last executing test programs: 24.47946061s ago: executing program 2 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_settime(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 20.784197228s ago: executing program 2 (id=1253): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 15.318127938s ago: executing program 0 (id=1267): mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f000070c000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00007bc000/0x4000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) 13.255783153s ago: executing program 0 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000200000000100000640001000006020202020202010182"], 0x57) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d6118b069be0246c37acee236090a8b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1d205a900fce587010d596b0fe375c15"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "26a6654d866ca3f0"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 13.124591431s ago: executing program 2 (id=1270): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4, 0x0, 0x0) 12.939042731s ago: executing program 3 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000400)) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000000340)) 12.938438209s ago: executing program 4 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000000)={0x3, 0xcd, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.591478562s ago: executing program 2 (id=1274): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) 11.588664017s ago: executing program 3 (id=1275): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001980), 0x0, 0x20002040) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) userfaultfd(0x1) 10.402791654s ago: executing program 0 (id=1277): socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(0x0, 0x1, 0x0) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902520001000000000904400000"], 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x8000067f, 0x4, 0x0, 0x0) 10.327685851s ago: executing program 4 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x1a, 0x80805, 0x1fe) fcntl$notify(r1, 0x402, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.76316643s ago: executing program 3 (id=1280): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x7732561d5b88ce84}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000a00)={'filter\x00', 0x4}, 0x68) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479000000000000000000000000000000000000000000000000040000000d"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}]}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000203010100000001000000000400004a080001000100002a4ad0ddcd010cd9544f4cf7062a1bcbca33"], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 9.037802652s ago: executing program 0 (id=1283): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) inotify_init1(0x80800) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.267287423s ago: executing program 4 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000004c0), 0x0) 6.625420312s ago: executing program 1 (id=1285): r0 = syz_io_uring_setup(0x55e, &(0x7f0000000100)={0x0, 0xf8b3, 0x7800, 0x1, 0x315}, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x110, 0x6, 0x0, 0xfffffffffffffdcb) 6.605519477s ago: executing program 0 (id=1286): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r3, 0x2) 5.791237744s ago: executing program 0 (id=1287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000001c0), 0x2000000000000000, 0x92400) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 5.790847325s ago: executing program 4 (id=1288): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000776000/0x4000)=nil, 0x5000) shmdt(r4) 5.347724783s ago: executing program 2 (id=1289): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, 0x0, 0x40000) socket$netlink(0x10, 0x3, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', '', [], 0xa, "1388c211a173fb8ac336eb37a6bf0555ea4ce93f602fbb4014015acd6cafe4ae1b4497025263afb09ef59d97f511c72e667033af211c709b932985d3955001798e2c71140fe3f01f71c5a6e13fb1c371766bcf"}, 0x57) 5.34705036s ago: executing program 1 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5.257783519s ago: executing program 3 (id=1291): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 4.285788589s ago: executing program 1 (id=1292): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x11, 0x2, 0xffffffff}}], 0x28}}], 0x1, 0x4040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.809352468s ago: executing program 3 (id=1293): mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) semctl$SETVAL(0x0, 0x7, 0x10, &(0x7f0000000280)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000002c0)={0xc}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.742492084s ago: executing program 1 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x20001, 0x0, 0x11}, 0x18) 1.006923569s ago: executing program 1 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000000)={r4}) 709.94987ms ago: executing program 3 (id=1296): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) io_uring_enter(r3, 0x4e14, 0x913a, 0x41, 0x0, 0x0) 0s ago: executing program 1 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000001440)=0x82) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="9201100160dd9920e9050900db73010203010902120001000010000904b6070009bd2e0063430e91ccfcba7ab2f31b04c6fc98f5ee736093555c7986872ef48c6812f415c5a106d3a33e9b286357fc5f9c466a68a2c60d3d98b84580bbe540a638f1c97e606de1d741f6230ec383e2b7d6b5"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="000e000000a4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): type=1400 audit(1771110906.144:354): avc: denied { ioctl } for pid=7327 comm="syz.4.379" path="socket:[16045]" dev="sockfs" ino=16045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.727330][ T7332] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 171.799269][ T7332] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 171.837289][ T7332] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 171.982798][ T7348] SELinux: failed to load policy [ 172.229316][ T30] audit: type=1400 audit(1771110906.984:355): avc: denied { mount } for pid=7349 comm="syz.1.385" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.613486][ T30] audit: type=1400 audit(1771110907.384:356): avc: denied { read } for pid=7345 comm="syz.4.384" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.647678][ T30] audit: type=1400 audit(1771110907.384:357): avc: denied { ioctl } for pid=7345 comm="syz.4.384" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.674069][ T30] audit: type=1400 audit(1771110907.414:358): avc: denied { getopt } for pid=7345 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.278148][ T7376] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 174.298783][ T30] audit: type=1400 audit(1771110909.064:359): avc: denied { name_bind } for pid=7375 comm="syz.3.392" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.549708][ T30] audit: type=1400 audit(1771110909.314:360): avc: denied { read } for pid=7381 comm="syz.0.395" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.562535][ T30] audit: type=1400 audit(1771110910.324:361): avc: denied { write } for pid=7398 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.753387][ T6331] Bluetooth: hci5: Frame reassembly failed (-84) [ 175.772701][ T7399] sctp: [Deprecated]: syz.0.399 (pid 7399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.772701][ T7399] Use struct sctp_sack_info instead [ 176.164836][ T30] audit: type=1400 audit(1771110910.934:362): avc: denied { bind } for pid=7412 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.791849][ T30] audit: type=1400 audit(1771110911.504:363): avc: denied { bind } for pid=7419 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.772874][ T7435] futex_wake_op: syz.1.409 tries to shift op by -1; fix this program [ 