112.562643][ T3265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 112.796869][ T289] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 113.022265][ T645] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 113.336179][ T289] usb 3-1: Using ep0 maxpacket: 32 [ 113.692255][ T645] usb 4-1: device descriptor read/64, error -71 [ 113.977096][ T289] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 113.986321][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.994505][ T289] usb 3-1: Product: syz [ 113.998774][ T289] usb 3-1: Manufacturer: syz [ 114.013598][ T289] usb 3-1: SerialNumber: syz [ 114.023619][ T289] usb 3-1: config 0 descriptor?? [ 114.166803][ T645] usb 4-1: device descriptor read/64, error -71 [ 114.212636][ T3304] overlayfs: failed to clone upperpath [ 114.496778][ T645] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 114.906734][ T645] usb 4-1: device descriptor read/64, error -71 [ 115.333056][ T645] usb 4-1: device descriptor read/64, error -71 [ 115.434968][ T2833] usb 3-1: USB disconnect, device number 18 [ 116.529679][ T645] usb usb4-port1: attempt power cycle [ 116.856619][ T1675] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 116.950563][ T645] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 117.096775][ T1675] usb 1-1: Using ep0 maxpacket: 32 [ 117.126850][ T645] usb 4-1: device descriptor read/8, error -71 [ 117.216729][ T1675] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.225134][ T1675] usb 1-1: config 0 has no interface number 0 [ 117.231404][ T1675] usb 1-1: config 0 interface 184 has no altsetting 0 [ 117.397019][ T645] usb 4-1: device descriptor read/8, error -71 [ 117.404729][ T1675] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.409302][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 117.423257][ T1675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.432146][ T1675] usb 1-1: Product: syz [ 117.436769][ T1675] usb 1-1: Manufacturer: syz [ 117.441507][ T1675] usb 1-1: SerialNumber: syz [ 117.454059][ T1675] usb 1-1: config 0 descriptor?? [ 117.498537][ T1675] smsc75xx v1.0.0 [ 117.851784][ T3384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 117.860771][ T3384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 118.116780][ T1675] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 118.138182][ T1675] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 118.166731][ T1675] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 118.185103][ T1675] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 118.280688][ T30] audit: type=1400 audit(1762212975.729:473): avc: denied { write } for pid=3402 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.516515][ T624] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 118.675436][ T30] audit: type=1326 audit(1762212976.119:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.699941][ T30] audit: type=1326 audit(1762212976.129:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.723519][ T30] audit: type=1326 audit(1762212976.139:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.747669][ T30] audit: type=1326 audit(1762212976.139:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.773914][ T30] audit: type=1326 audit(1762212976.139:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.776557][ T624] usb 3-1: Using ep0 maxpacket: 32 [ 118.797747][ T30] audit: type=1326 audit(1762212976.179:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.826905][ T30] audit: type=1326 audit(1762212976.179:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.864520][ T30] audit: type=1326 audit(1762212976.179:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.888204][ T30] audit: type=1326 audit(1762212976.179:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3414 comm="syz.4.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faef6d086c9 code=0x7ffc0000 [ 118.936611][ T624] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 118.951563][ T624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.962042][ T624] usb 3-1: config 0 has no interface number 0 [ 119.246913][ T624] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=3b.9f [ 119.256393][ T624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.264087][ T2833] usb 1-1: USB disconnect, device number 12 [ 119.264532][ T624] usb 3-1: Product: syz [ 119.283182][ T624] usb 3-1: Manufacturer: syz [ 119.287916][ T624] usb 3-1: SerialNumber: syz [ 119.293015][ T624] usb 3-1: config 0 descriptor?? [ 119.336485][ T346] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 119.543683][ T60] usb 3-1: USB disconnect, device number 19 [ 119.576695][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 120.228136][ T346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.238364][ T2833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.245963][ T346] usb 4-1: config 0 has no interfaces? [ 120.251520][ T346] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 120.260740][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.269984][ T346] usb 4-1: config 0 descriptor?? [ 121.222011][ T1675] usb 4-1: USB disconnect, device number 23 [ 121.496452][ T2833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.649768][ T2833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.659992][ T2833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.756444][ T2833] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00 [ 121.765580][ T2833] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.773676][ T2833] usb 1-1: Manufacturer: syz [ 121.779003][ T2833] usb 1-1: config 0 descriptor?? [ 122.126321][ T346] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 122.247109][ T2833] hid-generic 0003:20D6:CB17.0004: unbalanced collection at end of report description [ 122.257067][ T2833] hid-generic: probe of 0003:20D6:CB17.0004 failed with error -22 [ 122.850981][ T1675] usb 1-1: USB disconnect, device number 13 [ 122.936295][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 123.056336][ T346] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.064551][ T346] usb 4-1: config 0 has no interface number 0 [ 123.070701][ T346] usb 4-1: config 0 interface 184 has no altsetting 0 [ 123.201029][ T3545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1252'. [ 123.271585][ T346] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.290850][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.307195][ T346] usb 4-1: Product: syz [ 123.311473][ T346] usb 4-1: Manufacturer: syz [ 123.316077][ T346] usb 4-1: SerialNumber: syz [ 123.744296][ T346] usb 4-1: config 0 descriptor?? [ 123.787030][ T346] smsc75xx v1.0.0 [ 124.059030][ T3576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1264'. [ 124.075940][ T3578] overlayfs: failed to clone upperpath [ 124.226270][ T346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 124.237162][ T346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 124.246829][ T346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 124.257182][ T346] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 125.783391][ T624] usb 4-1: USB disconnect, device number 24 [ 125.896173][ T3616] overlayfs: failed to clone upperpath [ 125.958696][ T3617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1276'. [ 