last executing test programs: 4m11.753175351s ago: executing program 3 (id=444): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4m10.266257161s ago: executing program 3 (id=448): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 4m9.871801326s ago: executing program 3 (id=452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000002000700000000000000000000000000e000000200000000000000000000000040000000330000000000000000000000000000000000000000000000ef00"/243], 0x13c}}, 0x20000880) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4m9.673110981s ago: executing program 3 (id=455): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={0x0}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe3a) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 4m9.065544905s ago: executing program 3 (id=459): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4m5.760381587s ago: executing program 3 (id=474): r0 = msgget$private(0x0, 0xafb0e20fef648796) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x2e}, 0x0, 0x0, 0xac, 0x6, 0x3, 0x7ff, 0x780487a8, 0x7, 0x5, 0xa}) 4m5.464848014s ago: executing program 32 (id=474): r0 = msgget$private(0x0, 0xafb0e20fef648796) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x2e}, 0x0, 0x0, 0xac, 0x6, 0x3, 0x7ff, 0x780487a8, 0x7, 0x5, 0xa}) 4m4.009232219s ago: executing program 2 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000085850000008200000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m3.438428362s ago: executing program 2 (id=493): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m1.980678792s ago: executing program 2 (id=497): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4m1.620027181s ago: executing program 2 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 4m1.522536697s ago: executing program 2 (id=503): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 4m1.22935646s ago: executing program 2 (id=508): openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x10bc80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) 4m0.955945382s ago: executing program 33 (id=508): openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x10bc80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) 16.49317392s ago: executing program 0 (id=1468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1'}, 0xb) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/26, 0x1a}], 0x1}, 0xfffffffe}], 0x1, 0x40002001, 0x0) 15.862264497s ago: executing program 0 (id=1472): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/78, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 15.614717436s ago: executing program 0 (id=1475): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000004740)={0x1, 0x0, 0x3, 0x8, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 14.591350683s ago: executing program 0 (id=1480): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 14.458357539s ago: executing program 0 (id=1481): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pipe2(&(0x7f00000001c0), 0x4000) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 12.480447172s ago: executing program 0 (id=1485): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000004740)={0x1, 0x0, 0x3, 0x8, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40844) 12.338026913s ago: executing program 34 (id=1485): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000004740)={0x1, 0x0, 0x3, 0x8, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40844) 9.730204924s ago: executing program 4 (id=1501): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48}) 9.651468555s ago: executing program 4 (id=1502): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) r2 = socket$inet(0x2, 0xa, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pipe2(&(0x7f0000000440), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x6}}}}, @qdisc_kind_options=@q_skbprio={{}, {0xfffffffffffffdb8, 0x2, 0xfff}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 6.658481513s ago: executing program 4 (id=1506): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pipe2(&(0x7f00000001c0), 0x4000) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.417016687s ago: executing program 4 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174130900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a310000000008000240f5"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.972149336s ago: executing program 1 (id=1510): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000002"], 0x138) 5.636529181s ago: executing program 1 (id=1513): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0) 5.585165819s ago: executing program 6 (id=1514): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f6, 0x880e, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 4.865779737s ago: executing program 6 (id=1515): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @rand_addr=0x64010101}, 0xfffffffffffffeea) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x9782819d2de61e60, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xac}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = fanotify_init(0x0, 0x1) fanotify_mark(r5, 0x641, 0x4800003a, 0xffffffffffffffff, 0x0) fanotify_mark(r5, 0x61, 0x40001013, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x80) 4.686048385s ago: executing program 5 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006c6f00000000000000000000000000001400168010"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) 4.101045704s ago: executing program 1 (id=1517): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.05315324s ago: executing program 5 (id=1518): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4.018782369s ago: executing program 4 (id=1519): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="40a235000000"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 3.936872461s ago: executing program 6 (id=1520): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 3.915124875s ago: executing program 1 (id=1521): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_gpio_in\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.872190202s ago: executing program 5 (id=1522): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000002"], 0x138) 3.68177399s ago: executing program 6 (id=1523): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a0236910102030109022400"], 0x0) 3.681189348s ago: executing program 5 (id=1524): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x101040) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x569) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r5, &(0x7f00000001c0), 0x0}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 2.958548939s ago: executing program 1 (id=1525): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x1}, 0x1) 2.445742617s ago: executing program 5 (id=1526): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r0=>0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) fcntl$setown(0xffffffffffffffff, 0x8, r2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040880) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x28) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) 1.314494616s ago: executing program 5 (id=1527): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200a45000000455161639c545d2ce9daa7602630c6863773691b23932044bab1c700e1363bc025b77c5bdfd5f72e4e651207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.274292622s ago: executing program 1 (id=1528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 329.822446ms ago: executing program 6 (id=1529): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) sendmsg$can_bcm(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 185.193758ms ago: executing program 6 (id=1530): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="d424c410930445c4dbdcca1983"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r6=>0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) 0s ago: executing program 4 (id=1531): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): config 0 has no interfaces? [ 230.581689][ T5867] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 230.599753][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.636358][ T5867] usb 6-1: Product: syz [ 230.642601][ T8683] sp0: Synchronizing with TNC [ 230.647027][ T29] audit: type=1400 audit(1739288176.061:1014): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 230.651190][ T5867] usb 6-1: Manufacturer: syz [ 230.842958][ T5867] usb 6-1: SerialNumber: syz [ 230.850182][ T5867] usb 6-1: config 0 descriptor?? [ 231.490121][ T29] audit: type=1400 audit(1739288176.911:1015): avc: denied { block_suspend } for pid=8668 comm="syz.5.807" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.599780][ T29] audit: type=1400 audit(1739288177.011:1016): avc: denied { sys_module } for pid=8668 comm="syz.5.807" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 231.647585][ T29] audit: type=1400 audit(1739288177.011:1017): avc: denied { module_load } for pid=8668 comm="syz.5.807" path="/sys/power/wakeup_count" dev="sysfs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 231.763551][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 231.774188][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 232.000443][ T25] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 232.037883][ T29] audit: type=1400 audit(1739288177.461:1018): avc: denied { watch } for pid=8701 comm="syz.6.813" path="/52/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 232.103013][ T29] audit: type=1400 audit(1739288177.461:1019): avc: denied { watch_sb watch_reads } for pid=8701 comm="syz.6.813" path="/52/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.185574][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 232.204649][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.214422][ T25] usb 2-1: Product: syz [ 232.218638][ T25] usb 2-1: Manufacturer: syz [ 232.224902][ T25] usb 2-1: SerialNumber: syz [ 232.273030][ T25] usb 2-1: config 0 descriptor?? [ 232.719426][ T866] usb 6-1: USB disconnect, device number 5 [ 233.234538][ T8729] netlink: 'syz.6.826': attribute type 1 has an invalid length. [ 233.759860][ T25] airspy 2-1:0.0: Board ID: 00 [ 233.769890][ T25] airspy 2-1:0.0: Firmware version: [ 234.059379][ T29] audit: type=1400 audit(1739288179.481:1020): avc: denied { getopt } for pid=8717 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.374997][ T29] audit: type=1400 audit(1739288179.801:1021): avc: denied { getopt } for pid=8742 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.951391][ T25] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 234.966222][ T25] airspy 2-1:0.0: Registered as swradio24 [ 234.972020][ T25] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 234.985675][ T25] usb 2-1: USB disconnect, device number 9 [ 236.310992][ T29] audit: type=1400 audit(1739288181.741:1022): avc: denied { execmem } for pid=8765 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.371741][ T29] audit: type=1400 audit(1739288181.771:1023): avc: denied { read } for pid=8767 comm="syz.5.836" dev="nsfs" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.485614][ T29] audit: type=1400 audit(1739288181.771:1024): avc: denied { open } for pid=8767 comm="syz.5.836" path="net:[4026533106]" dev="nsfs" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.539290][ T29] audit: type=1400 audit(1739288181.771:1025): avc: denied { create } for pid=8767 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.644200][ T29] audit: type=1400 audit(1739288181.781:1026): avc: denied { create } for pid=8767 comm="syz.5.836" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.240429][ T29] audit: type=1400 audit(1739288181.781:1027): avc: denied { map } for pid=8767 comm="syz.5.836" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.291662][ T8781] overlayfs: overlapping lowerdir path [ 237.350032][ T29] audit: type=1400 audit(1739288181.781:1028): avc: denied { read write } for pid=8767 comm="syz.5.836" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.411561][ T29] audit: type=1400 audit(1739288181.841:1029): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 238.269852][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 238.449732][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 238.470289][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.470355][ T53] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 238.490806][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.549904][ T25] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 238.702718][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.736305][ T25] usb 5-1: config 0 descriptor?? [ 239.863334][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 239.870183][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.842556][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 240.848725][ T29] audit: type=1400 audit(1739288185.391:1065): avc: denied { write } for pid=8807 comm="syz.0.851" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 240.886014][ T25] usb 5-1: USB disconnect, device number 7 [ 241.449861][ T29] audit: type=1400 audit(1739288185.801:1066): avc: denied { create } for pid=8816 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.527115][ T29] audit: type=1400 audit(1739288186.731:1067): avc: denied { sqpoll } for pid=8816 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.273527][ T8835] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 243.025649][ T8835] CIFS: Unable to determine destination address [ 243.038266][ T29] audit: type=1400 audit(1739288188.231:1068): avc: denied { connect } for pid=8830 comm="syz.4.858" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.118853][ T29] audit: type=1400 audit(1739288188.231:1069): avc: denied { write } for pid=8830 comm="syz.4.858" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.431398][ T29] audit: type=1400 audit(1739288188.861:1070): avc: denied { write } for pid=8844 comm="syz.0.864" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.488514][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.740086][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 243.801874][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 