177.820257][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 177.820556][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.572802][ T30] audit: type=1400 audit(1771110913.344:364): avc: denied { getopt } for pid=7426 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.957824][ T7445] loop6: detected capacity change from 0 to 2640 [ 178.992188][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.015368][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.054357][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.130864][ T30] audit: type=1107 audit(1771110913.884:365): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¦Æ­Øz ü‹ˆý’G:Žø¢Dø>ˆQ“·ÐšPn HID v0.00 Device [syz1] on syz0 [ 184.210677][ T30] audit: type=1400 audit(1771110918.974:368): avc: denied { mounton } for pid=7561 comm="syz.3.438" path="/proc/339/task" dev="proc" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 184.352903][ T7567] xt_ecn: cannot match TCP bits for non-tcp packets [ 184.494559][ T7571] binder: BINDER_SET_CONTEXT_MGR already set [ 184.506717][ T7571] binder: 7570:7571 ioctl 4018620d 200000000040 returned -16 [ 184.530295][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.750085][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 184.948684][ T7579] kAFS: unable to lookup cell '(' [ 184.975696][ T29] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 185.030701][ T29] usb 1-1: config 2 has no interface number 0 [ 185.100774][ T29] usb 1-1: config 2 interface 31 has no altsetting 0 [ 185.127780][ T29] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 185.155911][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.185685][ T29] usb 1-1: Product: syz [ 185.195863][ T29] usb 1-1: Manufacturer: syz [ 185.214290][ T29] usb 1-1: SerialNumber: syz [ 185.910934][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.944278][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.500269][ T29] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 186.548936][ T29] usb 1-1: USB disconnect, device number 5 [ 188.631752][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.638060][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.749843][ T7652] netlink: 'syz.0.461': attribute type 1 has an invalid length. [ 190.856582][ T7655] gre1: entered promiscuous mode [ 191.016389][ T7655] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 191.036259][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 191.482315][ T7655] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 191.635148][ T7655] bond1: (slave gre1): making interface the new active one [ 192.187440][ T7655] bond1: (slave gre1): Enslaving as an active interface with an up link [ 192.237629][ T7652] bond1 (unregistering): (slave gre1): Releasing backup interface [ 192.251348][ T7652] bond1 (unregistering): Released all slaves [ 192.442916][ T30] audit: type=1400 audit(1771110927.214:369): avc: denied { create } for pid=7665 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.799038][ T30] audit: type=1400 audit(1771110928.564:370): avc: denied { append } for pid=7679 comm="syz.4.468" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.891389][ T7685] tipc: Started in network mode [ 193.911284][ T7685] tipc: Node identity 4, cluster identity 4711 [ 193.929145][ T7685] tipc: Node number set to 4 [ 193.945179][ T30] audit: type=1400 audit(1771110928.644:371): avc: denied { map } for pid=7679 comm="syz.4.468" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.092523][ T30] audit: type=1400 audit(1771110928.644:372): avc: denied { write execute } for pid=7679 comm="syz.4.468" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.148127][ T30] audit: type=1400 audit(1771110928.864:373): avc: denied { setattr } for pid=7688 comm="syz.3.470" name="NETLINK" dev="sockfs" ino=17873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.489227][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.518454][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.540951][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.637568][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.647378][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.657636][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.673111][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 195.684074][ T7703] tipc: Enabled bearer , priority 10 [ 195.697641][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.088026][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.097958][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.107847][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.118551][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.128082][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.138798][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.170555][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.308167][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.324617][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.335340][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.346079][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.519359][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.540177][ T30] audit: type=1400 audit(1771110931.254:374): avc: denied { getopt } for pid=7710 comm="syz.3.477" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.641934][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 196.759115][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 197.116733][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 197.218085][ T7701] 9pnet_fd: p9_fd_create_tcp (7701): problem connecting socket to 127.0.0.1 [ 197.487432][ T30] audit: type=1400 audit(1771110932.254:375): avc: denied { read } for pid=7721 comm="syz.3.480" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.790118][ T30] audit: type=1400 audit(1771110932.284:376): avc: denied { open } for pid=7721 comm="syz.3.480" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.817479][ T30] audit: type=1400 audit(1771110932.314:377): avc: denied { ioctl } for pid=7721 comm="syz.3.480" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 198.309317][ T30] audit: type=1326 audit(1771110933.074:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 198.388887][ T30] audit: type=1326 audit(1771110933.074:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 198.452383][ T30] audit: type=1326 audit(1771110933.074:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 198.585625][ T30] audit: type=1326 audit(1771110933.074:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 198.681673][ T30] audit: type=1326 audit(1771110933.074:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 198.838662][ T30] audit: type=1326 audit(1771110933.074:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 199.020780][ T30] audit: type=1326 audit(1771110933.074:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7fc00000 [ 199.405574][ T7745] syzkaller0: entered promiscuous mode [ 199.453536][ T7745] syzkaller0: entered allmulticast mode [ 199.727493][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 200.289370][ T7755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7755 comm=syz.0.488 [ 200.898131][ T5131] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 201.982547][ T7771] netlink: 'syz.0.493': attribute type 6 has an invalid length. [ 203.275614][ T7789] netlink: set zone limit has 4 unknown bytes [ 204.395637][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 204.395649][ T30] audit: type=1400 audit(1771110939.164:449): avc: denied { map } for pid=7807 comm="syz.2.504" path="socket:[18083]" dev="sockfs" ino=18083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.471785][ T30] audit: type=1400 audit(1771110939.164:450): avc: denied { read accept } for pid=7807 comm="syz.2.504" path="socket:[18083]" dev="sockfs" ino=18083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.169676][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 