126.866312][ T624] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 127.126040][ T332] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.376041][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 127.486101][ T624] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 127.495228][ T624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.503345][ T624] usb 4-1: Product: syz [ 127.507733][ T624] usb 4-1: Manufacturer: syz [ 127.512372][ T624] usb 4-1: SerialNumber: syz [ 127.520866][ T624] usb 4-1: config 0 descriptor?? [ 127.732202][ T332] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 127.768526][ T624] usb 4-1: USB disconnect, device number 25 [ 127.896159][ T332] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.905536][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.914278][ T332] usb 1-1: Product: syz [ 127.919074][ T332] usb 1-1: Manufacturer: syz [ 127.923979][ T332] usb 1-1: SerialNumber: syz [ 127.933728][ T332] usb 1-1: config 0 descriptor?? [ 128.244269][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1292'. [ 129.374600][ T332] usb 1-1: USB disconnect, device number 14 [ 129.725885][ T2833] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 130.205915][ T332] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 130.225977][ T2833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.396078][ T2833] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.405325][ T2833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.413535][ T2833] usb 3-1: Product: syz [ 130.417925][ T2833] usb 3-1: Manufacturer: syz [ 130.422564][ T2833] usb 3-1: SerialNumber: syz [ 130.446060][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 130.565972][ T332] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.574310][ T332] usb 4-1: config 0 has no interface number 0 [ 130.580957][ T332] usb 4-1: config 0 interface 184 has no altsetting 0 [ 130.605548][ T3702] hub 1-0:1.0: USB hub found [ 130.610660][ T3702] hub 1-0:1.0: 1 port detected [ 130.745938][ T332] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.755160][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.766009][ T332] usb 4-1: Product: syz [ 130.770296][ T332] usb 4-1: Manufacturer: syz [ 130.775019][ T332] usb 4-1: SerialNumber: syz [ 130.791250][ T332] usb 4-1: config 0 descriptor?? [ 130.836259][ T332] smsc75xx v1.0.0 [ 131.275923][ T332] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 131.287013][ T332] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 131.296748][ T332] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 131.307223][ T332] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 131.549022][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 131.549061][ T30] audit: type=1400 audit(1762212989.000:495): avc: denied { read write } for pid=3716 comm="syz.0.1316" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.578880][ T2833] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 131.582230][ T30] audit: type=1400 audit(1762212989.000:496): avc: denied { open } for pid=3716 comm="syz.0.1316" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.631711][ T2833] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 131.682243][ T2833] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 131.707886][ T30] audit: type=1400 audit(1762212989.000:497): avc: denied { ioctl } for pid=3716 comm="syz.0.1316" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.866721][ T2833] cdc_ncm 3-1:1.0: setting tx_max = 136 [ 132.027349][ T2833] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 132.093493][ T30] audit: type=1400 audit(1762212989.540:498): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 132.170775][ T30] audit: type=1400 audit(1762212989.570:499): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.213152][ T2833] usb 3-1: USB disconnect, device number 20 [ 132.215105][ T30] audit: type=1400 audit(1762212989.570:500): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=4461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.242512][ T2833] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 132.405829][ T30] audit: type=1400 audit(1762212989.570:501): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.366941][ T30] audit: type=1400 audit(1762212989.570:502): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.414056][ T60] usb 4-1: USB disconnect, device number 26 [ 133.463638][ T30] audit: type=1400 audit(1762212989.630:503): avc: denied { read } for pid=3740 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.498123][ T30] audit: type=1400 audit(1762212989.630:504): avc: denied { open } for pid=3740 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.484677][ T3777] block device autoloading is deprecated and will be removed. [ 135.218783][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'. [ 135.310029][ T3796] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 136.515491][ T1675] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 136.875564][ T1675] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.884227][ T1675] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.894444][ T1675] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.903453][ T1675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 136.914612][ T1675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 137.084063][ T1675] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.099838][ T1675] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.109719][ T1675] usb 3-1: Product: syz [ 137.113932][ T1675] usb 3-1: Manufacturer: syz [ 137.144422][ T3849] hub 1-0:1.0: USB hub found [ 137.280379][ T3853] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 137.942333][ T3849] hub 1-0:1.0: 1 port detected [ 138.046966][ T1675] cdc_wdm 3-1:1.0: skipping garbage [ 138.149528][ T1675] cdc_wdm 3-1:1.0: skipping garbage [ 138.155532][ T1675] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 138.416408][ T3875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1359'. [ 138.636651][ T346] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 139.175104][ T3890] netlink: 'syz.4.1368': attribute type 16 has an invalid length. [ 139.183121][ T3890] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1368'. [ 139.335447][ T346] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.643549][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.654685][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.664529][ T346] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.976746][ T3899] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 140.646222][ T346] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.655682][ T346] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.663761][ T346] usb 1-1: Manufacturer: syz [ 140.669606][ T346] usb 1-1: config 0 descriptor?? [ 140.678152][ T1675] usb 3-1: USB disconnect, device number 21 [ 140.752233][ T3911] syz.3.1374[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.752318][ T3911] syz.3.1374[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.148589][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 141.148603][ T30] audit: type=1400 audit(1762212998.600:513): avc: denied { read } for pid=3919 