243.927496][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.994178][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.055870][ T29] audit: type=1400 audit(1739288189.471:1071): avc: denied { read } for pid=8853 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.229722][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.292140][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.327918][ T29] audit: type=1400 audit(1739288189.741:1072): avc: denied { ioctl } for pid=8856 comm="syz.0.867" path="socket:[21100]" dev="sockfs" ino=21100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.370241][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.427423][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.704822][ T25] usb 2-1: usb_control_msg returned -32 [ 244.738319][ T25] usbtmc 2-1:16.0: can't read capabilities [ 244.789945][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 244.854417][ T29] audit: type=1400 audit(1739288190.281:1073): avc: denied { read write } for pid=8868 comm="syz.4.870" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 244.909448][ T29] audit: type=1400 audit(1739288190.281:1074): avc: denied { open } for pid=8868 comm="syz.4.870" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 244.979656][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 245.814837][ T8878] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 245.942824][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.954068][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.964906][ T5817] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 245.973971][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.003483][ T5817] usb 1-1: config 0 descriptor?? [ 246.091148][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 246.091162][ T29] audit: type=1400 audit(1739288191.521:1079): avc: denied { create } for pid=8885 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.896521][ T5817] usbhid 1-1:0.0: can't add hid device: -71 [ 246.902596][ T5817] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 246.916180][ T5817] usb 1-1: USB disconnect, device number 8 [ 247.014800][ T29] audit: type=1400 audit(1739288192.441:1080): avc: denied { read } for pid=8895 comm="syz.5.878" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.080056][ T5867] usb 2-1: USB disconnect, device number 10 [ 247.162276][ T29] audit: type=1400 audit(1739288192.441:1081): avc: denied { open } for pid=8895 comm="syz.5.878" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.207578][ T29] audit: type=1400 audit(1739288192.441:1082): avc: denied { ioctl } for pid=8895 comm="syz.5.878" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.244938][ T29] audit: type=1400 audit(1739288192.481:1083): avc: denied { setopt } for pid=8896 comm="syz.0.879" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.297723][ T29] audit: type=1400 audit(1739288192.481:1084): avc: denied { bind } for pid=8896 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.327065][ T29] audit: type=1400 audit(1739288192.481:1085): avc: denied { ioctl } for pid=8896 comm="syz.0.879" path="socket:[21928]" dev="sockfs" ino=21928 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.154883][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 248.315782][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 248.335069][ T5829] usb 7-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 248.363630][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.420604][ T5829] usb 7-1: Product: syz [ 248.435253][ T5829] usb 7-1: Manufacturer: syz [ 248.450472][ T5829] usb 7-1: SerialNumber: syz [ 248.553565][ T5829] usb 7-1: config 0 descriptor?? [ 248.574118][ T5829] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 248.598186][ T29] audit: type=1400 audit(1739288194.021:1086): avc: denied { read write } for pid=8920 comm="syz.5.887" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.766739][ T29] audit: type=1400 audit(1739288194.021:1087): avc: denied { ioctl open } for pid=8920 comm="syz.5.887" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.815550][ T8926] sp0: Synchronizing with TNC [ 248.859143][ T29] audit: type=1400 audit(1739288194.251:1088): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 248.933304][ T8923] Cannot find set identified by id 0 to match [ 249.359691][ T8] IPVS: starting estimator thread 0... [ 249.365984][ T866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 249.373713][ T5867] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.531411][ T8945] IPVS: using max 29 ests per chain, 69600 per kthread [ 249.589855][ T866] usb 5-1: Using ep0 maxpacket: 8 [ 249.606737][ T5867] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.620800][ T866] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 249.629013][ T866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.649401][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 249.666752][ T5867] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 249.680141][ T866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.696299][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.706273][ T866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.718070][ T5867] usb 2-1: config 0 descriptor?? [ 249.727607][ T866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.741936][ T866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.751470][ T866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.868380][ T5829] input: sonixj as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23 [ 249.993473][ T866] usb 5-1: usb_control_msg returned -32 [ 250.017483][ T866] usbtmc 5-1:16.0: can't read capabilities [ 250.054749][ T8949] netlink: 'syz.0.898': attribute type 4 has an invalid length. [ 250.638107][ T5867] ntrig 0003:1B96:0009.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.1-1/input0 [ 250.689259][ T9] usb 7-1: USB disconnect, device number 5 [ 250.716793][ T5867] ntrig 0003:1B96:0009.0005: Firmware version: 0.0.0.0.0 (0000 0000) [ 250.797823][ T8963] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 250.948916][ T5867] usb 2-1: USB disconnect, device number 11 [ 251.307946][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 251.307962][ T29] audit: type=1400 audit(1739288196.731:1107): avc: denied { create } for pid=8982 comm="syz.6.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.340560][ T29] audit: type=1400 audit(1739288196.761:1108): avc: denied { create } for pid=8982 comm="syz.6.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.692012][ T29] audit: type=1400 audit(1739288197.031:1109): avc: denied { ioctl } for pid=8982 comm="syz.6.908" path="socket:[22033]" dev="sockfs" ino=22033 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.161808][ T9] usb 5-1: USB disconnect, device number 8 [ 252.588937][ T29] audit: type=1400 audit(1739288198.011:1110): avc: denied { mount } for pid=9002 comm="syz.6.915" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 252.618582][ T9005] netlink: 'syz.5.911': attribute type 4 has an invalid length. [ 253.179827][ T29] audit: type=1400 audit(1739288198.601:1111): avc: denied { write } for pid=9002 comm="syz.6.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.394044][ T29] audit: type=1400 audit(1739288198.821:1112): avc: denied { getopt } for pid=9017 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.575591][ T29] audit: type=1400 audit(1739288199.001:1113): avc: denied { read } for pid=9021 comm="syz.5.921" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.642945][ T29] audit: type=1400 audit(1739288199.001:1114): avc: denied { open } for pid=9021 comm="syz.5.921" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.680579][ T29] audit: type=1400 audit(1739288199.031:1115): avc: denied { ioctl } for pid=9021 comm="syz.5.921" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.705596][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.979643][ T5867] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 254.271457][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 254.770427][ T5867] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 254.901517][ T5867] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.980035][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.014604][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.024960][ T5867] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.064542][ T29] audit: type=1400 audit(1739288200.481:1116): avc: denied { write } for pid=9037 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.095150][ T5867] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.138234][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.349967][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.356927][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.369036][ T5867] usb 7-1: usb_control_msg returned -32 [ 255.399706][ T5867] usbtmc 7-1:16.0: can't read capabilities [ 256.282195][ T9055] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 256.499527][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 256.499542][ T29] audit: type=1400 audit(1739288201.921:1120): avc: denied { read write } for pid=9062 comm="syz.1.932" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.529501][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.128458][ T29] audit: type=1400 audit(1739288201.921:1121): avc: denied { open } for pid=9062 comm="syz.1.932" path="/dev/sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 257.193492][ T29] audit: type=1400 audit(1739288202.021:1122): avc: denied { open } for pid=9037 comm="syz.0.926" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 257.220021][ T29] audit: type=1400 audit(1739288202.021:1123): avc: denied { ioctl } for pid=9037 comm="syz.0.926" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 257.960118][ T5867] usb 7-1: USB disconnect, device number 6 [ 257.965511][ T29] audit: type=1400 audit(1739288203.391:1124): avc: denied { mount } for pid=9087 comm="syz.0.940" name="/" dev="autofs" ino=22594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 258.011661][ T29] audit: type=1400 audit(1739288203.431:1125): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 258.101166][ T9093] sp0: Synchronizing with TNC [ 258.136744][ T29] audit: type=1400 audit(1739288203.561:1126): avc: denied { create } for pid=9089 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.137370][ T9094] netlink: 220 bytes leftover after parsing attributes in process `syz.0.942'. [ 258.175741][ T29] audit: type=1400 audit(1739288203.561:1127): avc: denied { write } for pid=9089 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.233946][ T29] audit: type=1400 audit(1739288203.561:1128): avc: denied { nlmsg_write } for pid=9089 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.199706][ T5817] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 259.369748][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 259.391374][ T5817] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 259.410316][ T5817] usb 2-1: config 0 has no interface number 0 [ 259.445319][ T5817] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 259.469728][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.563137][ T5817] usb 2-1: Product: syz [ 259.587894][ T5817] usb 2-1: Manufacturer: syz [ 259.592977][ T5817] usb 2-1: SerialNumber: syz [ 259.600616][ T5817] usb 2-1: config 0 descriptor?? [ 259.613330][ T5817] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.854493][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.873388][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.989844][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 260.609656][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 260.638225][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.653865][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.664295][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.678846][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.697285][ T9] usb 7-1: config 0 descriptor?? [ 260.707831][ T9] hub 7-1:0.0: USB hub found [ 260.910038][ T9] hub 7-1:0.0: 1 port detected [ 261.109880][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 261.309879][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 261.335456][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.397477][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.417393][ T25] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 261.427972][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.445981][ T5817] usb 2-1: qt2_attach - failed to power on unit: -71 [ 261.461352][ T5817] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 261.484808][ T25] usb 6-1: config 0 descriptor?? [ 261.520302][ T5817] usb 2-1: USB disconnect, device number 12 [ 261.556398][ T9] hub 7-1:0.0: activate --> -90 [ 262.241368][ T866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 262.551476][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 262.577819][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.577839][ T9] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 262.601388][ T5867] usb 7-1: USB disconnect, device number 7 [ 262.615465][ T866] usb 5-1: Using ep0 maxpacket: 8 [ 262.659952][ T25] usb 6-1: USB disconnect, device number 6 [ 262.680319][ T9] usb 7-1-port1: connect-debounce failed [ 262.692944][ T866] usb 5-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 262.713438][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.729718][ T866] usb 5-1: Product: syz [ 262.733889][ T866] usb 5-1: Manufacturer: syz [ 262.738509][ T866] usb 5-1: SerialNumber: syz [ 262.751527][ T866] usb 5-1: config 0 descriptor?? [ 262.767197][ T866] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 263.536278][ T9146] netlink: 'syz.6.961': attribute type 4 has an invalid length. [ 264.264339][ T866] gspca_sonixj: reg_w1 err -71 [ 264.270409][ T866] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 264.294223][ T866] usb 5-1: USB disconnect, device number 9 [ 264.624151][ T25] IPVS: starting estimator thread 0... [ 264.739686][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 264.789685][ T9162] IPVS: using max 35 ests per chain, 84000 per kthread [ 265.424801][ T5867] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.598839][ T5867] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.672828][ T5867] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 265.700061][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.783430][ T5867] usb 6-1: config 0 descriptor?? [ 265.943183][ T29] audit: type=1400 audit(1739288211.311:1129): avc: denied { read } for pid=9168 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.869732][ T5817] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.918535][ T29] audit: type=1400 audit(1739288211.391:1130): avc: denied { write } for pid=9168 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.937867][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.948865][ T5867] ntrig 0003:1B96:0009.