206.385564][ T7821] bridge1: port 1(veth7) entered blocking state [ 206.425633][ T7821] bridge1: port 1(veth7) entered disabled state [ 206.458693][ T7821] veth7: entered allmulticast mode [ 206.496129][ T7821] veth7: entered promiscuous mode [ 206.544818][ T7820] bridge1: port 2(veth0_to_bond) entered blocking state [ 206.573139][ T7820] bridge1: port 2(veth0_to_bond) entered disabled state [ 206.594622][ T7820] veth0_to_bond: entered allmulticast mode [ 206.630806][ T7820] veth0_to_bond: entered promiscuous mode [ 206.681268][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 206.709900][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 207.184182][ T30] audit: type=1400 audit(1771110941.954:451): avc: denied { create } for pid=7838 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.254895][ T30] audit: type=1400 audit(1771110941.984:452): avc: denied { bind } for pid=7838 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.332047][ T30] audit: type=1400 audit(1771110941.994:453): avc: denied { read } for pid=7838 comm="syz.3.514" path="socket:[18172]" dev="sockfs" ino=18172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.494526][ T30] audit: type=1400 audit(1771110942.064:454): avc: denied { setopt } for pid=7838 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.750099][ T30] audit: type=1400 audit(1771110942.354:455): avc: denied { create } for pid=7845 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.800683][ T30] audit: type=1400 audit(1771110942.464:456): avc: denied { wake_alarm } for pid=7845 comm="syz.3.515" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.675967][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 212.685753][ T7906] netlink: 'syz.0.533': attribute type 7 has an invalid length. [ 212.694481][ T7906] netlink: 'syz.0.533': attribute type 8 has an invalid length. [ 212.731682][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 212.822839][ T7906] bond0: entered promiscuous mode [ 212.857216][ T7906] bond_slave_0: entered promiscuous mode [ 212.877941][ T7906] bond_slave_1: entered promiscuous mode [ 212.888109][ T7906] ip6gretap0: entered promiscuous mode [ 212.910118][ T7906] bond0: left promiscuous mode [ 212.915468][ T7906] bond_slave_0: left promiscuous mode [ 212.924283][ T7906] bond_slave_1: left promiscuous mode [ 212.932307][ T30] audit: type=1400 audit(1771110947.694:457): avc: denied { ioctl } for pid=7912 comm="syz.1.536" path="socket:[18359]" dev="sockfs" ino=18359 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.970836][ T7906] ip6gretap0: left promiscuous mode [ 213.069935][ T7913] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.715023][ T30] audit: type=1400 audit(1771110948.484:458): avc: denied { create } for pid=7926 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 214.290677][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 214.503838][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.541958][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.605269][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.650127][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.688783][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.770063][ T30] audit: type=1400 audit(1771110949.504:459): avc: denied { mounton } for pid=7943 comm="syz.1.544" path="/101/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.793697][ T5921] usb 3-1: config 0 descriptor?? [ 214.820979][ T30] audit: type=1326 audit(1771110949.554:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 214.875794][ T30] audit: type=1326 audit(1771110949.554:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 214.901749][ T30] audit: type=1326 audit(1771110949.554:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 214.977758][ T30] audit: type=1326 audit(1771110949.554:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 215.086907][ T30] audit: type=1326 audit(1771110949.554:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 215.242940][ T5921] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 215.717707][ T30] audit: type=1326 audit(1771110949.554:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 215.742867][ T30] audit: type=1326 audit(1771110949.554:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2baf9bf79 code=0x7ffc0000 [ 215.927080][ T7935] netlink: 140 bytes leftover after parsing attributes in process `syz.2.542'. [ 215.997462][ T7966] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 217.142110][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 217.466836][ T7966] CIFS mount error: No usable UNC path provided in device string! [ 217.466836][ T7966] [ 217.520633][ T29] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 217.533587][ T7966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 218.629628][ T5874] usb 3-1: USB disconnect, device number 2 [ 219.111654][ T5874] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 219.482104][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.534239][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 219.550589][ T5874] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.559877][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.587487][ T5874] usb 3-1: config 0 descriptor?? [ 219.655394][ T5874] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.971681][ T8048] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 220.031978][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.047597][ T793] usb 3-1: USB disconnect, device number 3 [ 220.062002][ T8051] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 220.072730][ T8048] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 220.097079][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.565'. [ 220.124958][ T8051] batadv0: entered promiscuous mode [ 220.150552][ T8051] batadv0: entered allmulticast mode [ 220.171347][ T8051] bond0: (slave batadv0): Releasing backup interface [ 220.193309][ T8051] bridge0: port 3(batadv0) entered blocking state [ 220.199903][ T8051] bridge0: port 3(batadv0) entered disabled state [ 220.312387][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 220.365693][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 220.419320][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 220.419331][ T30] audit: type=1400 audit(1771110955.184:537): avc: denied { mount } for pid=8056 comm="syz.3.568" name="/" dev="configfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 220.512084][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 220.521921][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 220.593833][ T30] audit: type=1400 audit(1771110955.304:538): avc: denied { search } for pid=8056 comm="syz.3.568" name="/" dev="configfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.024135][ T30] audit: type=1400 audit(1771110955.634:539): avc: denied { write } for pid=8060 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 222.270849][ T30] audit: type=1400 audit(1771110957.024:540): avc: denied { read } for pid=8078 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.402902][ T30] audit: type=1400 audit(1771110957.174:541): avc: denied { read } for pid=8076 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.521678][ T30] audit: type=1400 audit(1771110957.284:542): avc: denied { setopt } for pid=8076 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.821111][ T793] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 223.022181][ T793] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.063005][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.111294][ T793] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.291248][ T793] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.763732][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.794065][ T793] hub 3-1:1.0: bad descriptor, ignoring hub [ 223.809945][ T793] hub 3-1:1.0: probe with driver hub failed with error -5 [ 223.872936][ T793] cdc_wdm 3-1:1.0: skipping garbage [ 223.913346][ T793] cdc_wdm 3-1:1.0: skipping garbage [ 223.936209][ T793] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 226.036249][ T30] audit: type=1400 audit(1771110960.804:543): avc: denied { bind } for pid=8119 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.640676][ T30] audit: type=1400 audit(1771110960.804:544): avc: denied { name_bind } for pid=8119 comm="syz.4.584" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 226.666498][ T30] audit: type=1400 audit(1771110960.804:545): avc: denied { node_bind } for pid=8119 comm="syz.4.584" saddr=172.20.20.34 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 226.956536][ T5921] usb 3-1: USB disconnect, device number 4 [ 227.044688][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 230.363198][ T30] audit: type=1400 audit(1771110965.124:546): avc: denied { create } for pid=8184 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 230.509181][ T8188] syzkaller0: entered promiscuous mode [ 230.534914][ T8188] syzkaller0: entered allmulticast mode [ 232.965475][ T30] audit: type=1400 audit(1771110967.734:547): avc: denied { create } for pid=8224 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 233.006017][ T8231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.064637][ T8254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 234.102588][ T8254] netlink: 59 bytes leftover after parsing attributes in process `syz.2.612'. [ 234.120318][ T8254] netlink: 59 bytes leftover after parsing attributes in process `syz.2.612'. [ 237.584778][ T30] audit: type=1400 audit(1771110972.354:548): avc: denied { listen } for pid=8293 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.771917][ T30] audit: type=1400 audit(1771110972.354:549): avc: denied { accept } for pid=8293 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.800638][ T793] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.011288][ T8240] syz.0.609 (8240): drop_caches: 3 [ 239.052013][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.062796][ T793] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.137861][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.187964][ T793] usb 4-1: config 0 descriptor?? [ 239.219994][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 239.708709][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 239.716184][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 239.723811][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 239.745718][ T793] pwc: recv_control_msg error -32 req 04 val 1000 [ 239.779809][ T793] pwc: recv_control_msg error -32 req 04 val 1300 [ 239.794752][ T793] pwc: recv_control_msg error -32 req 04 val 1400 [ 239.818056][ T793] pwc: recv_control_msg error -32 req 02 val 2000 [ 239.828711][ T8326] syzkaller0: entered promiscuous mode [ 239.836215][ T793] pwc: recv_control_msg error -32 req 02 val 2100 [ 239.847242][ T8326] syzkaller0: entered allmulticast mode [ 239.854061][ T793] pwc: recv_control_msg error -32 req 04 val 1500 [ 239.875299][ T793] pwc: recv_control_msg error -32 req 02 val 2500 [ 240.283499][ T793] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.302914][ T793] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.348590][ T793] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.431682][ T793] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.447747][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.471788][ T793] pwc: Registered as video103. [ 240.489053][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 240.589125][ T30] audit: type=1400 audit(1771110975.314:550): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=2879 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.711186][ T793] usb 4-1: USB disconnect, device number 5 [ 240.779988][ T30] audit: type=1400 audit(1771110975.314:551): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2879 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.847553][ T8338] random: crng reseeded on system resumption [ 241.258068][ T30] audit: type=1400 audit(1771110975.314:552): avc: denied { ioctl } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2879 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.322620][ T30] audit: type=1400 audit(1771110975.614:553): avc: denied { write } for pid=8330 comm="syz.0.635" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.462108][ T30] audit: type=1400 audit(1771110975.614:554): avc: denied { open } for pid=8330 comm="syz.0.635" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.073837][ T8345] fuse: Bad value for 'fd' [ 242.115607][ T8345] netlink: 'syz.3.638': attribute type 5 has an invalid length. [ 243.630077][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 243.808726][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 243.825421][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.872103][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.909506][ T5874] usb 5-1: Product: syz [ 243.939576][ T5874] usb 5-1: Manufacturer: syz [ 244.026833][ T5874] usb 5-1: SerialNumber: syz [ 245.391852][ T5874] usb 5-1: config 0 descriptor?? [ 245.412448][ T8376] xt_hashlimit: size too large, truncated to 1048576 [ 245.531186][ T8377] sctp: [Deprecated]: syz.3.647 (pid 8377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.531186][ T8377] Use struct sctp_sack_info instead [ 245.576131][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 245.616700][ T5874] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.079943][ T8393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8393 comm=syz.3.653 [ 246.128493][ T8393] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 246.255763][ T8395] bond2: (slave gretap1): making interface the new active one [ 246.265092][ T8395] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 246.307178][ T8393] vlan2: entered allmulticast mode [ 246.314258][ T8393] bond2: entered allmulticast mode [ 246.426753][ T8393] gretap1: entered allmulticast mode [ 246.441014][ T8393] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 247.595381][ T5874] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 247.668615][ T5874] usb 5-1: USB disconnect, device number 8 [ 250.264596][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.271506][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.478979][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 252.625445][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 252.774278][ T8462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8462 comm=syz.2.671 [ 253.077662][ T30] audit: type=1400 audit(1771110987.844:555): avc: denied { create } for pid=8465 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 254.668675][ T8480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.680453][ T8505] Cannot find add_set index 0 as target [ 256.932211][ T8513] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 257.651773][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.814037][ T8519] bond1: (slave gretap1): making interface the new active one [ 257.875385][ T8519] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 258.197456][ T8535] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 258.205382][ T8535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 258.214087][ T8535] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 258.222169][ T8535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 260.034409][ C1] hrtimer: interrupt took 15151 ns [ 261.147473][ T8561] syz.4.695 (8561): drop_caches: 2 [ 261.347693][ T8569] xt_hashlimit: max too large, truncated to 1048576 [ 262.610889][ T30] audit: type=1400 audit(1771110997.324:556): avc: denied { bind } for pid=8585 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.693103][ T30] audit: type=1400 audit(1771110998.464:557): avc: denied { append } for pid=8611 comm="syz.3.705" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 264.646809][ T30] audit: type=1400 audit(1771110999.414:558): avc: denied { execute } for pid=8623 comm="syz.3.708" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 265.188529][ T30] audit: type=1400 audit(1771110999.874:559): avc: denied { map } for pid=8625 comm="syz.4.709" path="socket:[21248]" dev="sockfs" ino=21248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.350052][ T30] audit: type=1400 audit(1771110999.874:560): avc: denied { read accept } for pid=8625 comm="syz.4.709" path="socket:[21248]" dev="sockfs" ino=21248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.545029][ T5131] block nbd3: Receive control failed (result -32) [ 265.554709][ T8624] block nbd3: shutting down sockets [ 265.690254][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.705166][ T30] audit: type=1400 audit(1771111000.474:561): avc: denied { mounton } for pid=8631 comm="syz.1.711" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 265.732174][ T8633] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.740527][ T8633] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 265.752836][ T8633] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.762336][ T8633] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 266.120279][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 266.557835][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.596876][ T29] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 266.621266][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.649181][ T29] usb 5-1: config 0 descriptor?? [ 267.573558][ T30] audit: type=1400 audit(1771111002.344:562): avc: denied { watch watch_reads } for pid=8654 comm="syz.3.717" path="/161/file1" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.653066][ T30] audit: type=1400 audit(1771111002.374:563): avc: denied { execute_no_trans } for pid=8654 comm="syz.3.717" path="/161/file1" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.960483][ T30] audit: type=1400 audit(1771111002.524:564): avc: denied { create } for pid=8666 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.033244][ T30] audit: type=1400 audit(1771111002.544:565): avc: denied { ioctl } for pid=8666 comm="syz.1.721" path="socket:[21735]" dev="sockfs" ino=21735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.036086][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.241068][ T30] audit: type=1400 audit(1771111002.554:566): avc: denied { bind } for pid=8666 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.333069][ T30] audit: type=1400 audit(1771111002.554:567): avc: denied { connect } for pid=8666 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.410121][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.441966][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.461954][ T30] audit: type=1400 audit(1771111002.574:568): avc: denied { write } for pid=8666 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.479402][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.499897][ T8682] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 268.523622][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.571416][ T8682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.577089][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.638257][ T8686] bond3: (slave geneve2): making interface the new active one [ 268.666397][ T29] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 268.705204][ T8686] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 268.723719][ T29] hid-led 0003:1D34:0004.0007: probe with driver hid-led failed with error -71 [ 268.732833][ T30] audit: type=1400 audit(1771111003.494:569): avc: denied { accept } for pid=8681 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.817021][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.880835][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.891601][ T8695] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 268.907635][ T29] usb 5-1: USB disconnect, device number 9 [ 268.930797][ T8682] bond3: entered promiscuous mode [ 268.941597][ T8682] geneve2: entered promiscuous mode [ 268.962682][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.726'. [ 268.983007][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.012814][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.137323][ T8695] bond2: entered promiscuous mode [ 269.175625][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.219635][ T8698] bond2: entered allmulticast mode [ 269.278525][ T8702] bond2: (slave bridge2): making interface the new active one [ 269.329746][ T8702] bridge2: entered promiscuous mode [ 269.356110][ T8702] bridge2: entered allmulticast mode [ 269.407526][ T8702] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 269.578817][ T30] audit: type=1400 audit(1771111004.344:570): avc: denied { setopt } for pid=8706 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.054603][ T30] audit: type=1400 audit(1771111005.824:571): avc: denied { append } for pid=8728 comm="syz.0.736" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.442544][ T30] audit: type=1400 audit(1771111005.844:572): avc: denied { setopt } for pid=8728 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.528990][ T8704] ptrace attach of "./syz-executor exec"[8727] was attempted by "./syz-executor exec"[8704] [ 272.029017][ T8747] CIFS mount error: No usable UNC path provided in device string! [ 272.029017][ T8747] [ 272.039141][ T8747] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 272.951416][ T30] audit: type=1400 audit(1771111007.714:573): avc: denied { shutdown } for pid=8742 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.325220][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 273.550851][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.606495][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 273.640736][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.735175][ T24] hub 4-1:4.0: bad descriptor, ignoring hub [ 273.771903][ T24] hub 4-1:4.0: probe with driver hub failed with error -5 [ 273.851196][ T24] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 275.397133][ T30] audit: type=1804 audit(1771111010.164:574): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.742" name="bus" dev="ramfs" ino=21965 res=1 errno=0 [ 275.610525][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 275.631914][ T29] usb 4-1: USB disconnect, device number 6 [ 275.901862][ T30] audit: type=1400 audit(1771111010.624:575): avc: denied { read } for pid=8772 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.263524][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.302707][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.335156][ T5921] usb 5-1: Product: syz [ 276.358109][ T5921] usb 5-1: Manufacturer: syz [ 276.376819][ T5921] usb 5-1: SerialNumber: syz [ 276.394578][ T8777] tipc: Enabled bearer , priority 0 [ 276.420677][ T8777] syzkaller0: entered promiscuous mode [ 276.516277][ T8777] syzkaller0: entered allmulticast mode [ 276.612959][ T8777] tipc: Resetting bearer [ 276.642891][ T8776] tipc: Resetting bearer [ 276.701160][ T8776] tipc: Disabling bearer [ 277.101132][ T793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.112676][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 277.478903][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 277.601392][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 277.628113][ T793] usb 4-1: config 1 has an invalid interface number: 69 but max is 0 [ 277.656078][ T793] usb 4-1: config 1 has no interface number 0 [ 277.672800][ T793] usb 4-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 277.700481][ T793] usb 4-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 277.740679][ T793] usb 4-1: config 1 interface 69 has no altsetting 0 [ 277.769637][ T793] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 277.798358][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.816932][ T793] usb 4-1: Product: syz [ 277.827158][ T793] usb 4-1: Manufacturer: syz [ 277.844201][ T793] usb 4-1: SerialNumber: syz [ 277.889475][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.907960][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.929942][ T793] ipaq 4-1:1.69: PocketPC PDA converter detected [ 278.372459][ T793] ipaq 4-1:1.69: probe with driver ipaq failed with error -71 [ 278.408496][ T793] usb 4-1: USB disconnect, device number 7 [ 278.619336][ T30] audit: type=1400 audit(1771111013.384:576): avc: denied { write } for pid=8797 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.833075][ T30] audit: type=1400 audit(1771111013.604:577): avc: denied { listen } for pid=8799 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.885103][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 279.162652][ T30] audit: type=1400 audit(1771111013.934:578): avc: denied { create } for pid=8804 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 279.232832][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 279.502112][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 279.530713][ T30] audit: type=1400 audit(1771111013.954:579): avc: denied { sys_admin } for pid=8804 comm="syz.0.757" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 279.696346][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 279.709079][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 279.723169][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 279.749816][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 279.777990][ T5921] usb 5-1: USB disconnect, device number 10 [ 279.788819][ T8813] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 279.800084][ T5874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 279.855672][ T30] audit: type=1400 audit(1771111014.624:580): avc: denied { write } for pid=8812 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 279.905243][ T8817] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 279.953621][ T8813] macvlan2: entered promiscuous mode [ 279.996626][ T8813] macvlan2: entered allmulticast mode [ 280.015718][ T8813] bond3: entered promiscuous mode [ 280.029373][ T8813] gretap1: entered promiscuous mode [ 280.039480][ T8813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.066529][ T8813] bond3: left promiscuous mode [ 280.086445][ T8813] gretap1: left promiscuous mode [ 280.141184][ T5874] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 280.160725][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.180036][ T5874] usb 4-1: Product: syz [ 280.185095][ T5874] usb 4-1: Manufacturer: syz [ 280.189738][ T5874] usb 4-1: SerialNumber: syz [ 280.734127][ T8828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.774398][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.866773][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 280.985185][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 282.070880][ T793] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 282.240247][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 282.256849][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.306902][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.393901][ T793] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 282.458213][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.721337][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 282.724526][ T793] usb 3-1: config 0 descriptor?? [ 282.888620][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 283.444637][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 283.462886][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 283.472799][ T5874] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 283.592092][ T793] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 283.605644][ T793] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 283.610052][ T5874] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 283.650784][ T5874] usb 4-1: USB disconnect, device number 8 [ 284.135297][ T793] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 284.345911][ T793] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 285.964445][ T793] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup [ 286.034028][ T793] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 286.610991][ T793] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 287.556268][ T793] usb 3-1: USB disconnect, device number 5 [ 288.045049][ T30] audit: type=1400 audit(1771111022.814:581): avc: denied { connect } for pid=8901 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.110862][ T30] audit: type=1400 audit(1771111022.874:582): avc: denied { shutdown } for pid=8901 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.124828][ T30] audit: type=1400 audit(1771111024.484:583): avc: denied { setopt } for pid=8914 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.236514][ T30] audit: type=1400 audit(1771111025.504:584): avc: denied { getopt } for pid=8924 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.280730][ T8930] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.791'. [ 291.310039][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 291.515836][ T8933] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 291.522564][ T8933] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 291.705623][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 291.740329][ T30] audit: type=1400 audit(1771111026.424:585): avc: denied { watch } for pid=8938 comm="syz.1.794" path="/156/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.904707][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 291.913850][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 291.927516][ T30] audit: type=1400 audit(1771111026.424:586): avc: denied { watch_sb } for pid=8938 comm="syz.1.794" path="/156/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.960715][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 291.983065][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.996639][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.014009][ T24] usb 3-1: Product: syz [ 292.023680][ T24] usb 3-1: Manufacturer: syz [ 292.035052][ T24] usb 3-1: SerialNumber: syz [ 292.070879][ T24] usb 3-1: config 0 descriptor?? [ 292.081201][ T24] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 292.451256][ T8933] vhci_hcd vhci_hcd.0: Device attached [ 292.457020][ T8935] vhci_hcd: connection closed [ 292.471469][ T49] vhci_hcd vhci_hcd.3: stop threads [ 292.497833][ T49] vhci_hcd vhci_hcd.3: release socket [ 292.510317][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 292.533462][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.788'. [ 292.676994][ T30] audit: type=1400 audit(1771111027.444:587): avc: denied { firmware_load } for pid=8946 comm="syz.0.796" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 292.757435][ T8947] syz.0.796 (8947) used greatest stack depth: 19880 bytes left [ 292.831663][ T8948] syz.0.796 (8948) used greatest stack depth: 19672 bytes left [ 292.890367][ T30] audit: type=1400 audit(1771111027.644:588): avc: denied { module_request } for pid=8952 comm="syz.0.797" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 293.832174][ T8957] mkiss: ax0: crc mode is auto. [ 293.835193][ T30] audit: type=1400 audit(1771111028.594:589): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.851375][ T8958] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 293.882273][ T30] audit: type=1400 audit(1771111028.594:590): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.908196][ T8958] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 293.943969][ T30] audit: type=1400 audit(1771111028.594:591): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.077296][ T30] audit: type=1400 audit(1771111028.594:592): avc: denied { read } for pid=5474 comm="dhcpcd" name="n101" dev="tmpfs" ino=5234 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.101289][ T30] audit: type=1400 