comm="syz.2.1378" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.189283][ T30] audit: type=1400 audit(1762212998.600:514): avc: denied { open } for pid=3919 comm="syz.2.1378" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.286057][ T346] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 141.293302][ T346] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 141.302359][ T346] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 141.652407][ T30] audit: type=1400 audit(1762212999.100:515): avc: denied { ioctl } for pid=3931 comm="syz.3.1382" path="socket:[30233]" dev="sockfs" ino=30233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.863408][ T346] usb 1-1: USB disconnect, device number 15 [ 142.411948][ T1675] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 142.981810][ T1675] usb 4-1: device descriptor read/64, error -71 [ 143.196966][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 143.256451][ T3964] overlayfs: failed to clone lowerpath [ 143.277869][ T3964] overlayfs: failed to clone upperpath [ 143.556542][ T1675] usb 4-1: device descriptor read/64, error -71 [ 143.825113][ T1675] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 143.985904][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 143.994955][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 144.015122][ T289] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.026193][ T3986] tipc: Enabling of bearer rejected, failed to enable media [ 144.095119][ T1675] usb 4-1: device descriptor read/64, error -71 [ 144.369834][ T3992] input: syz0 as /devices/virtual/input/input8 [ 144.370752][ T30] audit: type=1400 audit(1762213001.820:516): avc: denied { execute } for pid=3991 comm="syz.2.1404" path="/231/cpuacct.usage_percpu" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.449750][ T289] usb 1-1: Using ep0 maxpacket: 32 [ 144.575213][ T289] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.583800][ T289] usb 1-1: config 0 has no interface number 0 [ 144.685179][ T1675] usb 4-1: device descriptor read/64, error -71 [ 144.745410][ T289] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 144.755132][ T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.763380][ T289] usb 1-1: Product: syz [ 144.767995][ T289] usb 1-1: Manufacturer: syz [ 144.772712][ T289] usb 1-1: SerialNumber: syz [ 144.781666][ T289] usb 1-1: config 0 descriptor?? [ 144.805576][ T1675] usb usb4-port1: attempt power cycle [ 145.345810][ T4005] kvm: pic: non byte read [ 145.413400][ T4012] tipc: Started in network mode [ 145.423098][ T4012] tipc: Node identity 8ad2ef21554e, cluster identity 4711 [ 145.440518][ T4012] tipc: Enabled bearer , priority 0 [ 145.465120][ T4012] device syzkaller0 entered promiscuous mode [ 145.477082][ T4012] tipc: Resetting bearer [ 145.495476][ T30] audit: type=1400 audit(1762213002.950:517): avc: denied { create } for pid=4014 comm="syz.3.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 145.515094][ T4011] tipc: Resetting bearer [ 145.524438][ T4011] tipc: Disabling bearer [ 145.865009][ T332] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.485224][ T332] usb 3-1: Using ep0 maxpacket: 8 [ 147.586204][ T1675] usb 1-1: USB disconnect, device number 16 [ 147.597545][ T4045] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1425'. [ 147.684909][ T30] audit: type=1400 audit(1762213005.131:518): avc: denied { read } for pid=4046 comm="syz.0.1424" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 147.765404][ T30] audit: type=1400 audit(1762213005.131:519): avc: denied { open } for pid=4046 comm="syz.0.1424" path="/213/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 147.830728][ T30] audit: type=1400 audit(1762213005.201:520): avc: denied { relabelfrom } for pid=4051 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.856517][ T30] audit: type=1400 audit(1762213005.201:521): avc: denied { relabelto } for pid=4051 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.915368][ T332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.924548][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.964896][ T332] usb 3-1: Product: syz [ 147.969097][ T332] usb 3-1: Manufacturer: syz [ 147.973681][ T332] usb 3-1: SerialNumber: syz [ 148.100022][ T4070] tipc: Enabling of bearer rejected, failed to enable media [ 148.155923][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 148.259547][ T332] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.309110][ T4083] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 148.473289][ T4091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1440'. [ 148.756864][ T30] audit: type=1400 audit(1762213006.211:522): avc: denied { read write } for pid=4020 comm="syz.2.1416" name="lp0" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 148.808582][ T30] audit: type=1400 audit(1762213006.241:523): avc: denied { open } for pid=4020 comm="syz.2.1416" path="/dev/usb/lp0" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 149.209155][ T30] audit: type=1400 audit(1762213006.661:524): avc: denied { bind } for pid=4095 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.300982][ T30] audit: type=1400 audit(1762213006.681:525): avc: denied { listen } for pid=4095 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.322436][ T30] audit: type=1400 audit(1762213006.681:526): avc: denied { connect } for pid=4095 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.376091][ T30] audit: type=1400 audit(1762213006.681:527): avc: denied { write } for pid=4095 comm="syz.3.1443" path="socket:[30693]" dev="sockfs" ino=30693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.430991][ T332] usb 3-1: USB disconnect, device number 22 [ 149.442473][ T332] usblp0: removed [ 149.589213][ T4108] netlink: 'syz.4.1445': attribute type 12 has an invalid length. [ 149.664957][ T289] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 150.154399][ T4114] syz.1.1448[4114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.154622][ T4114] syz.1.1448[4114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.365074][ T4129] tipc: Enabling of bearer rejected, failed to enable media [ 150.804697][ T60] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 151.195018][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.374719][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.383863][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.391987][ T60] usb 3-1: Product: syz [ 151.396227][ T60] usb 3-1: Manufacturer: syz [ 151.400872][ T60] usb 3-1: SerialNumber: syz [ 152.270993][ T4160] tipc: Enabled bearer , priority 0 [ 152.288779][ T4160] device syzkaller0 entered promiscuous mode [ 152.356789][ T4160] tipc: Resetting bearer [ 152.377050][ T60] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 152.388311][ T60] cdc_ncm 3-1:1.0: bind() failure [ 152.568844][ T60] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 152.576222][ T4159] tipc: Resetting bearer [ 152.582542][ T60] cdc_ncm 3-1:1.1: bind() failure [ 152.588011][ T4159] tipc: Disabling bearer [ 153.290015][ T289] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 153.664659][ T289] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 153.688191][ T289] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.718479][ T289] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.742717][ T289] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.761774][ T289] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 153.774527][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.788454][ T289] usb 4-1: config 0 descriptor?? [ 154.422495][ T4197] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 154.430963][ T4197] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.503482][ T289] hid-generic 0003:044E:120C.0006: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 154.800394][ T346] usb 3-1: USB disconnect, device number 23 [ 154.875421][ T1675] usb 4-1: USB disconnect, device number 31 [ 154.901506][ T4205] tipc: Enabled bearer , priority 0 [ 154.923393][ T4205] device syzkaller0 entered promiscuous mode [ 154.932372][ T4205] tipc: Resetting bearer [ 154.968594][ T4204] tipc: Resetting bearer [ 154.975804][ T4204] tipc: Disabling bearer [ 155.895523][ T289] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 155.948481][ T4235] hub 1-0:1.0: USB hub found [ 155.955163][ T4235] hub 1-0:1.0: 1 port detected [ 156.284068][ T4239] tipc: Started in network mode [ 156.289032][ T4239] tipc: Node identity 6efbf7bde535, cluster identity 4711 [ 156.289056][ T289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.296342][ T4239] tipc: Enabled bearer , priority 0 [ 156.307154][ T289] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.322406][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.324908][ T4239] device syzkaller0 entered promiscuous mode [ 156.334405][ T289] usb 3-1: config 0 descriptor?? [ 156.339976][ T4239] tipc: Resetting bearer [ 156.347826][ T4238] tipc: Resetting bearer [ 156.353872][ T4238] tipc: Disabling bearer [ 156.424427][ T1675] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 156.818153][ T4255] tipc: Started in network mode [ 156.823179][ T4255] tipc: Node identity ac14140f, cluster identity 4711 [ 156.830473][ T4255] tipc: New replicast peer: 255.255.255.255 [ 156.837015][ T4255] tipc: Enabled bearer , priority 10 [ 156.974841][ T1675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.007029][ T1675] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 157.017651][ T1675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.184407][ T1675] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 157.193541][ T1675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 157.201652][ T1675] usb 1-1: Product: syz [ 157.205871][ T1675] usb 1-1: Manufacturer: syz [ 157.210478][ T1675] usb 1-1: SerialNumber: syz [ 157.215640][ T1675] usb 1-1: config 0 descriptor?? [ 157.254874][ T1675] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 157.574987][ T1675] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 157.954386][ T645] tipc: Node number set to 2886997007 [ 158.048234][ T346] usb 3-1: USB disconnect, device number 24 [ 158.174330][ T1675] usb 4-1: string descriptor 0 read error: -22 [ 158.180624][ T1675] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 158.189963][ T1675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.198900][ T1675] usb 4-1: config 0 descriptor?? [ 158.436035][ T60] usb 4-1: USB disconnect, device number 32 [ 158.464298][ T346] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 158.704267][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 158.824324][ T346] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.835306][ T346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.841952][ T346] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 158.851060][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.859659][ T346] usb 3-1: config 0 descriptor?? [ 158.931339][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 158.931354][ T30] audit: type=1400 audit(1762213016.381:532): avc: denied { setopt } for pid=4312 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.956972][ T30] audit: type=1400 audit(1762213016.381:533): avc: denied { write } for pid=4312 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.178698][ T60] usb 1-1: USB disconnect, device number 17 [ 159.200400][ T4328] tipc: Enabled bearer , priority 0 [ 159.233631][ T4328] device syzkaller0 entered promiscuous mode [ 159.244687][ T4328] tipc: Resetting bearer [ 159.254703][ T4327] tipc: Resetting bearer [ 159.267460][ T4327] tipc: Disabling bearer [ 159.475829][ T346] hid-generic 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 159.787774][ T4349] netlink: 'syz.3.1535': attribute type 12 has an invalid length. [ 160.085048][ T346] usb 3-1: USB disconnect, device number 25 [ 160.165332][ T4361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1539'. [ 161.168958][ T4381] input: syz0 as /devices/virtual/input/input9 [ 162.396584][ T4410] overlayfs: failed to clone upperpath [ 162.856273][ T4430] hub 1-0:1.0: USB hub found [ 162.871647][ T4430] hub 1-0:1.0: 1 port detected [ 163.218985][ T4438] 9pnet_virtio: no channels available for device syz [ 163.695294][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 163.704901][ T4446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 163.874012][ T346] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 164.254040][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.266340][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.276391][ T346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.295515][ T346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.312720][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.323269][ T346] usb 4-1: config 0 descriptor?? [ 164.508688][ T4478] input: syz1 as /devices/virtual/input/input10 [ 164.805928][ T346] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 164.816442][ T346] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 164.865822][ T4482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'. [ 165.193921][ T1675] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.463918][ C1] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (syz.1.1582) [ 165.481957][ T1675] usb 1-1: Using ep0 maxpacket: 8 [ 165.627481][ T1675] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 165.636199][ T1675] usb 1-1: config 0 has no interface number 0 [ 165.642474][ T1675] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 165.653329][ T1675] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 165.664181][ T1675] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.689230][ T346] usb 4-1: USB disconnect, device number 33 [ 165.853913][ T1675] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 165.863042][ T1675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.871086][ T1675] usb 1-1: Product: syz [ 165.875284][ T1675] usb 1-1: Manufacturer: syz [ 165.879915][ T1675] usb 1-1: SerialNumber: syz [ 165.888683][ T1675] usb 1-1: config 0 descriptor?? [ 166.258155][ T30] audit: type=1400 audit(1762213023.712:534): avc: denied { read } for pid=4513 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.459845][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 166.476287][ T4523] UDC core: couldn't find an available UDC or it's busy: -16 [ 166.483912][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.535461][ T4528] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 166.999928][ T4540] overlayfs: missing 'workdir' [ 167.025257][ T4540] overlayfs: missing 'lowerdir' [ 167.223814][ T346] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 168.351395][ T624] usb 1-1: USB disconnect, device number 18 [ 168.409240][ T4568] device syzkaller0 entered promiscuous mode [ 168.422420][ T4571] device wg2 entered promiscuous mode [ 168.438574][ T30] audit: type=1400 audit(1762213025.892:535): avc: denied { append } for pid=4574 comm="syz.0.1615" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.473932][ T346] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.506851][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.515990][ T346] usb 3-1: Product: syz [ 168.520210][ T346] usb 3-1: Manufacturer: syz [ 168.531120][ T346] usb 3-1: SerialNumber: syz [ 168.540648][ T346] usb 3-1: config 0 descriptor?? [ 169.212944][ T4607] ÿÿÿÿÿÿ: renamed from vlan1 [ 169.852878][ T1675] usb 3-1: USB disconnect, device number 26 [ 170.800111][ T4666] device wg2 entered promiscuous mode [ 171.318958][ T30] audit: type=1400 audit(1762213028.772:536): avc: denied { create } for pid=4673 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.518569][ T4681] hub 1-0:1.0: USB hub found [ 171.529206][ T4681] hub 1-0:1.0: 1 port detected [ 171.703689][ T30] audit: type=1400 audit(1762213029.162:537): avc: denied { execmem } for pid=4686 comm="syz.2.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.796438][ T4692] device syzkaller0 entered promiscuous mode [ 171.886617][ T4699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1658'. [ 171.910401][ T4698] device pim6reg1 entered promiscuous mode [ 172.107589][ T4720] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1667' sets config #0 [ 172.129900][ T4720] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1667' sets config #1 [ 172.407671][ T4729] device syzkaller0 entered promiscuous mode [ 172.775863][ T4755] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1679' sets config #0 [ 172.905475][ T4760] loop3: detected capacity change from 0 to 256 [ 172.907708][ T4748] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1679' sets config #1 [ 172.925796][ T30] audit: type=1400 audit(1762213030.382:538): avc: denied { remount } for pid=4757 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.969184][ T4760] exfat: Deprecated parameter 'namecase' [ 172.976163][ T4760] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 172.991803][ T4760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 173.004969][ T4766] overlayfs: missing 'lowerdir' [ 173.099680][ T4774] loop0: detected capacity change from 0 to 1024 [ 173.231995][ T4774] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.301896][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 173.456117][ T30] audit: type=1400 audit(1762213030.912:539): avc: denied { write } for pid=4773 comm="syz.0.1691" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.456258][ T4774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1691: missing EA_INODE flag [ 173.493077][ T30] audit: type=1400 audit(1762213030.912:540): avc: denied { open } for pid=4773 comm="syz.0.1691" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.552658][ T4812] tipc: Enabled bearer , priority 0 [ 173.559491][ T4774] EXT4-fs (loop0): Remounting filesystem read-only [ 173.572805][ T4774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1691: error while reading EA inode 11 err=-117 [ 173.574628][ T4812] tipc: Resetting bearer [ 173.619179][ T4774] EXT4-fs (loop0): Remounting filesystem read-only [ 173.641630][ T4811] tipc: Disabling bearer [ 173.779166][ T4828] loop2: detected capacity change from 0 to 256 [ 173.815799][ T4805] loop3: detected capacity change from 0 to 40427 [ 173.824695][ T4828] exfat: Deprecated parameter 'namecase' [ 173.864166][ T4805] F2FS-fs (loop3): fault_injection options not supported [ 173.871272][ T4805] F2FS-fs (loop3): fault_type options not supported [ 173.884690][ T4828] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 173.904637][ T4805] F2FS-fs (loop3): invalid crc value [ 173.983116][ T4828] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 173.983666][ T4805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.032702][ T4805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.033094][ T4824] loop0: detected capacity change from 0 to 40427 [ 174.048319][ T30] audit: type=1400 audit(1762213031.502:541): avc: denied { write } for pid=4804 comm="syz.3.1703" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.085378][ T30] audit: type=1400 audit(1762213031.522:542): avc: denied { write } for pid=4827 comm="syz.2.1715" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.108733][ T281] attempt to access beyond end of device [ 174.108733][ T281] loop3: rw=2049, want=45112, limit=40427 [ 174.126724][ T4824] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 174.159307][ T30] audit: type=1400 audit(1762213031.522:543): avc: denied { add_name } for pid=4827 comm="syz.2.1715" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.182339][ T30] audit: type=1400 audit(1762213031.522:544): avc: denied { create } for pid=4827 comm="syz.2.1715" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.250569][ T30] audit: type=1400 audit(1762213031.522:545): avc: denied { associate } for pid=4827 comm="syz.2.1715" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.633406][ T4864] tipc: Enabling of bearer rejected, failed to enable media [ 174.647501][ T4866] device syzkaller0 entered promiscuous mode [ 174.675968][ T4870] loop0: detected capacity change from 0 to 256 [ 174.711520][ T4876] device syzkaller0 entered promiscuous mode [ 174.845353][ T4891] loop0: detected capacity change from 0 to 128 [ 174.985493][ T4895] device syzkaller0 entered promiscuous mode [ 175.077450][ T4907] device syzkaller0 entered promiscuous mode [ 175.097485][ T4905] loop0: detected capacity change from 0 to 2048 [ 175.231062][ T4921] overlayfs: failed to clone upperpath [ 175.255834][ T4922] hub 1-0:1.0: USB hub found [ 175.283477][ T4922] hub 1-0:1.0: 1 port detected [ 175.336776][ T4905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.428866][ T4893] loop3: detected capacity change from 0 to 40427 [ 175.496318][ T4932] loop2: detected capacity change from 0 to 16 [ 175.505094][ T4893] F2FS-fs (loop3): fault_type options not supported [ 175.511719][ T4893] F2FS-fs (loop3): Unrecognized mount option "errors=remount-ro" or missing value [ 175.562741][ T4932] erofs: (device loop2): z_erofs_load_lz4_config: invalid lz4 cfgs, size=4 [ 176.439538][ T4936] loop0: detected capacity change from 0 to 40427 [ 176.457468][ T4936] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 176.484411][ T4936] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 176.492657][ T4936] F2FS-fs (loop0): fault_injection options not supported [ 176.523323][ T4936] F2FS-fs (loop0): fault_type options not supported [ 176.543671][ T4936] F2FS-fs (loop0): invalid crc value [ 176.574226][ T4936] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.639728][ T4936] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 176.649233][ T4936] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.664894][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 