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 267.679353][ T5867] usb 6-1: USB disconnect, device number 7 [ 267.979618][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 267.986692][ T5817] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.003187][ T5817] usb 5-1: config 0 has no interface number 0 [ 268.009514][ T5817] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.018745][ T29] audit: type=1400 audit(1739288213.441:1131): avc: denied { setopt } for pid=9187 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.019471][ T5817] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.039156][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.055342][ T5817] usb 5-1: config 0 interface 41 has no altsetting 0 [ 268.077182][ T5817] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.093379][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.101731][ T5817] usb 5-1: Product: syz [ 268.105894][ T5817] usb 5-1: Manufacturer: syz [ 268.110654][ T5817] usb 5-1: SerialNumber: syz [ 268.123060][ T5817] usb 5-1: config 0 descriptor?? [ 268.278170][ T9175] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.377687][ T9175] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.491384][ T9201] netlink: 'syz.1.978': attribute type 9 has an invalid length. [ 269.498821][ T5817] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 270.840765][ T5817] usb 5-1: USB disconnect, device number 10 [ 270.872537][ T29] audit: type=1400 audit(1739288216.301:1132): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 270.954256][ T29] audit: type=1400 audit(1739288216.301:1133): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.033061][ T29] audit: type=1400 audit(1739288216.301:1134): avc: denied { append } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.140071][ T29] audit: type=1400 audit(1739288216.301:1135): avc: denied { open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.164069][ T9203] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 271.171064][ T29] audit: type=1400 audit(1739288216.301:1136): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.249781][ T29] audit: type=1400 audit(1739288216.511:1137): avc: denied { read } for pid=9223 comm="syz.1.984" dev="nsfs" ino=4026533334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.261832][ T5867] hid-generic 0005:7FFF:0008.0007: item fetching failed at offset 0/2 [ 271.289535][ T29] audit: type=1400 audit(1739288216.511:1138): avc: denied { open } for pid=9223 comm="syz.1.984" path="net:[4026533334]" dev="nsfs" ino=4026533334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.294115][ T5867] hid-generic 0005:7FFF:0008.0007: probe with driver hid-generic failed with error -22 [ 271.350638][ T29] audit: type=1400 audit(1739288216.511:1139): avc: denied { create } for pid=9223 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.382723][ T29] audit: type=1400 audit(1739288216.511:1140): avc: denied { create } for pid=9223 comm="syz.1.984" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 271.403869][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.889646][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 273.121084][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 273.127303][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 273.127315][ T29] audit: type=1400 audit(1739288218.551:1176): avc: denied { connect } for pid=9253 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.452982][ T5898] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 273.979628][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.989387][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.029822][ T29] audit: type=1400 audit(1739288218.551:1177): avc: denied { create } for pid=9259 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.085260][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.170779][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.213688][ T29] audit: type=1400 audit(1739288218.621:1178): avc: denied { write } for pid=9253 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.412034][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.529806][ T29] audit: type=1400 audit(1739288218.811:1179): avc: denied { bind } for pid=9259 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.557406][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.590629][ T29] audit: type=1400 audit(1739288218.811:1180): avc: denied { write } for pid=9259 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.629594][ T29] audit: type=1400 audit(1739288219.741:1181): avc: denied { create } for pid=9269 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.693533][ T9280] syzkaller0: entered promiscuous mode [ 274.714060][ T9280] syzkaller0: entered allmulticast mode [ 274.752816][ T29] audit: type=1400 audit(1739288219.781:1182): avc: denied { write } for pid=9269 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.784028][ T29] audit: type=1400 audit(1739288219.781:1183): avc: denied { read } for pid=9269 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.813970][ T5898] usb 2-1: usb_control_msg returned -32 [ 274.827000][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 274.853149][ T29] audit: type=1400 audit(1739288219.891:1184): avc: denied { write } for pid=9269 comm="syz.4.1001" name="tcp6" dev="proc" ino=4026533195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 274.877068][ T53] Bluetooth: Unexpected continuation frame (len 4) [ 274.951815][ T29] audit: type=1400 audit(1739288219.921:1185): avc: denied { create } for pid=9269 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 275.089531][ T5898] IPVS: starting estimator thread 0... [ 275.179652][ T9288] IPVS: using max 30 ests per chain, 72000 per kthread [ 275.207198][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1005'. [ 275.581080][ T9293] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 276.781734][ T866] usb 2-1: USB disconnect, device number 13 [ 276.969439][ T9301] sp0: Synchronizing with TNC [ 277.889843][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 278.125108][ T9336] syzkaller0: entered promiscuous mode [ 278.139776][ T9336] syzkaller0: entered allmulticast mode [ 278.170373][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 278.170388][ T29] audit: type=1400 audit(1739288223.591:1217): avc: denied { relabelfrom } for pid=9334 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 278.224535][ T29] audit: type=1400 audit(1739288223.591:1218): avc: denied { relabelto } for pid=9334 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 278.226034][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.939899][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 279.013764][ T5870] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 279.029836][ T5870] usb 2-1: config 0 has no interface number 0 [ 279.065128][ T5870] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 279.119890][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.235560][ T5870] usb 2-1: Product: syz [ 279.257807][ T5870] usb 2-1: Manufacturer: syz [ 279.279835][ T5870] usb 2-1: SerialNumber: syz [ 279.300104][ T5870] usb 2-1: config 0 descriptor?? [ 279.318473][ T5870] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 279.521293][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.543731][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.563302][ T5870] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 279.583914][ T5870] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 279.818418][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 279.829797][ T5870] usb 2-1: USB disconnect, device number 14 [ 279.865573][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 279.890887][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 279.938702][ T5870] quatech2 2-1:0.51: device disconnected [ 282.293027][ T29] audit: type=1400 audit(1739288227.721:1219): avc: denied { setopt } for pid=9383 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.380351][ T29] audit: type=1400 audit(1739288227.811:1220): avc: denied { connect } for pid=9388 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.402599][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 282.413276][ T29] audit: type=1400 audit(1739288227.831:1221): avc: denied { ioctl } for pid=9388 comm="syz.1.1040" path="socket:[24022]" dev="sockfs" ino=24022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.499738][ T5898] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 282.712710][ T29] audit: type=1400 audit(1739288228.141:1222): avc: denied { read } for pid=9396 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.025356][ T9403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1043'. [ 283.619569][ T5898] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 283.642771][ T9399] sp0: Synchronizing with TNC [ 283.652408][ T29] audit: type=1400 audit(1739288228.191:1223): avc: denied { write } for pid=9396 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.008351][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.016542][ T5898] usb 5-1: Product: syz [ 284.022852][ T5898] usb 5-1: Manufacturer: syz [ 284.027527][ T5898] usb 5-1: SerialNumber: syz [ 284.050645][ T5898] usb 5-1: config 0 descriptor?? [ 284.251730][ T29] audit: type=1400 audit(1739288229.681:1224): avc: denied { map_create } for pid=9409 comm="syz.6.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.365864][ T29] audit: type=1400 audit(1739288229.681:1225): avc: denied { bpf } for pid=9409 comm="syz.6.1046" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.387231][ T29] audit: type=1400 audit(1739288229.681:1226): avc: denied { map_read map_write } for pid=9409 comm="syz.6.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.407706][ T29] audit: type=1400 audit(1739288229.701:1227): avc: denied { prog_load } for pid=9409 comm="syz.6.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.427650][ T29] audit: type=1400 audit(1739288229.701:1228): avc: denied { perfmon } for pid=9409 comm="syz.6.1046" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.449129][ T29] audit: type=1400 audit(1739288229.701:1229): avc: denied { prog_run } for pid=9409 comm="syz.6.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.473935][ T29] audit: type=1400 audit(1739288229.781:1230): avc: denied { execmem } for pid=9409 comm="syz.6.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 284.498573][ T29] audit: type=1400 audit(1739288229.781:1231): avc: denied { append } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.538873][ T29] audit: type=1400 audit(1739288229.791:1232): avc: denied { ioctl } for pid=9382 comm="syz.4.1038" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.697412][ T5898] airspy 5-1:0.0: Board ID: 00 [ 284.703387][ T5898] airspy 5-1:0.0: Firmware version: [ 285.947400][ T5898] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 286.437681][ T5898] airspy 5-1:0.0: Registered as swradio24 [ 286.449112][ T5898] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 286.696471][ T9439] netlink: 'syz.0.1052': attribute type 4 has an invalid length. [ 286.951827][ T5898] usb 5-1: USB disconnect, device number 11 [ 288.609732][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 288.912418][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 288.912475][ T29] audit: type=1400 audit(1739288234.341:1270): avc: denied { create } for pid=9458 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.939148][ T29] audit: type=1400 audit(1739288234.361:1271): avc: denied { connect } for pid=9458 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.981592][ T29] audit: type=1400 audit(1739288234.361:1272): avc: denied { write } for pid=9458 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 289.017971][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 289.047251][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 289.079826][ T9] usb 2-1: config 0 has no interface number 0 [ 289.101939][ T9451] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.135778][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 289.156838][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.160757][ T29] audit: type=1400 audit(1739288234.561:1273): avc: denied { read write } for pid=9460 comm="syz.0.1060" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 289.207069][ T9] usb 2-1: Product: syz [ 289.213766][ T29] audit: type=1400 audit(1739288234.561:1274): avc: denied { open } for pid=9460 comm="syz.0.1060" path="/dev/sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 289.237856][ T29] audit: type=1400 audit(1739288234.581:1275): avc: denied { create } for pid=9460 comm="syz.0.1060" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.259463][ T29] audit: type=1400 audit(1739288234.581:1276): avc: denied { map } for pid=9460 comm="syz.0.1060" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.269205][ T9] usb 2-1: Manufacturer: syz [ 289.285047][ T29] audit: type=1400 audit(1739288234.581:1277): avc: denied { read write } for pid=9460 comm="syz.0.1060" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.331160][ T9] usb 2-1: SerialNumber: syz [ 289.466295][ T9] usb 2-1: config 0 descriptor?? [ 290.040460][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 290.174381][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 290.184761][ T9476] netlink: 'syz.0.1066': attribute type 21 has an invalid length. [ 290.265536][ T29] audit: type=1400 audit(1739288235.691:1278): avc: denied { create } for pid=9477 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.285654][ T29] audit: type=1400 audit(1739288235.711:1279): avc: denied { write } for pid=9477 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.475927][ T5870] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 290.789816][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 290.809693][ T5870] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 290.837151][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.860199][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 290.865590][ T5870] usb 7-1: Product: syz [ 290.926261][ T5870] usb 7-1: Manufacturer: syz [ 290.935819][ T5870] usb 7-1: SerialNumber: syz [ 290.980507][ T5870] usb 7-1: config 0 descriptor?? [ 291.017733][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 291.025679][ T9] usb 2-1: USB disconnect, device number 15 [ 291.033786][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 291.073628][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 291.110374][ T9] quatech2 2-1:0.51: device disconnected [ 291.289665][ T5867] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 291.457349][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.484438][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 291.492132][ T5870] airspy 7-1:0.0: Board ID: 00 [ 291.500265][ T5870] airspy 7-1:0.0: Firmware version: [ 291.518030][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.533507][ T5867] usb 6-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 292.038087][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.054490][ T5867] usb 6-1: config 0 descriptor?? [ 292.060229][ T9490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 292.434683][ T5870] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 292.582970][ T5870] airspy 7-1:0.0: Registered as swradio24 [ 292.662510][ T5870] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 292.758773][ T5867] wacom 0003:056A:0326.0008: ignoring exceeding usage max [ 292.769804][ T5867] wacom 0003:056A:0326.0008: Unknown device_type for 'HID 056a:0326'. Ignoring. [ 292.772247][ T5870] usb 7-1: USB disconnect, device number 8 [ 292.976063][ T5817] usb 6-1: USB disconnect, device number 8 [ 293.050671][ T9520] syzkaller0: entered promiscuous mode [ 293.064110][ T9520] syzkaller0: entered allmulticast mode [ 293.569742][ T5817] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 293.815723][ T5817] usb 7-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.024830][ T5817] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.132159][ T5817] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 294.139647][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 294.139659][ T29] audit: type=1400 audit(1739288239.551:1295): avc: denied { create } for pid=9547 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.158865][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.205645][ T5817] usb 7-1: config 0 descriptor?? [ 294.211565][ T29] audit: type=1400 audit(1739288239.561:1296): avc: denied { connect } for pid=9547 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.669831][ T5870] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 294.863300][ T5817] usbhid 7-1:0.0: can't add hid device: -71 [ 294.894906][ T5870] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 294.907830][ T5817] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 294.922178][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.939212][ T5817] usb 7-1: USB disconnect, device number 9 [ 294.949473][ T5870] usb 5-1: Product: syz [ 294.964901][ T5870] usb 5-1: Manufacturer: syz [ 294.979340][ T5870] usb 5-1: SerialNumber: syz [ 294.999394][ T5870] usb 5-1: config 0 descriptor?? [ 295.337408][ T29] audit: type=1400 audit(1739288240.761:1297): avc: denied { create } for pid=9567 comm="syz.1.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.500387][ T5870] airspy 5-1:0.0: Board ID: 00 [ 295.507242][ T5870] airspy 5-1:0.0: Firmware version: [ 295.559646][ T25] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 295.718935][ T29] audit: type=1326 audit(1739288241.051:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cd058cde9 code=0x0 [ 295.809882][ T25] usb 6-1: device descriptor read/64, error -71 [ 295.886075][ T29] audit: type=1400 audit(1739288241.141:1299): avc: denied { write } for pid=9567 comm="syz.1.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.959679][ T29] audit: type=1400 audit(1739288241.141:1300): avc: denied { nlmsg_write } for pid=9567 comm="syz.1.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.089723][ T25] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 296.291851][ T25] usb 6-1: device descriptor read/64, error -71 [ 296.411166][ T25] usb usb6-port1: attempt power cycle [ 297.417620][ T5870] airspy 5-1:0.0: usb_control_msg() failed -110 request 0f [ 297.427115][ T5870] airspy 5-1:0.0: Registered as swradio24 [ 297.435042][ T5870] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 297.876300][ T29] audit: type=1400 audit(1739288242.371:1301): avc: denied { create } for pid=9578 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.039724][ T25] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 298.128221][ T25] usb 6-1: device descriptor read/8, error -71 [ 298.169933][ T29] audit: type=1400 audit(1739288242.381:1302): avc: denied { read } for pid=9578 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.270056][ T5867] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 298.318879][ T5870] usb 5-1: USB disconnect, device number 12 [ 298.342778][ T29] audit: type=1400 audit(1739288242.441:1303): avc: denied { write } for pid=9578 comm="syz.6.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.464533][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 298.484766][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.512074][ T29] audit: type=1400 audit(1739288243.361:1304): avc: denied { create } for pid=9580 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.552460][ T5867] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 298.572593][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.631207][ T5867] usb 2-1: Product: syz [ 298.635404][ T5867] usb 2-1: Manufacturer: syz [ 298.647535][ T5867] usb 2-1: SerialNumber: syz [ 298.670335][ T5867] usb 2-1: config 0 descriptor?? [ 298.868984][ T9604] syzkaller0: entered promiscuous mode [ 298.939326][ T5867] usb 2-1: USB disconnect, device number 16 [ 298.940689][ T5870] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 298.999791][ T9604] syzkaller0: entered allmulticast mode [ 299.263502][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 299.335378][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 299.335410][ T29] audit: type=1400 audit(1739288244.741:1309): avc: denied { connect } for pid=9607 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.446471][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.623345][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.628063][ T29] audit: type=1400 audit(1739288244.741:1310): avc: denied { bind } for pid=9607 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.659607][ T29] audit: type=1400 audit(1739288244.741:1311): avc: denied { create } for pid=9607 comm="syz.0.1109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 299.663008][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 299.722703][ T5870] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 299.735037][ T29] audit: type=1400 audit(1739288244.751:1312): avc: denied { setattr } for pid=9607 comm="syz.0.1109" name="file0" dev="tmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 299.735771][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.773940][ T5870] usb 5-1: config 0 descriptor?? [ 299.803869][ T29] audit: type=1400 audit(1739288244.751:1313): avc: denied { setopt } for pid=9607 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.204683][ T5870] hid-rmi 0003:17EF:6085.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0 [ 301.182858][ T5870] usb 5-1: USB disconnect, device number 13 [ 302.629769][ T5867] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 302.693298][ T29] audit: type=1400 audit(1739288248.131:1314): avc: denied { name_bind } for pid=9630 comm="syz.4.1122" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 302.717845][ T29] audit: type=1400 audit(1739288248.141:1315): avc: denied { write } for pid=9630 comm="syz.4.1122" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 302.799660][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 302.806122][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.817208][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.827042][ T5867] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.836271][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.844361][ T5829] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 302.862478][ T29] audit: type=1400 audit(1739288248.291:1316): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.885110][ T5867] usb 7-1: config 0 descriptor?? [ 302.903392][ T5867] hub 7-1:0.0: USB hub found [ 302.918113][ T29] audit: type=1400 audit(1739288248.291:1317): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.964535][ T29] audit: type=1400 audit(1739288248.291:1318): avc: denied { rename } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.001476][ T5829] usb 2-1: device descriptor read/64, error -71 [ 303.118664][ T5867] hub 7-1:0.0: 1 port detected [ 303.252682][ T5829] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 303.393157][ T5829] usb 2-1: device descriptor read/64, error -71 [ 303.442755][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 303.520161][ T5829] usb usb2-port1: attempt power cycle [ 303.732962][ T5867] hub 7-1:0.0: activate --> -90 [ 303.748286][ T9642] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1126'. [ 304.345987][ T5867] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 304.346316][ T5817] usb 7-1: USB disconnect, device number 10 [ 304.445651][ T5829] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 304.495955][ T5829] usb 2-1: device descriptor read/8, error -71 [ 304.749696][ T5829] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 304.830740][ T5829] usb 2-1: device descriptor read/8, error -71 [ 305.238486][ T5829] usb usb2-port1: unable to enumerate USB device [ 306.447083][ T9672] syzkaller0: entered promiscuous mode [ 306.461210][ T9672] syzkaller0: entered allmulticast mode [ 306.543325][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 306.757125][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.814394][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 306.814410][ T29] audit: type=1400 audit(1739288252.221:1324): avc: denied { mounton } for pid=9664 comm="syz.6.1134" path="/proc/321/task" dev="proc" ino=23405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 306.862611][ T25] usb 1-1: config 95 has an invalid interface number: 243 but max is 0 [ 306.921368][ T25] usb 1-1: config 95 has no interface number 0 [ 306.969628][ T25] usb 1-1: config 95 interface 243 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 306.985378][ T29] audit: type=1400 audit(1739288252.221:1325): avc: denied { mount } for pid=9664 comm="syz.6.1134" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 307.302421][ T25] usb 1-1: config 95 interface 243 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 307.414300][ T25] usb 1-1: config 95 interface 243 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.427725][ T25] usb 1-1: config 95 interface 243 has no altsetting 0 [ 307.443238][ T25] usb 1-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=ff.d0 [ 307.452469][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.460542][ T25] usb 1-1: Product: syz [ 307.464704][ T25] usb 1-1: Manufacturer: syz [ 307.469297][ T25] usb 1-1: SerialNumber: syz [ 307.480636][ T9667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.487957][ T9667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.002592][ T25] pl2303 1-1:95.243: required endpoints missing [ 308.023723][ T25] usb 1-1: USB disconnect, device number 9 [ 308.368462][ T29] audit: type=1400 audit(1739288253.791:1326): avc: denied { create } for pid=9692 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 308.870620][ T5817] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 309.003423][ T29] audit: type=1400 audit(1739288254.431:1327): avc: denied { ioctl } for pid=9705 comm="syz.5.1145" path="socket:[24788]" dev="sockfs" ino=24788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.020949][ T5817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.045910][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 309.050538][ T5817] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.066197][ T5817] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 309.075558][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.083631][ T5817] usb 7-1: Product: syz [ 309.087984][ T5817] usb 7-1: Manufacturer: syz [ 309.095824][ T5817] usb 7-1: SerialNumber: syz [ 309.113023][ T5817] usb 7-1: config 0 descriptor?? [ 309.817524][ T9713] netlink: 'syz.4.1146': attribute type 4 has an invalid length. [ 310.380528][ T29] audit: type=1400 audit(1739288255.811:1328): avc: denied { name_bind } for pid=9716 comm="syz.1.1148" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 310.407946][ T29] audit: type=1400 audit(1739288255.811:1329): avc: denied { node_bind } for pid=9716 comm="syz.1.1148" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 310.435916][ T9719] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1149'. [ 310.478909][ T29] audit: type=1400 audit(1739288255.901:1330): avc: denied { create } for pid=9722 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.643994][ T29] audit: type=1400 audit(1739288256.071:1331): avc: denied { connect } for pid=9722 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.694217][ T29] audit: type=1400 