176.664908][ T30] audit: type=1400 audit(1762213034.122:555): avc: denied { create } for pid=4934 comm="syz.0.1756" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 176.691938][ T283] attempt to access beyond end of device [ 176.691938][ T283] loop0: rw=2049, want=45112, limit=40427 [ 176.724019][ T4955] loop2: detected capacity change from 0 to 16 [ 176.752156][ T4955] erofs: (device loop2): mounted with root inode @ nid 36. [ 176.774018][ T30] audit: type=1400 audit(1762213034.232:556): avc: denied { link } for pid=4954 comm="syz.2.1766" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.799810][ T30] audit: type=1400 audit(1762213034.232:557): avc: denied { read } for pid=4954 comm="syz.2.1766" name="file1" dev="loop2" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.823727][ T30] audit: type=1400 audit(1762213034.232:558): avc: denied { write } for pid=4954 comm="syz.2.1766" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.845141][ T30] audit: type=1400 audit(1762213034.232:559): avc: denied { open } for pid=4954 comm="syz.2.1766" path=2F202864656C6574656429 dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.885631][ T30] audit: type=1400 audit(1762213034.232:560): avc: denied { setattr } for pid=4954 comm="syz.2.1766" name="#1545" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.911859][ T30] audit: type=1400 audit(1762213034.232:561): avc: denied { unlink } for pid=286 comm="syz-executor" name="bus" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.073727][ T4959] loop3: detected capacity change from 0 to 40427 [ 177.166063][ T4959] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.179453][ T30] audit: type=1400 audit(1762213034.632:562): avc: denied { create } for pid=4985 comm="syz.1.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.201702][ T30] audit: type=1400 audit(1762213034.662:563): avc: denied { bind } for pid=4985 comm="syz.1.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.228826][ T4959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.254148][ T30] audit: type=1400 audit(1762213034.712:564): avc: denied { quotaon } for pid=4958 comm="syz.3.1769" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 177.277056][ T281] attempt to access beyond end of device [ 177.277056][ T281] loop3: rw=2049, want=45104, limit=40427 [ 177.467985][ T4993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1781'. [ 177.770239][ T5021] loop2: detected capacity change from 0 to 256 [ 177.830557][ T5021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 177.917804][ T5029] device syzkaller0 entered promiscuous mode [ 178.026734][ T5038] tipc: Enabled bearer , priority 0 [ 178.038734][ T5038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.051857][ T5038] tipc: Resetting bearer [ 178.062951][ T5036] tipc: Resetting bearer [ 178.070416][ T5036] tipc: Disabling bearer [ 178.081997][ T5042] device syzkaller0 entered promiscuous mode [ 178.130267][ T5048] loop3: detected capacity change from 0 to 1024 [ 178.179534][ T5048] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.214135][ T5052] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.214227][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 178.242686][ T5052] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 178.267648][ T5052] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 178.269891][ T5062] device syzkaller0 entered promiscuous mode [ 178.276864][ T5048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1805: missing EA_INODE flag [ 178.294647][ T5052] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 178.295463][ T5048] EXT4-fs (loop3): Remounting filesystem read-only [ 178.302958][ T5052] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 178.310799][ T5048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1805: error while reading EA inode 11 err=-117 [ 178.317912][ T5052] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 178.331502][ T5048] EXT4-fs (loop3): Remounting filesystem read-only [ 178.338980][ T5052] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 178.353021][ T5052] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 178.361472][ T5052] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 178.369744][ T5052] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 178.386697][ T5047] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1805: missing EA_INODE flag [ 178.418086][ T5047] EXT4-fs (loop3): Remounting filesystem read-only [ 178.430087][ T5047] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1805: error while reading EA inode 11 err=-117 [ 178.442676][ T5047] EXT4-fs (loop3): Remounting filesystem read-only [ 178.602638][ T5080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1819'. [ 178.933206][ T5084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 179.001780][ T5090] device syzkaller0 entered promiscuous mode [ 179.024705][ T5093] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1823'. [ 179.938726][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'. [ 179.992930][ T5124] overlayfs: failed to clone upperpath [ 180.210788][ T5135] hub 1-0:1.0: USB hub found [ 180.223474][ T5135] hub 1-0:1.0: 1 port detected [ 180.763073][ T645] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 181.353213][ T645] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.380286][ T645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.473097][ T645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.498286][ T645] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.643079][ T645] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.652146][ T645] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.660547][ T645] usb 4-1: Manufacturer: syz [ 181.687354][ T645] usb 4-1: config 0 descriptor?? [ 181.813370][ T624] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 182.153031][ T624] usb 1-1: device descriptor read/64, error -71 [ 182.210003][ T645] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 182.226290][ T645] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 182.251754][ T645] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 182.562946][ T624] usb 1-1: device descriptor read/64, error -71 [ 182.584495][ T5187] device pim6reg1 entered promiscuous mode [ 182.804524][ T645] usb 4-1: USB disconnect, device number 34 [ 182.853119][ T624] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 183.029600][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'. [ 183.152890][ T624] usb 1-1: device descriptor read/64, error -71 [ 183.848707][ T5203] loop2: detected capacity change from 0 to 40427 [ 183.894871][ T5203] F2FS-fs (loop2): fault_injection options not supported [ 183.912955][ T5203] F2FS-fs (loop2): fault_type options not supported [ 183.929556][ T5203] F2FS-fs (loop2): invalid crc value [ 183.936390][ T5203] F2FS-fs (loop2): Found nat_bits in checkpoint [ 183.970311][ T5203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 183.978017][ T624] usb 1-1: device descriptor read/64, error -71 [ 184.027736][ T286] attempt to access beyond end of device [ 184.027736][ T286] loop2: rw=2049, want=45112, limit=40427 [ 184.102986][ T624] usb usb1-port1: attempt power cycle [ 185.014790][ T5224] device