audit(1739288256.121:1332): avc: denied { write } for pid=9722 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.731509][ T5829] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.736633][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.889686][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 310.901426][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.916818][ T5829] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 310.926004][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.926040][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00 [ 310.926060][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.927535][ T25] usb 5-1: config 0 descriptor?? [ 310.956805][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.975913][ T5829] usb 2-1: Product: syz [ 310.982197][ T5829] usb 2-1: Manufacturer: syz [ 310.986800][ T5829] usb 2-1: SerialNumber: syz [ 311.012915][ T5829] usb 2-1: config 0 descriptor?? [ 311.026395][ T5829] gspca_main: sq905-2.14.0 probing 2770:9120 [ 311.173963][ T9734] lo speed is unknown, defaulting to 1000 [ 311.198718][ T9734] lo speed is unknown, defaulting to 1000 [ 311.217865][ T9734] lo speed is unknown, defaulting to 1000 [ 311.743907][ T9734] infiniband sz1: set down [ 311.748623][ T9734] infiniband sz1: added lo [ 311.766804][ T5817] lo speed is unknown, defaulting to 1000 [ 311.778074][ T5829] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 311.795192][ T5829] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 311.796849][ T9734] RDS/IB: sz1: added [ 311.807414][ T9734] smc: adding ib device sz1 with port count 1 [ 311.813989][ T9734] smc: ib device sz1 port 1 has pnetid [ 311.820669][ T9735] ������: renamed from lo [ 311.826885][ T29] audit: type=1400 audit(1739288257.251:1333): avc: denied { ioctl } for pid=9731 comm="syz.0.1154" path="socket:[24891]" dev="sockfs" ino=24891 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.852558][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 311.858760][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.870362][ T9734] ������ speed is unknown, defaulting to 1000 [ 311.931875][ T9734] ������ speed is unknown, defaulting to 1000 [ 311.952947][ T5867] usb 7-1: USB disconnect, device number 11 [ 311.960104][ T5817] ������ speed is unknown, defaulting to 1000 [ 312.016784][ T9734] ������ speed is unknown, defaulting to 1000 [ 312.064207][ T9734] ������ speed is unknown, defaulting to 1000 [ 312.111808][ T9734] ������ speed is unknown, defaulting to 1000 [ 312.119666][ T5829] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 312.163218][ T9734] ������ speed is unknown, defaulting to 1000 [ 312.211602][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.218186][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.231201][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.239371][ T9733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.251650][ T9733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 312.257819][ T25] usb 5-1: USB disconnect, device number 14 [ 312.266889][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.274021][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.280900][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.288061][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.294960][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.301786][ T9733] ������ speed is unknown, defaulting to 1000 [ 312.370365][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1155'. [ 312.488094][ T9744] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1155'. [ 312.591399][ T5829] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 312.673109][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 312.685006][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.718204][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 242 [ 312.971820][ T5829] usb 1-1: New USB device found, idVendor=056a, idProduct=0060, bcdDevice= 0.00 [ 312.981820][ T29] audit: type=1400 audit(1739288258.391:1334): avc: denied { setopt } for pid=9748 comm="syz.6.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.026051][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.338410][ T5829] usb 1-1: config 0 descriptor?? [ 313.364674][ T9751] syzkaller0: entered promiscuous mode [ 313.381943][ T9751] syzkaller0: entered allmulticast mode [ 313.560847][ T29] audit: type=1400 audit(1739288258.981:1335): avc: denied { create } for pid=9758 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 313.742149][ T5867] usb 2-1: USB disconnect, device number 21 [ 314.381036][ T29] audit: type=1400 audit(1739288259.571:1336): avc: denied { getopt } for pid=9761 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.826092][ T29] audit: type=1400 audit(1739288260.251:1337): avc: denied { mount } for pid=9775 comm="syz.5.1169" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 315.002397][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 315.008386][ T5829] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 315.031672][ T5829] usb 1-1: USB disconnect, device number 10 [ 316.419691][ T29] audit: type=1400 audit(1739288261.781:1338): avc: denied { write } for pid=9778 comm="syz.1.1170" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 317.019211][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.025620][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.388944][ T29] audit: type=1400 audit(1739288263.081:1339): avc: denied { execute } for pid=9787 comm="syz.0.1171" path="/250/cpu.stat" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.581987][ T9870] netlink: 336 bytes leftover after parsing attributes in process `syz.6.1197'. [ 325.873925][ T9875] netlink: 'syz.6.1198': attribute type 9 has an invalid length. [ 326.931463][ T9885] tipc: Started in network mode [ 326.936604][ T9885] tipc: Node identity 3aef6b3b9025, cluster identity 4711 [ 326.944506][ T9885] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 327.058679][ T9884] tipc: Resetting bearer <eth:syzkaller0> [ 328.050900][ T5829] tipc: Node number set to 2865392443 [ 328.349687][ T5829] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 328.519785][ T5829] usb 7-1: Using ep0 maxpacket: 32 [ 328.541615][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.566786][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.613215][ T5829] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 328.659209][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.691017][ T5829] usb 7-1: config 0 descriptor?? [ 328.759103][ T5829] hub 7-1:0.0: USB hub found [ 328.822530][ T29] audit: type=1400 audit(1739288274.251:1340): avc: denied { setopt } for pid=9903 comm="syz.5.1209" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.980713][ T5829] hub 7-1:0.0: 1 port detected [ 329.042992][ T5867] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 329.846142][ T29] audit: type=1400 audit(1739288275.231:1341): avc: denied { read write } for pid=9911 comm="syz.4.1211" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 330.007627][ T9918] block device autoloading is deprecated and will be removed. [ 330.065606][ T29] audit: type=1400 audit(1739288275.231:1342): avc: denied { open } for pid=9911 comm="syz.4.1211" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 330.234037][ T29] audit: type=1400 audit(1739288275.241:1343): avc: denied { mount } for pid=9911 comm="syz.4.1211" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 330.279675][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 330.299702][ T29] audit: type=1400 audit(1739288275.341:1344): avc: denied { read } for pid=9911 comm="syz.4.1211" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 330.322654][ T29] audit: type=1400 audit(1739288275.341:1345): avc: denied { open } for pid=9911 comm="syz.4.1211" path="/231/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 330.468442][ T29] audit: type=1400 audit(1739288275.891:1346): avc: denied { create } for pid=9919 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 330.506602][ T25] usb 7-1: USB disconnect, device number 12 [ 330.751949][ T5867] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 330.761096][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.769092][ T5867] usb 1-1: Product: syz [ 330.773506][ T5867] usb 1-1: Manufacturer: syz [ 330.778107][ T5867] usb 1-1: SerialNumber: syz [ 330.788047][ T5867] usb 1-1: config 0 descriptor?? [ 330.795596][ T5867] gspca_main: sq905-2.14.0 probing 2770:9120 [ 330.995964][ T5867] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 331.005291][ T5867] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 331.019717][ T5867] usb 1-1: USB disconnect, device number 11 [ 331.665927][ T29] audit: type=1400 audit(1739288277.091:1347): avc: denied { ioctl } for pid=9929 comm="syz.0.1214" path="/dev/sg0" dev="devtmpfs" ino=731 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 332.940982][ T9884] tipc: Disabling bearer <eth:syzkaller0> [ 333.189626][ T29] audit: type=1400 audit(1739288278.591:1348): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 333.479623][ T5867] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 333.539176][ T29] audit: type=1400 audit(1739288278.961:1349): avc: denied { getopt } for pid=9950 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 334.288325][ T5867] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 334.307842][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.350537][ T5867] usb 7-1: Product: syz [ 334.372026][ T5867] usb 7-1: Manufacturer: syz [ 334.407967][ T5867] usb 7-1: SerialNumber: syz [ 334.508216][ T5867] usb 7-1: config 0 descriptor?? [ 334.787555][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1227'. [ 334.879711][ T866] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 335.135782][ T5867] airspy 7-1:0.0: Board ID: 00 [ 335.141290][ T5867] airspy 7-1:0.0: Firmware version: [ 335.237731][ T29] audit: type=1400 audit(1739288280.651:1350): avc: denied { read } for pid=9965 comm="syz.0.1228" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 335.676863][ T29] audit: type=1400 audit(1739288280.651:1351): avc: denied { open } for pid=9965 comm="syz.0.1228" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.139946][ T866] usb 6-1: Using ep0 maxpacket: 8 [ 336.141192][ T29] audit: type=1400 audit(1739288280.661:1352): avc: denied { ioctl } for pid=9965 comm="syz.0.1228" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.164157][ T866] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 336.241801][ T866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.251629][ T866] usb 6-1: Product: syz [ 336.255821][ T866] usb 6-1: Manufacturer: syz [ 336.262668][ T866] usb 6-1: SerialNumber: syz [ 336.269945][ T866] usb 6-1: config 0 descriptor?? [ 336.278068][ T866] gspca_main: sq905-2.14.0 probing 2770:9120 [ 336.547417][ T5867] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 336.560587][ T5867] airspy 7-1:0.0: Registered as swradio24 [ 336.566348][ T5867] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 336.593203][ T5867] usb 7-1: USB disconnect, device number 13 [ 337.492418][ T866] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 337.530849][ T866] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 338.175088][ T29] audit: type=1400 audit(1739288283.561:1353): avc: denied { connect } for pid=9984 comm="syz.1.1234" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.195623][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.478357][ T866] usb 6-1: USB disconnect, device number 13 [ 338.571725][T10001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.582665][T10001] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 339.546368][ T5817] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 339.869678][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 339.887972][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.904480][ T5817] usb 5-1: config 4 has an invalid interface number: 59 but max is 0 [ 339.929652][ T5817] usb 5-1: config 4 has no interface number 0 [ 339.980799][ T5817] usb 5-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice=62.cf [ 340.952018][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.972217][ T5817] usb 5-1: Product: syz [ 340.980869][ T5817] usb 5-1: Manufacturer: syz [ 340.985688][ T5817] usb 5-1: SerialNumber: syz [ 341.671863][T10035] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 341.764248][ T29] audit: type=1400 audit(1739288287.131:1354): avc: denied { bind } for pid=10028 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.977935][ T5817] usb 5-1: can't set config #4, error -71 [ 342.010936][ T5817] usb 5-1: USB disconnect, device number 15 [ 342.259681][ T29] audit: type=1400 audit(1739288287.591:1355): avc: denied { create } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.360128][ T29] audit: type=1400 audit(1739288287.601:1356): avc: denied { create } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.544954][ T29] audit: type=1400 audit(1739288287.671:1357): avc: denied { bind } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.570378][ T29] audit: type=1400 audit(1739288287.731:1358): avc: denied { accept } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.595347][ T29] audit: type=1400 audit(1739288287.751:1359): avc: denied { create } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 342.770624][ T29] audit: type=1400 audit(1739288288.091:1360): avc: denied { write } for pid=10037 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.529734][T10055] netlink: 'syz.4.1256': attribute type 9 has an invalid length. [ 345.219767][T10076] sp0: Synchronizing with TNC [ 345.260774][T10077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.297607][T10077] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 345.307877][ T29] audit: type=1400 audit(1739288290.661:1361): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 345.329263][ T29] audit: type=1400 audit(1739288290.671:1362): avc: denied { search } for pid=5486 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.350935][ T29] audit: type=1400 audit(1739288290.671:1363): avc: denied { read } for pid=5486 comm="dhcpcd" name="n117" dev="tmpfs" ino=3300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.709755][ T5829] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 346.859823][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 346.879028][ T5829] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.103502][ T5829] usb 1-1: config 0 has no interface number 0 [ 347.240183][ T5829] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.318213][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.345264][ T5829] usb 1-1: Product: syz [ 347.365109][ T5829] usb 1-1: Manufacturer: syz [ 347.380247][ T5829] usb 1-1: SerialNumber: syz [ 347.408779][ T5829] usb 1-1: config 0 descriptor?? [ 347.441245][ T5829] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.649723][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.688967][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.739717][ T5829] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 348.288771][ T5829] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 348.307830][ T5898] hid-generic 0005:7FFF:0008.000A: item fetching failed at offset 0/1 [ 348.309737][ T5829] usb 1-1: USB disconnect, device number 12 [ 348.340684][ T5898] hid-generic 0005:7FFF:0008.000A: probe with driver hid-generic failed with error -22 [ 350.235912][T10152] syz.1.1286 uses obsolete (PF_INET,SOCK_PACKET) [ 350.282412][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 350.282427][ T29] audit: type=1400 audit(1739288295.711:1366): avc: denied { ioctl } for pid=10151 comm="syz.1.1286" path="socket:[26369]" dev="sockfs" ino=26369 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.250681][T10173] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.1293'. [ 352.260046][T10173] netlink: zone id is out of range [ 352.265141][T10173] netlink: zone id is out of range [ 352.345207][ T29] audit: type=1400 audit(1739288297.761:1367): avc: denied { write } for pid=10176 comm="syz.6.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.397569][ T29] audit: type=1400 audit(1739288297.761:1368): avc: denied { connect } for pid=10176 comm="syz.6.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.422800][ T29] audit: type=1400 audit(1739288297.761:1369): avc: denied { name_connect } for pid=10176 comm="syz.6.1295" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 352.870615][T10190] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 353.709582][ T29] audit: type=1400 audit(1739288299.121:1370): avc: denied { mounton } for pid=10196 comm="syz.0.1301" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 353.735949][T10197] syz.0.1301: attempt to access beyond end of device [ 353.735949][T10197] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 353.784942][T10197] MINIX-fs: unable to read superblock [ 353.921920][ T29] audit: type=1400 audit(1739288299.351:1371): avc: denied { module_request } for pid=10206 comm="syz.5.1306" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.957158][T10214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.972778][T10214] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 354.059821][ T29] audit: type=1400 audit(1739288299.481:1372): avc: denied { sys_module } for pid=10206 comm="syz.5.1306" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 354.153224][ T29] audit: type=1400 audit(1739288299.581:1373): avc: denied { setopt } for pid=10219 comm="syz.6.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.499210][T10223] ������ speed is unknown, defaulting to 1000 [ 354.894348][T10223] ������ speed is unknown, defaulting to 1000 [ 355.220598][ T29] audit: type=1400 audit(1739288300.651:1374): avc: denied { read write } for pid=10228 comm="syz.0.1311" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.247138][T10224] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 355.310950][ T29] audit: type=1400 audit(1739288300.651:1375): avc: denied { open } for pid=10228 comm="syz.0.1311" path="/dev/sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.418257][ T29] audit: type=1400 audit(1739288300.651:1376): avc: denied { ioctl } for pid=10228 comm="syz.0.1311" path="/dev/sg0" dev="devtmpfs" ino=731 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.985654][T10236] netlink: 'syz.5.1312': attribute type 4 has an invalid length. [ 356.090611][ T29] audit: type=1400 audit(1739288300.701:1377): avc: denied { append } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.119377][ T29] audit: type=1400 audit(1739288300.721:1378): avc: denied { execmem } for pid=10227 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 356.138994][ T29] audit: type=1400 audit(1739288300.881:1379): avc: denied { read } for pid=10231 comm="syz.4.1313" name="media9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.259942][ T29] audit: type=1400 audit(1739288300.881:1380): avc: denied { open } for pid=10231 comm="syz.4.1313" path="/dev/media9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.327791][ T29] audit: type=1400 audit(1739288300.881:1381): avc: denied { ioctl } for pid=10231 comm="syz.4.1313" path="/dev/media9" dev="devtmpfs" ino=1027 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.427484][ T29] audit: type=1400 audit(1739288301.131:1382): avc: denied { map_create } for pid=10227 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.484101][ T29] audit: type=1400 audit(1739288301.131:1383): avc: denied { map_read map_write } for pid=10227 comm="syz.5.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.516433][ T29] audit: type=1400 audit(1739288301.231:1384): avc: denied { read } for pid=10227 comm="syz.5.1312" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 357.444984][T10271] netlink: 'syz.5.1327': attribute type 4 has an invalid length. [ 358.233385][T10281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.084965][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 360.375794][T10320] ������ speed is unknown, defaulting to 1000 [ 360.549475][T10320] ������ speed is unknown, defaulting to 1000 [ 360.770423][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 360.770440][ T29] audit: type=1400 audit(1739288306.191:1433): avc: denied { sqpoll } for pid=10287 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.278990][T10331] netlink: 'syz.0.1344': attribute type 4 has an invalid length. [ 361.800027][T10333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.941499][ T29] audit: type=1400 audit(1739288307.371:1434): avc: denied { name_bind } for pid=10334 comm="syz.0.1347" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 362.417847][ T29] audit: type=1400 audit(1739288307.841:1435): avc: denied { read write } for pid=10340 comm="syz.4.1349" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 362.441787][ T29] audit: type=1400 audit(1739288307.841:1436): avc: denied { open } for pid=10340 comm="syz.4.1349" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 362.543551][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'. [ 362.617581][ T29] audit: type=1400 audit(1739288307.861:1437): avc: denied { ioctl } for pid=10340 comm="syz.4.1349" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 363.389753][ T29] audit: type=1400 audit(1739288308.811:1438): avc: denied { ioctl } for pid=10359 comm="syz.0.1356" path="socket:[26950]" dev="sockfs" ino=26950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.730461][ T29] audit: type=1400 audit(1739288309.161:1439): avc: denied { setopt } for pid=10358 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 363.750147][ T29] audit: type=1400 audit(1739288309.161:1440): avc: denied { write } for pid=10358 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.722496][ T29] audit: type=1400 audit(1739288309.161:1441): avc: denied { read } for pid=10358 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.742760][ T29] audit: type=1400 audit(1739288309.311:1442): avc: denied { setopt } for pid=10364 comm="syz.0.1359" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.328506][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 365.385040][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1366'. [ 366.019113][ T5898] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.279651][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 366.292458][ T5898] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 366.325209][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.358373][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.389657][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.414770][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.452822][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.470474][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.513156][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.726043][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 366.726057][ T29] audit: type=1400 audit(1739288312.151:1450): avc: denied { execute } for pid=10416 comm="syz.6.1379" path="/173/cpu.stat" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 366.755602][ T5898] usb 1-1: usb_control_msg returned -32 [ 366.764944][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 366.812721][ T29] audit: type=1400 audit(1739288312.241:1451): avc: denied { create } for pid=10422 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.868170][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 367.054409][ T29] audit: type=1400 audit(1739288312.271:1452): avc: denied { connect } for pid=10422 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.295073][ T29] audit: type=1400 audit(1739288312.271:1453): avc: denied { write } for pid=10422 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.314444][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.330936][ T29] audit: type=1400 audit(1739288312.311:1454): avc: denied { create } for pid=10414 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.367659][ T29] audit: type=1400 audit(1739288312.311:1455): avc: denied { create } for pid=10414 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.419866][ T29] audit: type=1400 audit(1739288312.311:1456): avc: denied { connect } for pid=10414 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.445896][ T29] audit: type=1400 audit(1739288312.321:1457): avc: denied { bind } for pid=10414 comm="syz.5.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.508633][ T29] audit: type=1400 audit(1739288312.321:1458): avc: denied { create } for pid=10414 comm="syz.5.1378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 367.538235][T10432] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 367.583492][ T29] audit: type=1400 audit(1739288312.321:1459): avc: denied { setattr } for pid=10414 comm="syz.5.1378" name="file0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 367.761215][ T866] usb 1-1: USB disconnect, device number 13 [ 369.001133][T10461] netlink: 'syz.6.1391': attribute type 9 has an invalid length. [ 370.339742][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 370.511481][T10485] sp0: Synchronizing with TNC [ 371.249664][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 371.258111][ T5898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 371.412809][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.423040][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.432822][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.442825][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.457112][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.469560][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.887258][ T5898] usb 5-1: usb_control_msg returned -32 [ 371.900938][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 371.959145][T10506] netlink: 'syz.6.1406': attribute type 9 has an invalid length. [ 372.766801][T10515] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 372.773137][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1409'. [ 372.976205][ T866] usb 5-1: USB disconnect, device number 16 [ 373.050102][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 373.050115][ T29] audit: type=1400 audit(1739288318.481:1470): avc: denied { create } for pid=10521 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.114355][ T29] audit: type=1400 audit(1739288318.541:1471): avc: denied { connect } for pid=10521 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.154833][ T29] audit: type=1400 audit(1739288318.541:1472): avc: denied { read } for pid=10521 comm="syz.5.1412" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 373.196011][ T29] audit: type=1400 audit(1739288318.581:1473): avc: denied { ioctl } for pid=10521 comm="syz.5.1412" path="socket:[28230]" dev="sockfs" ino=28230 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.229780][ T29] audit: type=1400 audit(1739288318.581:1474): avc: denied { write } for pid=10521 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.426401][T10527] ������ speed is unknown, defaulting to 1000 [ 374.502017][T10527] ������ speed is unknown, defaulting to 1000 [ 375.172783][T10549] netlink: 'syz.5.1420': attribute type 9 has an invalid length. [ 375.526013][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1423'. [ 376.484738][ T29] audit: type=1400 audit(1739288321.911:1475): avc: denied { name_bind } for pid=10561 comm="syz.0.1426" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 376.516464][ T29] audit: type=1400 audit(1739288321.911:1476): avc: denied { node_bind } for pid=10561 comm="syz.0.1426" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 377.320368][ T5829] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 378.109609][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 378.123515][ T5829] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 378.142254][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.177064][ T5829] usb 1-1: Product: syz [ 378.184611][ T5829] usb 1-1: Manufacturer: syz [ 378.194986][ T5829] usb 1-1: SerialNumber: syz [ 378.212091][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.219751][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.262042][ T5829] usb 1-1: config 0 descriptor?? [ 378.288335][ T5829] gspca_main: sq905-2.14.0 probing 2770:9120 [ 378.471401][ T5829] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 378.486473][ T5829] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 378.509098][ T5829] usb 1-1: USB disconnect, device number 14 [ 378.590378][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 378.699696][ T866] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 378.859629][ T866] usb 2-1: Using ep0 maxpacket: 32 [ 378.861313][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.876526][ T866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.877162][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.898794][ T866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.911923][ T29] audit: type=1400 audit(1739288324.341:1477): avc: denied { getopt } for pid=10584 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.926230][ T866] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 379.033752][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.045946][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.059580][ T5898] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.069067][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.081700][ T866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.096980][ T5898] usb 5-1: config 0 descriptor?? [ 379.132582][T10591] bond0: entered promiscuous mode [ 379.137749][T10591] bond_slave_0: entered promiscuous mode [ 379.145070][T10591] bond_slave_1: entered promiscuous mode [ 379.343775][ T866] usb 2-1: config 0 descriptor?? [ 379.372898][ T866] hub 2-1:0.0: USB hub found [ 379.526122][ T29] audit: type=1400 audit(1739288324.951:1478): avc: denied { write } for pid=10599 comm="syz.6.