pim6reg1 entered promiscuous mode [ 185.103239][ T5231] tipc: Enabled bearer , priority 0 [ 185.194515][ T5231] tipc: Resetting bearer [ 185.212528][ T5230] tipc: Disabling bearer [ 186.022775][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 186.022793][ T30] audit: type=1326 audit(1762213043.463:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.149821][ T30] audit: type=1326 audit(1762213043.463:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.197643][ T30] audit: type=1326 audit(1762213043.463:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.260805][ T30] audit: type=1326 audit(1762213043.463:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.352192][ T30] audit: type=1326 audit(1762213043.463:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.441617][ T30] audit: type=1326 audit(1762213043.463:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.472796][ T60] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 186.524506][ T30] audit: type=1326 audit(1762213043.463:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.643273][ T346] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 186.663638][ T30] audit: type=1326 audit(1762213043.463:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9f2f86c9 code=0x7ffc0000 [ 186.772723][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 186.894367][ T60] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.133152][ T60] usb 1-1: config 179 has no interface number 0 [ 187.149614][ T60] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 187.192677][ T346] usb 3-1: device descriptor read/64, error -71 [ 187.202821][ T60] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 187.272692][ T60] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.355472][ T60] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 187.382897][ T60] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.397282][ T60] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 187.410948][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.442953][ T5258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.612703][ T346] usb 3-1: device descriptor read/64, error -71 [ 187.765888][ T60] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 187.882664][ T346] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 187.950323][ T60] usb 1-1: USB disconnect, device number 22 [ 187.962626][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.970942][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.982216][ T60] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.162642][ T346] usb 3-1: device descriptor read/64, error -71 [ 188.220137][ T5288] tipc: Enabled bearer , priority 0 [ 188.239628][ T5288] tipc: Resetting bearer [ 188.261050][ T5287] tipc: Disabling bearer [ 188.375184][ T5297] device pim6reg1 entered promiscuous mode [ 188.507698][ T5303] device pim6reg1 entered promiscuous mode [ 188.562623][ T346] usb 3-1: device descriptor read/64, error -71 [ 188.702674][ T346] usb usb3-port1: attempt power cycle [ 188.948580][ T5315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1901'. [ 189.112605][ T346] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 189.523861][ T5320] input: syz1 as /devices/virtual/input/input12 [ 189.612536][ T346] usb 3-1: device not accepting address 29, error -71 [ 189.736092][ T5336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1913'. [ 190.726093][ T5355] tipc: Enabled bearer , priority 0 [ 190.750005][ T5355] tipc: Resetting bearer [ 190.782687][ T5354] tipc: Disabling bearer [ 190.912808][ T30] audit: type=1400 audit(1762213048.373:578): avc: denied { ioctl } for pid=5359 comm="syz.2.1921" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.153412][ T5371] hub 1-0:1.0: USB hub found [ 191.172459][ T5371] hub 1-0:1.0: 1 port detected [ 191.853347][ T5395] device pim6reg1 entered promiscuous mode [ 192.030751][ T5404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1934'. [ 194.030413][ T5453] input: syz1 as /devices/virtual/input/input13 [ 194.069088][ T5456] tipc: Enabled bearer , priority 0 [ 194.103701][ T5456] device syzkaller0 entered promiscuous mode [ 194.119499][ T5456] tipc: Resetting bearer [ 194.142179][ T5455] tipc: Resetting bearer [ 194.163053][ T5455] tipc: Disabling bearer [ 194.210185][ T5461] device pim6reg1 entered promiscuous mode [ 194.687945][ T5487] tipc: Enabling of bearer rejected, failed to enable media [ 195.401168][ T5507] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 195.433052][ T5508] device pim6reg1 entered promiscuous mode [ 196.675199][ T30] audit: type=1400 audit(1762213054.133:579): avc: denied { setopt } for pid=5530 comm="syz.4.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.676110][ T5531] ================================================================== [ 196.702567][ T5531] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 196.711784][ T5531] Read of size 1 at addr ffff88810ed1fbf8 by task syz.4.1979/5531 [ 196.719587][ T5531] [ 196.721914][ T5531] CPU: 0 PID: 5531 Comm: syz.4.1979 Not tainted syzkaller #0 [ 196.729279][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.732182][ T645] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 196.739339][ T5531] Call Trace: [ 196.739348][ T5531] [ 196.739356][ T5531] __dump_stack+0x21/0x30 [ 196.757370][ T5531] dump_stack_lvl+0xee/0x150 [ 196.761969][ T5531] ? show_regs_print_info+0x20/0x20 [ 196.767172][ T5531] ? load_image+0x3a0/0x3a0 [ 196.771682][ T5531] ? unwind_get_return_address+0x4d/0x90 [ 196.777321][ T5531] print_address_description+0x7f/0x2c0 [ 196.782877][ T5531] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 196.789383][ T5531] kasan_report+0xf1/0x140 [ 196.793800][ T5531] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 196.800308][ T5531] __asan_report_load1_noabort+0x14/0x20 [ 196.805949][ T5531] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 196.812285][ T5531] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 196.818453][ T5531] ? xfrm_netlink_rcv+0x72/0x90 [ 196.823310][ T5531] ? netlink_unicast+0x876/0xa40 [ 196.828254][ T5531] ? netlink_sendmsg+0x86a/0xb70 [ 196.833191][ T5531] ? ____sys_sendmsg+0x5a2/0x8c0 [ 196.838134][ T5531] ? ___sys_sendmsg+0x1f0/0x260 [ 196.842986][ T5531] ? x64_sys_call+0x4b/0x9a0 [ 196.847575][ T5531] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.853651][ T5531] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 196.859808][ T5531] xfrm_policy_inexact_insert+0x70/0x1130 [ 196.865533][ T5531] ? __get_hash_thresh+0x10c/0x420 [ 196.870649][ T5531] ? policy_hash_bysel+0x110/0x4f0 [ 196.875760][ T5531] xfrm_policy_insert+0x126/0x9a0 [ 196.880782][ T5531] ? xfrm_policy_construct+0x54f/0x1f00 [ 196.886337][ T5531] xfrm_add_policy+0x4d1/0x830 [ 196.891114][ T5531] ? xfrm_dump_sa_done+0xc0/0xc0 [ 196.896058][ T5531] xfrm_user_rcv_msg+0x45c/0x6e0 [ 196.900993][ T5531] ? xfrm_netlink_rcv+0x90/0x90 [ 196.905847][ T5531] ? avc_has_perm_noaudit+0x460/0x460 [ 196.911216][ T5531] ? x64_sys_call+0x4b/0x9a0 [ 196.915813][ T5531] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 196.921184][ T5531] netlink_rcv_skb+0x1e0/0x430 [ 196.925946][ T5531] ? xfrm_netlink_rcv+0x90/0x90 [ 196.930795][ T5531] ? netlink_ack+0xb60/0xb60 [ 196.935377][ T5531] ? wait_for_completion_killable_timeout+0x10/0x10 [ 196.941955][ T5531] ? __netlink_lookup+0x387/0x3b0 [ 196.946965][ T5531] xfrm_netlink_rcv+0x72/0x90 [ 196.951629][ T5531] netlink_unicast+0x876/0xa40 [ 196.956377][ T5531] netlink_sendmsg+0x86a/0xb70 [ 196.961126][ T5531] ? netlink_getsockopt+0x530/0x530 [ 196.966305][ T5531] ? sock_alloc_file+0xba/0x260 [ 196.971143][ T5531] ? security_socket_sendmsg+0x82/0xa0 [ 196.976584][ T5531] ? netlink_getsockopt+0x530/0x530 [ 196.981767][ T5531] ____sys_sendmsg+0x5a2/0x8c0 [ 196.986520][ T5531] ? __sys_sendmsg_sock+0x40/0x40 [ 196.991536][ T5531] ? import_iovec+0x7c/0xb0 [ 196.996024][ T5531] ___sys_sendmsg+0x1f0/0x260 [ 197.000686][ T5531] ? __sys_sendmsg+0x250/0x250 [ 197.005439][ T5531] ? __fdget+0x1a1/0x230 [ 197.009671][ T5531] __x64_sys_sendmsg+0x1e2/0x2a0 [ 197.014593][ T5531] ? ___sys_sendmsg+0x260/0x260 [ 197.019430][ T5531] ? __kasan_check_write+0x14/0x20 [ 197.024525][ T5531] ? switch_fpu_return+0x15d/0x2c0 [ 197.029621][ T5531] x64_sys_call+0x4b/0x9a0 [ 197.034018][ T5531] do_syscall_64+0x4c/0xa0 [ 197.038421][ T5531] ? clear_bhb_loop+0x50/0xa0 [ 197.043080][ T5531] ? clear_bhb_loop+0x50/0xa0 [ 197.047736][ T5531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.053627][ T5531] RIP: 0033:0x7faef6d086c9 [ 197.058026][ T5531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.077617][ T5531] RSP: 002b:00007faef5770038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.086018][ T5531] RAX: ffffffffffffffda RBX: 00007faef6f5efa0 RCX: 00007faef6d086c9 [ 197.093974][ T5531] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 197.101933][ T5531] RBP: 00007faef6d8af91 R08: 0000000000000000 R09: 0000000000000000 [ 197.109886][ T5531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.117839][ T5531] R13: 00007faef6f5f038 R14: 00007faef6f5efa0 R15: 00007ffffc8f1c38 [ 197.125799][ T5531] [ 197.128800][ T5531] [ 197.131102][ T5531] Allocated by task 5531: [ 197.135411][ T5531] __kasan_kmalloc+0xda/0x110 [ 197.140074][ T5531] __kmalloc+0x13d/0x2c0 [ 197.144300][ T5531] sk_prot_alloc+0xed/0x320 [ 197.148793][ T5531] sk_alloc+0x38/0x430 [ 197.152857][ T5531] pfkey_create+0x12a/0x660 [ 197.157350][ T5531] __sock_create+0x38d/0x7a0 [ 197.161937][ T5531] __sys_socket+0xec/0x190 [ 197.166350][ T5531] __x64_sys_socket+0x7a/0x90 [ 197.171034][ T5531] x64_sys_call+0x8c5/0x9a0 [ 197.175536][ T5531] do_syscall_64+0x4c/0xa0 [ 197.179947][ T5531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.185829][ T5531] [ 197.188138][ T5531] The buggy address belongs to the object at ffff88810ed1f800 [ 197.188138][ T5531] which belongs to the cache kmalloc-1k of size 1024 [ 197.202175][ T5531] The buggy address is located 1016 bytes inside of [ 197.202175][ T5531] 1024-byte region [ffff88810ed1f800, ffff88810ed1fc00) [ 197.215609][ T5531] The buggy address belongs to the page: [ 197.221221][ T5531] page:ffffea00043b4600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ed18 [ 197.231452][ T5531] head:ffffea00043b4600 order:3 compound_mapcount:0 compound_pincount:0 [ 197.239761][ T5531] flags: 0x4000000000010200(slab|head|zone=1) [ 197.245832][ T5531] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 197.254409][ T5531] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 197.262978][ T5531] page dumped because: kasan: bad access detected [ 197.269375][ T5531] page_owner tracks the page as allocated [ 197.275084][ T5531] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 26, ts 24848884309, free_ts 24822016428 [ 197.294778][ T5531] post_alloc_hook+0x192/0x1b0 [ 197.299541][ T5531] prep_new_page+0x1c/0x110 [ 197.304033][ T5531] get_page_from_freelist+0x2cc5/0x2d50 [ 197.309560][ T5531] __alloc_pages+0x18f/0x440 [ 197.314133][ T5531] new_slab+0xa1/0x4d0 [ 197.318192][ T5531] ___slab_alloc+0x381/0x810 [ 197.322767][ T5531] __slab_alloc+0x49/0x90 [ 197.327079][ T5531] __kmalloc_track_caller+0x169/0x2c0 [ 197.332435][ T5531] __alloc_skb+0x21a/0x740 [ 197.336838][ T5531] inet6_rt_notify+0x287/0x470 [ 197.341585][ T5531] fib6_add+0x2279/0x3d10 [ 197.345899][ T5531] ip6_ins_rt+0xc5/0x110 [ 197.350122][ T5531] __ipv6_ifa_notify+0x4bf/0xdb0 [ 197.355039][ T5531] addrconf_dad_completed+0x179/0xe70 [ 197.360392][ T5531] addrconf_dad_work+0xc72/0x1540 [ 197.365397][ T5531] process_one_work+0x6be/0xba0 [ 197.370239][ T5531] page last free stack trace: [ 197.374886][ T5531] free_unref_page_prepare+0x542/0x550 [ 197.380331][ T5531] free_unref_page+0xa2/0x550 [ 197.384990][ T5531] __free_pages+0x6c/0x100 [ 197.389389][ T5531] __free_slab+0xe8/0x1e0 [ 197.393705][ T5531] __unfreeze_partials+0x160/0x190 [ 197.398801][ T5531] put_cpu_partial+0xc6/0x120 [ 197.403464][ T5531] __slab_free+0x1d4/0x290 [ 197.407864][ T5531] ___cache_free+0x104/0x120 [ 197.412438][ T5531] qlink_free+0x4d/0x90 [ 197.416576][ T5531] qlist_free_all+0x5f/0xb0 [ 197.421061][ T5531] kasan_quarantine_reduce+0x14a/0x170 [ 197.426503][ T5531] __kasan_slab_alloc+0x2f/0xf0 [ 197.431334][ T5531] slab_post_alloc_hook+0x4f/0x2b0 [ 197.436544][ T5531] __kmalloc_track_caller+0x11f/0x2c0 [ 197.441920][ T5531] kmemdup_nul+0x2c/0xa0 [ 197.446153][ T5531] vfs_parse_fs_string+0xc8/0x160 [ 197.451165][ T5531] [ 197.453470][ T5531] Memory state around the buggy address: [ 197.459079][ T5531] ffff88810ed1fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 197.467121][ T5531] ffff88810ed1fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 197.475170][ T5531] >ffff88810ed1fb80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 197.483205][ T5531] ^ [ 197.491165][ T5531] ffff88810ed1fc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.499206][ T5531] ffff88810ed1fc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.507244][ T5531] ================================================================== [ 197.515283][ T5531] Disabling lock debugging due to kernel taint [ 197.583825][ T30] audit: type=1400 audit(1762213055.043:580): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 197.607480][ T30] audit: type=1400 audit(1762213055.043:581): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.632358][ T30] audit: type=1400 audit(1762213055.043:582): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.697614][ T30] audit: type=1400 audit(1762213055.043:583): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.726732][ T30] audit: type=1400 audit(1762213055.043:584): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.754018][ T30] audit: type=1400 audit(1762213055.043:585): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.777027][ T30] audit: type=1400 audit(1762213055.043:586): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.800040][ T30] audit: type=1400 audit(1762213055.063:587): avc: denied { ioctl } for pid=5524 comm="syz.2.1980" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.822085][ T645] usb 3-1: device descriptor read/64, error -71 [ 198.232075][ T645] usb 3-1: device descriptor read/64, error -71 [ 198.502051][ T645] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 198.772041][ T645] usb 3-1: device descriptor read/64, error -71 [ 199.161992][ T645] usb 3-1: device descriptor read/64, error -71 [ 199.282391][ T645] usb usb3-port1: attempt power cycle