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.586053][ T866] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 379.609665][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 379.615651][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.631878][ T5898] usb 5-1: USB disconnect, device number 17 [ 379.729658][ T5817] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 379.814643][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 379.822093][ T866] usbhid 2-1:0.0: can't add hid device: -71 [ 379.828062][ T866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 379.852730][ T866] usb 2-1: USB disconnect, device number 22 [ 380.299755][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 380.311540][ T29] audit: type=1400 audit(1739288325.741:1479): avc: denied { recv } for pid=10439 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.88 dest=43670 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 380.314341][ T5817] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 380.345088][ T5817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.355121][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.364954][ T5817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.376091][ T5817] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.389207][ T5817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.398620][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.614345][ T5817] usb 1-1: usb_control_msg returned -32 [ 380.632545][ T5817] usbtmc 1-1:16.0: can't read capabilities [ 380.894721][T10625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.908349][T10625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.009829][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 381.020497][ T29] audit: type=1400 audit(1739288326.441:1480): avc: denied { connect } for pid=10628 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.091205][ T29] audit: type=1400 audit(1739288326.441:1481): avc: denied { ioctl } for pid=10628 comm="syz.1.1451" path="socket:[28444]" dev="sockfs" ino=28444 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.219870][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 381.228056][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 381.239836][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.258140][ T9] usb 6-1: Product: syz [ 381.267143][ T9] usb 6-1: Manufacturer: syz [ 381.277747][ T9] usb 6-1: SerialNumber: syz [ 381.294462][ T9] usb 6-1: config 0 descriptor?? [ 381.302308][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 381.331996][T10638] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 381.980447][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 381.992222][ T5817] usb 1-1: USB disconnect, device number 15 [ 381.992784][ T9] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 382.010963][ T9] usb 6-1: USB disconnect, device number 14 [ 382.223850][ T29] audit: type=1400 audit(1739288327.651:1482): avc: denied { create } for pid=10657 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 382.260590][ T29] audit: type=1400 audit(1739288327.681:1483): avc: denied { getopt } for pid=10657 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 382.633449][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 382.866464][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 382.952197][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.154879][ T9] usb 2-1: config 0 descriptor?? [ 383.203897][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 384.230131][ T5817] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 384.277201][T10708] syzkaller0: entered promiscuous mode [ 384.288675][T10708] syzkaller0: entered allmulticast mode [ 384.307164][ T29] audit: type=1400 audit(1739288329.731:1484): avc: denied { relabelfrom } for pid=10707 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 384.328503][ T29] audit: type=1400 audit(1739288329.731:1485): avc: denied { relabelto } for pid=10707 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 384.413324][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.424987][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 384.440530][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 384.451842][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 384.461610][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.476461][ T5817] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 384.485683][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.494965][ T5817] usb 5-1: Product: syz [ 384.499251][ T5817] usb 5-1: Manufacturer: syz [ 384.504166][ T5817] usb 5-1: SerialNumber: syz [ 384.523532][ T5817] usb 5-1: config 0 descriptor?? [ 384.550033][ T5817] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 384.568337][ T5817] imon 5-1:0.0: unable to initialize intf0, err -90 [ 384.584247][ T5817] imon:imon_probe: failed to initialize context! [ 384.586918][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 384.593817][ T5817] imon 5-1:0.0: unable to register, err -19 [ 384.627432][ T9] usb 2-1: USB disconnect, device number 23 [ 384.639733][ T866] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 384.658325][ T29] audit: type=1400 audit(1739288330.071:1486): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 384.788863][ T29] audit: type=1400 audit(1739288330.211:1487): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 384.834352][ T866] usb 6-1: Using ep0 maxpacket: 8 [ 384.842130][ T866] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 384.856970][ T866] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.877662][ T866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.893527][ T866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.910116][ T866] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.943952][ T866] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.958859][ T866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.189267][ T866] usb 6-1: usb_control_msg returned -32 [ 385.198462][ T866] usbtmc 6-1:16.0: can't read capabilities [ 385.483897][ T29] audit: type=1400 audit(1739288330.911:1488): avc: denied { ioctl } for pid=10720 comm="syz.1.1484" path="socket:[28795]" dev="sockfs" ino=28795 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 385.508852][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.884582][ T29] audit: type=1400 audit(1739288331.311:1489): avc: denied { sys_module } for pid=10720 comm="syz.1.1484" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 385.937470][T10729] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 386.138287][ T866] usb 6-1: USB disconnect, device number 15 [ 386.729200][ T5817] usb 5-1: USB disconnect, device number 18 [ 387.093800][ T29] audit: type=1400 audit(1739288332.501:1490): avc: denied { create } for pid=10733 comm="syz.6.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 387.238361][T10746] overlayfs: missing 'lowerdir' [ 387.987669][ T29] audit: type=1400 audit(1739288332.511:1491): avc: denied { setopt } for pid=10733 comm="syz.6.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.007282][ T29] audit: type=1400 audit(1739288332.511:1492): avc: denied { connect } for pid=10733 comm="syz.6.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.488608][ T29] audit: type=1400 audit(1739288333.771:1493): avc: denied { bind } for pid=10750 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.537134][T10759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.547682][T10759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.555617][T10759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.123093][T10759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.130571][T10759] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 389.137873][T10759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.221304][T10763] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1496'. [ 389.289556][T10756] ������ speed is unknown, defaulting to 1000 [ 389.374663][T10756] ������ speed is unknown, defaulting to 1000 [ 389.424329][T10774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.443087][T10772] syzkaller0: entered promiscuous mode [ 389.448707][T10772] syzkaller0: entered allmulticast mode [ 389.663917][ T5898] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 390.089661][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 390.199770][ T5898] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 390.207986][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.218489][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.232971][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.244893][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.263766][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.288575][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.206598][ T5898] usb 2-1: usb_control_msg returned -32 [ 391.212682][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 391.337434][T10759] Bluetooth: hci0: command tx timeout [ 391.951344][T10792] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 76 [ 392.153828][ T5898] usb 2-1: USB disconnect, device number 24 [ 392.417985][T10777] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1502'. [ 392.572739][T10756] chnl_net:caif_netlink_parms(): no params data found [ 392.670521][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.677654][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.700720][T10756] bridge_slave_0: entered allmulticast mode [ 393.248285][T10756] bridge_slave_0: entered promiscuous mode [ 393.262268][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.269377][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.286164][T10756] bridge_slave_1: entered allmulticast mode [ 393.293084][T10756] bridge_slave_1: entered promiscuous mode [ 393.393593][T10813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.409618][T10759] Bluetooth: hci0: command tx timeout [ 393.431829][T10756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.449950][T10756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.569313][T10756] team0: Port device team_slave_0 added [ 393.610342][T10756] team0: Port device team_slave_1 added [ 393.651079][T10819] sp0: Synchronizing with TNC [ 393.676048][T10756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.793225][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.003634][T10756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.180335][T10756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.187289][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.213461][T10756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.262864][T10759] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 394.310760][T10756] hsr_slave_0: entered promiscuous mode [ 394.324235][T10756] hsr_slave_1: entered promiscuous mode [ 394.336241][T10756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.347376][T10756] Cannot create hsr debugfs directory [ 394.459032][T10830] lo: entered promiscuous mode [ 394.535446][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 394.535478][ T29] audit: type=1400 audit(1739288339.951:1501): avc: denied { write } for pid=10826 comm="syz.6.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.105429][T10756] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 395.216645][T10756] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.411823][T10756] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.424383][T10756] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 395.523651][T10759] Bluetooth: hci0: command tx timeout [ 395.879726][ T5898] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 395.933584][ T29] audit: type=1400 audit(1739288341.341:1502): avc: denied { read } for pid=10848 comm="syz.5.1524" name="nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.963686][ T29] audit: type=1400 audit(1739288341.341:1503): avc: denied { open } for pid=10848 comm="syz.5.1524" path="/dev/nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.987862][ T29] audit: type=1400 audit(1739288341.391:1504): avc: denied { ioctl } for pid=10848 comm="syz.5.1524" path="/dev/nbd5" dev="devtmpfs" ino=684 ioctlcmd=0xab01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.013600][ T866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.140201][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.249098][ T29] audit: type=1400 audit(1739288341.651:1505): avc: denied { map } for pid=10848 comm="syz.5.1524" path="socket:[28991]" dev="sockfs" ino=28991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 396.276871][ T866] usb 5-1: Using ep0 maxpacket: 8 [ 396.380807][ T866] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 396.573733][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.581149][ T866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.617524][T10756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.634137][T10756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.644846][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 396.660851][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.663835][ T866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.685556][ T866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.686553][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.701306][ T866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.702551][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.717433][ T866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.729551][ T5898] usb 7-1: config 0 has no interfaces? [ 396.739056][ T5898] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 396.754768][ T866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.779223][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.786379][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.906979][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.920194][ T5898] usb 7-1: Product: syz [ 396.924372][ T5898] usb 7-1: Manufacturer: syz [ 396.928965][ T5898] usb 7-1: SerialNumber: syz [ 396.940955][ T5898] usb 7-1: config 0 descriptor?? [ 397.274618][ T29] audit: type=1400 audit(1739288342.411:1506): avc: denied { egress } for pid=9 comm="kworker/0:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 397.383904][ T866] usb 5-1: usb_control_msg returned -32 [ 397.417190][ T866] usbtmc 5-1:16.0: can't read capabilities [ 397.445869][ T29] audit: type=1400 audit(1739288342.411:1507): avc: denied { sendto } for pid=9 comm="kworker/0:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 397.689179][T10759] Bluetooth: hci0: command tx timeout [ 397.701331][ T5898] usb 7-1: USB disconnect, device number 14 [ 397.964883][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.330830][T10879] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 76 [ 398.537710][ T5898] usb 5-1: USB disconnect, device number 19 [ 398.862667][T10756] veth0_vlan: entered promiscuous mode [ 398.895357][T10756] veth1_vlan: entered promiscuous mode [ 398.968252][T10756] veth0_macvtap: entered promiscuous mode [ 398.993116][T10756] veth1_macvtap: entered promiscuous mode [ 399.005339][ T866] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 399.026619][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.037957][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.054339][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.085257][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.106863][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.141016][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.161607][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.181228][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.182148][ T866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.194976][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.202042][ T866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.218272][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.242588][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.260038][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.270100][ T5898] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 399.285213][T10756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.297971][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.314682][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.328125][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.345478][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.365986][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.379320][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.392764][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.406544][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.420399][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.436981][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.449295][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.467905][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.478034][ T5898] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 399.496700][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.506048][T10756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.524137][ T5898] usb 7-1: config 0 descriptor?? [ 399.538925][T10756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.545288][T10875] page: refcount:3 mapcount:1 mapping:ffff88802463c4f0 index:0x60 pfn:0x4f885 [ 399.556833][T10875] memcg:ffff8880250ac000 [ 399.558506][T10756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.561056][T10875] aops:shmem_aops ino:531 [ 399.561075][T10875] flags: 0xfff6800002002d(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 399.561100][T10875] raw: 00fff6800002002d ffffea00013e2188 ffffea00013e2108 ffff88802463c4f0 [ 399.561114][T10875] raw: 0000000000000060 0000000000000000 0000000300000000 ffff8880250ac000 [ 399.561123][T10875] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 399.561132][T10875] page_owner tracks the page as allocated [ 399.571277][ T5898] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 399.574344][T10875] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 10871, tgid 10867 (syz.1.1528), ts 397863592877, free_ts 397789465871 [ 399.586701][T10756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.593650][T10875] post_alloc_hook+0x181/0x1b0 [ 399.593677][T10875] get_page_from_freelist+0xfce/0x2f80 [ 399.593692][T10875] __alloc_frozen_pages_noprof+0x221/0x2470 [ 399.593707][T10875] alloc_pages_mpol+0x1fc/0x540 [ 399.593722][T10875] folio_alloc_mpol_noprof+0x36/0x2f0 [ 399.593740][T10875] shmem_alloc_folio+0x135/0x160 [ 399.593757][T10875] shmem_alloc_and_add_folio+0x48e/0xc10 [ 399.593776][T10875] shmem_get_folio_gfp+0x689/0x1530 [ 399.593795][T10875] shmem_fault+0x200/0xae0 [ 399.593813][T10875] __do_fault+0x10a/0x490 [ 399.593830][T10875] do_pte_missing+0xecf/0x3e10 [ 399.593844][T10875] __handle_mm_fault+0x1166/0x2c60 [ 399.593858][T10875] handle_mm_fault+0x3fa/0xaa0 [ 399.593872][T10875] __get_user_pages+0x773/0x36f0 [ 399.593895][T10875] populate_vma_page_range+0x27f/0x3a0 [ 399.593910][T10875] __mm_populate+0x1d6/0x380 [ 399.593923][T10875] page last free pid 10862 tgid 10856 stack trace: [ 399.593933][T10875] free_unref_folios+0xa7b/0x1500 [ 399.593947][T10875] folios_put_refs+0x587/0x7b0 [ 399.593969][T10875] shmem_undo_range+0x586/0x1170 [ 399.593995][T10875] shmem_evict_inode+0x3a3/0xba0 [ 399.594015][T10875] evict+0x409/0x960 [ 399.594031][T10875] iput+0x52a/0x890 [ 399.761962][T10875] dentry_unlink_inode+0x29c/0x480 [ 399.767071][T10875] __dentry_kill+0x1d0/0x600 [ 399.771645][T10875] dput.part.0+0x4b1/0x9b0 [ 399.776045][T10875] dput+0x1f/0x30 [ 399.779676][T10875] __fput+0x51c/0xb70 [ 399.783641][T10875] task_work_run+0x14e/0x250 [ 399.788214][T10875] do_exit+0xad8/0x2d70 [ 399.792351][T10875] do_group_exit+0xd3/0x2a0 [ 399.796852][T10875] get_signal+0x24ed/0x26c0 [ 399.801356][T10875] arch_do_signal_or_restart+0x90/0x7e0 [ 399.806971][T10875] ------------[ cut here ]------------ [ 399.812414][T10875] kernel BUG at mm/filemap.c:154! [ 399.817427][T10875] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 399.824514][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.1.1528 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 399.835249][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 399.845287][T10875] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 399.851427][T10875] Code: f7 35 ca ff 4c 8d 6b 30 31 ff 89 ee e8 ea 30 ca ff 85 ed 7e 17 e8 e1 35 ca ff 48 c7 c6 80 8c 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 ca 35 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 399.871027][T10875] RSP: 0018:ffffc900101e73b0 EFLAGS: 00010093 [ 399.877084][T10875] RAX: 0000000000000000 RBX: ffffea00013e2140 RCX: ffffc900101e7258 [ 399.885032][T10875] RDX: ffff88807c86c880 RSI: ffffffff81ef9e0e RDI: ffff88807c86ccc4 [ 399.892985][T10875] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c46c2 [ 399.900933][T10875] R10: ffffffff90623617 R11: 0000000000000001 R12: ffff88802463c4f0 [ 399.908880][T10875] R13: ffffea00013e2170 R14: 0000000000000000 R15: ffffc900101e7630 [ 399.916827][T10875] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 399.925750][T10875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.932332][T10875] CR2: 0000400001000000 CR3: 000000000df80000 CR4: 00000000003526f0 [ 399.940294][T10875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.948244][T10875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.956196][T10875] Call Trace: [ 399.959457][T10875] <TASK> [ 399.962369][T10875] ? die+0x31/0x80 [ 399.966081][T10875] ? do_trap+0x232/0x430 [ 399.970309][T10875] ? filemap_unaccount_folio+0xef/0x860 [ 399.975840][T10875] ? filemap_unaccount_folio+0xef/0x860 [ 399.981366][T10875] ? do_error_trap+0xf4/0x230 [ 399.986021][T10875] ? filemap_unaccount_folio+0xef/0x860 [ 399.991549][T10875] ? handle_invalid_op+0x34/0x40 [ 399.996466][T10875] ? filemap_unaccount_folio+0xef/0x860 [ 400.001991][T10875] ? exc_invalid_op+0x2e/0x50 [ 400.006649][T10875] ? asm_exc_invalid_op+0x1a/0x20 [ 400.011679][T10875] ? filemap_unaccount_folio+0xee/0x860 [ 400.017203][T10875] ? filemap_unaccount_folio+0xef/0x860 [ 400.022728][T10875] filemap_remove_folio+0xf1/0x250 [ 400.027822][T10875] truncate_inode_folio+0x49/0x70 [ 400.032829][T10875] shmem_undo_range+0x36e/0x1170 [ 400.037750][T10875] ? __pfx_shmem_undo_range+0x10/0x10 [ 400.043114][T10875] ? __lock_acquire+0xcc5/0x3c40 [ 400.048046][T10875] ? mark_lock+0xb5/0xc60 [ 400.052365][T10875] ? __pfx___lock_acquire+0x10/0x10 [ 400.057550][T10875] ? hlock_class+0x4e/0x130 [ 400.062032][T10875] ? mark_lock+0xb5/0xc60 [ 400.066348][T10875] ? __pfx___lock_acquire+0x10/0x10 [ 400.071538][T10875] ? hlock_class+0x4e/0x130 [ 400.076018][T10875] ? percpu_counter_add_batch+0xb5/0x1e0 [ 400.081634][T10875] shmem_evict_inode+0x3a3/0xba0 [ 400.086553][T10875] ? find_held_lock+0x2d/0x110 [ 400.091320][T10875] ? __pfx_shmem_evict_inode+0x10/0x10 [ 400.096761][T10875] ? evict+0x3c8/0x960 [ 400.100809][T10875] ? __pfx_lock_release+0x10/0x10 [ 400.105816][T10875] ? lock_acquire+0x2f/0xb0 [ 400.110302][T10875] ? __pfx_shmem_evict_inode+0x10/0x10 [ 400.115740][T10875] evict+0x409/0x960 [ 400.119614][T10875] ? __pfx_evict+0x10/0x10 [ 400.124013][T10875] iput+0x52a/0x890 [ 400.127801][T10875] ? __pfx_generic_delete_inode+0x10/0x10 [ 400.133503][T10875] dentry_unlink_inode+0x29c/0x480 [ 400.138592][T10875] __dentry_kill+0x1d0/0x600 [ 400.143174][T10875] dput.part.0+0x4b1/0x9b0 [ 400.147570][T10875] dput+0x1f/0x30 [ 400.151184][T10875] __fput+0x51c/0xb70 [ 400.155148][T10875] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.160334][T10875] task_work_run+0x14e/0x250 [ 400.164908][T10875] ? __pfx_task_work_run+0x10/0x10 [ 400.170001][T10875] ? do_raw_spin_unlock+0x172/0x230 [ 400.175177][T10875] do_exit+0xad8/0x2d70 [ 400.179313][T10875] ? get_signal+0x8f7/0x26c0 [ 400.183887][T10875] ? __pfx_do_exit+0x10/0x10 [ 400.188453][T10875] ? do_raw_spin_lock+0x12d/0x2c0 [ 400.193454][T10875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.198804][T10875] do_group_exit+0xd3/0x2a0 [ 400.203286][T10875] get_signal+0x24ed/0x26c0 [ 400.207779][T10875] ? __pfx_lock_release+0x10/0x10 [ 400.212784][T10875] ? __pfx_get_signal+0x10/0x10 [ 400.217637][T10875] arch_do_signal_or_restart+0x90/0x7e0 [ 400.223161][T10875] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.229295][T10875] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 400.234825][T10875] syscall_exit_to_user_mode+0x150/0x2a0 [ 400.240436][T10875] do_syscall_64+0xda/0x250 [ 400.244920][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.250801][T10875] RIP: 0033:0x7f0cd058cde9 [ 400.255191][T10875] Code: Unable to access opcode bytes at 0x7f0cd058cdbf. [ 400.262183][T10875] RSP: 002b:00007f0cd140e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 400.270575][T10875] RAX: 000000000003fffd RBX: 00007f0cd07a6080 RCX: 00007f0cd058cde9 [ 400.278523][T10875] RDX: 03fffffffffffeda RSI: 00004000000000c0 RDI: 0000000000000003 [ 400.286484][T10875] RBP: 00007f0cd060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.294443][T10875] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 400.302392][T10875] R13: 0000000000000000 R14: 00007f0cd07a6080 R15: 00007ffeee299798 [ 400.310344][T10875] </TASK> [ 400.313340][T10875] Modules linked in: [ 400.317212][T10875] ---[ end trace 0000000000000000 ]--- [ 400.322643][T10875] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 400.328780][T10875] Code: f7 35 ca ff 4c 8d 6b 30 31 ff 89 ee e8 ea 30 ca ff 85 ed 7e 17 e8 e1 35 ca ff 48 c7 c6 80 8c 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 ca 35 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 400.348377][T10875] RSP: 0018:ffffc900101e73b0 EFLAGS: 00010093 [ 400.354420][T10875] RAX: 0000000000000000 RBX: ffffea00013e2140 RCX: ffffc900101e7258 [ 400.362369][T10875] RDX: ffff88807c86c880 RSI: ffffffff81ef9e0e RDI: ffff88807c86ccc4 [ 400.370331][T10875] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c46c2 [ 400.378281][T10875] R10: ffffffff90623617 R11: 0000000000000001 R12: ffff88802463c4f0 [ 400.386229][T10875] R13: ffffea00013e2170 R14: 0000000000000000 R15: ffffc900101e7630 [ 400.394179][T10875] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 400.403088][T10875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.409649][T10875] CR2: 0000400001000000 CR3: 000000000df80000 CR4: 00000000003526f0 [ 400.417605][T10875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.425553][T10875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.433502][T10875] Kernel panic - not syncing: Fatal exception [ 400.439749][T10875] Kernel Offset: disabled [ 400.444046][T10875] Rebooting in 86400 seconds..