audit(1771111028.594:593): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5234 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.125259][ T30] audit: type=1400 audit(1771111028.594:594): avc: denied { getattr } for pid=5474 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5234 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.328070][ T8978] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 294.724118][ T8986] netlink: 'syz.1.795': attribute type 5 has an invalid length. [ 294.732781][ T8978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.816028][ T5874] usb 3-1: USB disconnect, device number 6 [ 294.832856][ T8984] bond4: (slave bridge0): making interface the new active one [ 294.872339][ T8984] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 295.670515][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 295.707889][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 295.751663][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 295.784780][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 295.915747][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 295.962783][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.070305][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 296.136430][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.215606][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.293136][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.862744][ T9014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.431362][ T5794] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 298.082902][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.123758][ T5794] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.165034][ T5794] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 298.187319][ T5794] usb 4-1: Manufacturer: syz [ 298.201155][ T5794] usb 4-1: config 0 descriptor?? [ 298.350839][ T5794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 298.975391][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.991264][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.097363][ T5794] usb 4-1: USB disconnect, device number 9 [ 299.470507][ T5794] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 299.632233][ T5794] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.677827][ T5794] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 299.745684][ T5794] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 299.802909][ T5794] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 299.870753][ T5794] usb 5-1: config 129 has no interface number 0 [ 299.910492][ T5794] usb 5-1: config 129 has no interface number 1 [ 299.948630][ T5794] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 299.989318][ T5794] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 300.016187][ T5794] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 300.047879][ T5794] usb 5-1: config 129 interface 135 has no altsetting 0 [ 300.062583][ T5794] usb 5-1: config 129 interface 5 has no altsetting 0 [ 300.095351][ T5794] usb 5-1: string descriptor 0 read error: -22 [ 300.160505][ T5794] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 300.241921][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.362754][ T5794] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.461262][ T5794] usb 5-1: MIDIStreaming interface descriptor not found [ 300.894991][ T5794] usb 5-1: USB disconnect, device number 11 [ 301.303987][ T9070] mmap: syz.2.823 (9070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.600629][ T5794] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.338868][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 303.381305][ T5794] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 303.416580][ T5794] usb 2-1: config 0 has no interface number 0 [ 303.458369][ T5794] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 303.810280][ T5794] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 303.829597][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.970576][ T5794] usb 2-1: Product: syz [ 303.977815][ T5794] usb 2-1: Manufacturer: syz [ 304.010967][ T5794] usb 2-1: SerialNumber: syz [ 304.541349][ T5794] usb 2-1: config 0 descriptor?? [ 304.551256][ T9078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.951576][ T9078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.210799][ T30] audit: type=1400 audit(2000000004.850:595): avc: denied { read } for pid=9112 comm="syz.3.836" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.248708][ T30] audit: type=1400 audit(2000000004.850:596): avc: denied { open } for pid=9112 comm="syz.3.836" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.309501][ T30] audit: type=1400 audit(2000000004.920:597): avc: denied { ioctl } for pid=9112 comm="syz.3.836" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.514201][ T30] audit: type=1400 audit(2000000005.070:598): avc: denied { write } for pid=9102 comm="syz.4.834" path="socket:[23632]" dev="sockfs" ino=23632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 307.371452][ T5794] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 307.410828][ T5794] asix 2-1:0.188: probe with driver asix failed with error -71 [ 307.533991][ T30] audit: type=1400 audit(2000000006.220:599): avc: denied { create } for pid=9128 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.534559][ T5794] usb 2-1: USB disconnect, device number 4 [ 309.802324][ T9154] Cannot find add_set index 0 as target [ 310.847454][ T30] audit: type=1400 audit(2000000009.070:600): avc: denied { write } for pid=9157 comm="syz.4.847" path="socket:[23208]" dev="sockfs" ino=23208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 311.061054][ T9165] syzkaller0: entered promiscuous mode [ 311.100154][ T9165] syzkaller0: entered allmulticast mode [ 311.158398][ T9164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9164 comm=syz.3.848 [ 311.526722][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.533424][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.060668][ T5794] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 314.247279][ T5794] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.269562][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.289815][ T5794] usb 5-1: Product: syz [ 314.299916][ T5794] usb 5-1: Manufacturer: syz [ 314.312858][ T5794] usb 5-1: SerialNumber: syz [ 314.499638][ T5794] usb 5-1: config 0 descriptor?? [ 314.924774][ T5794] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.187948][ T9205] lo speed is unknown, defaulting to 1000 [ 315.194949][ T9205] lo speed is unknown, defaulting to 1000 [ 315.210933][ T9205] lo speed is unknown, defaulting to 1000 [ 315.230925][ T9205] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.259816][ T9205] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 315.375705][ T9205] lo speed is unknown, defaulting to 1000 [ 315.390649][ T9205] lo speed is unknown, defaulting to 1000 [ 315.403906][ T9205] lo speed is unknown, defaulting to 1000 [ 315.417345][ T9205] lo speed is unknown, defaulting to 1000 [ 315.431085][ T9205] lo speed is unknown, defaulting to 1000 [ 315.567235][ T9212] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 315.626888][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.643510][ T9212] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 315.699791][ T9215] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 315.774663][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.860'. [ 315.820912][ T9215] batadv0: entered promiscuous mode [ 315.826351][ T9215] batadv0: entered allmulticast mode [ 315.866180][ T30] audit: type=1804 audit(2000000014.550:601): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.862" name="/newroot/169/bus/bus" dev="overlay" ino=889 res=1 errno=0 [ 315.945459][ T9215] bond0: (slave batadv0): Releasing backup interface [ 315.958436][ T9203] kvm: kvm [9202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86e [ 315.989908][ T9203] kvm: kvm [9202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x821 [ 316.010744][ T9215] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 316.027202][ T30] audit: type=1804 audit(2000000014.610:602): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.862" name="/newroot/169/bus/bus" dev="overlay" ino=889 res=1 errno=0 [ 316.059942][ T9203] kvm: kvm [9202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80c [ 316.253650][ T9223] syz_tun: entered allmulticast mode [ 316.303759][ T9222] syz_tun: left allmulticast mode [ 316.470909][ T30] audit: type=1400 audit(2000000015.150:603): avc: denied { mount } for pid=9224 comm="syz.2.865" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 316.704228][ T5794] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 316.723328][ T9235] fuse: Bad value for 'fd' [ 316.728772][ T5794] usb 5-1: USB disconnect, device number 12 [ 317.730072][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.295980][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 318.317578][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.350178][ T29] usb 3-1: Product: syz [ 318.380653][ T29] usb 3-1: Manufacturer: syz [ 318.428951][ T29] usb 3-1: SerialNumber: syz [ 319.307034][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 319.319134][ T30] audit: type=1400 audit(2000000017.820:604): avc: denied { bind } for pid=9248 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 319.476030][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 319.814545][ T30] audit: type=1400 audit(2000000018.450:605): avc: denied { read } for pid=9252 comm="syz.4.873" lport=58369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.747107][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 322.766870][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 322.800397][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 322.831225][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 322.860827][ T29] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 322.890862][ T9285] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 322.920197][ T29] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 322.972441][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 323.041185][ T29] usb 3-1: USB disconnect, device number 7 [ 323.052890][ T9285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.133416][ T9287] bond4: entered promiscuous mode [ 323.148681][ T9287] bond4: entered allmulticast mode [ 323.291765][ T9285] bond4: (slave dummy0): making interface the new active one [ 323.299191][ T9285] dummy0: entered promiscuous mode [ 323.335934][ T9285] dummy0: entered allmulticast mode [ 323.349355][ T9285] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 323.377370][ T9287] bond4 (unregistering): (slave dummy0): Releasing active interface [ 323.391041][ T9287] dummy0: left promiscuous mode [ 323.406460][ T9287] dummy0: left allmulticast mode [ 323.431349][ T9287] bond4 (unregistering): Released all slaves [ 323.451643][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 323.690432][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 323.697105][ T29] usb 2-1: config 0 has an invalid interface number: 254 but max is 0 [ 323.710029][ T29] usb 2-1: config 0 has no interface number 0 [ 323.725263][ T29] usb 2-1: New USB device found, idVendor=5215, idProduct=1103, bcdDevice=e3.da [ 323.740013][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.747989][ T29] usb 2-1: Product: syz [ 323.752654][ T29] usb 2-1: Manufacturer: syz [ 323.757608][ T29] usb 2-1: SerialNumber: syz [ 323.764640][ T29] usb 2-1: config 0 descriptor?? [ 323.772067][ T29] usb-storage 2-1:0.254: USB Mass Storage device detected [ 324.204763][ T5794] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 324.372405][ T5794] usb 5-1: Using ep0 maxpacket: 8 [ 324.390749][ T5794] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 324.414522][ T5794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 324.426841][ T5794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.600635][ T5794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 325.034787][ T5794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.064514][ T5794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.093753][ T5794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.114113][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.338027][ T5794] usb 5-1: usb_control_msg returned -32 [ 325.353839][ T5794] usbtmc 5-1:16.0: can't read capabilities [ 325.732856][ T9326] input: syz1 as /devices/virtual/input/input8 [ 325.744927][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 325.854800][ T5131] Bluetooth: hci4: Malformed Event: 0x02 [ 325.879483][ T9327] usbtmc 5-1:16.0: Unable to send data, error -71 [ 326.054060][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'. [ 326.133323][ T9331] syzkaller0: entered promiscuous mode [ 326.138968][ T9331] syzkaller0: entered allmulticast mode [ 326.243082][ T793] usb 2-1: USB disconnect, device number 5 [ 326.353432][ T30] audit: type=1400 audit(2000000025.040:606): avc: denied { ioctl } for pid=9335 comm="syz.1.895" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.006432][ T29] usb 5-1: USB disconnect, device number 13 [ 329.373775][ T30] audit: type=1804 audit(2000000028.060:607): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.899" name="file0" dev="tmpfs" ino=1036 res=1 errno=0 [ 329.374336][ T9369] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 329.814192][ T9357] lo speed is unknown, defaulting to 1000 [ 329.889230][ T9369] ref_ctr increment failed for inode: 0x40c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038941880 [ 329.982004][ T9365] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 329.991790][ T9365] ref_ctr decrement failed for inode: 0x40c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038941880 [ 330.081920][ T9365] uprobe: syz.0.899:9365 failed to unregister, leaking uprobe [ 334.093868][ T30] audit: type=1326 audit(2000000032.780:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.4.914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2baf9bf79 code=0x0 [ 334.333636][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 334.400527][ T9421] netlink: 'syz.3.916': attribute type 9 has an invalid length. [ 334.409369][ T9421] netlink: 'syz.3.916': attribute type 7 has an invalid length. [ 334.417288][ T9421] netlink: 'syz.3.916': attribute type 8 has an invalid length. [ 335.768119][ T9427] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 335.982581][ T30] audit: type=1400 audit(2000000034.560:609): avc: denied { ioctl } for pid=9424 comm="syz.2.918" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 336.028888][ T30] audit: type=1400 audit(2000000034.710:610): avc: denied { ioctl } for pid=9429 comm="syz.1.920" path="socket:[24229]" dev="sockfs" ino=24229 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 336.122143][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 336.138106][ T9437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.180049][ T9438] veth3: entered promiscuous mode [ 336.192350][ T9433] wg1: entered promiscuous mode [ 336.203005][ T9433] wg1: entered allmulticast mode [ 336.235849][ T9430] lo speed is unknown, defaulting to 1000 [ 336.245550][ T9441] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 336.861312][ T30] audit: type=1400 audit(2000000035.510:611): avc: denied { connect } for pid=9446 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.092657][ T30] audit: type=1400 audit(2000000035.520:612): avc: denied { write } for pid=9446 comm="syz.2.924" laddr=fe80::11 lport=38318 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 338.617729][ T9464] capability: warning: `syz.4.930' uses deprecated v2 capabilities in a way that may be insecure [ 338.726311][ T30] audit: type=1400 audit(2000000037.410:613): avc: denied { append } for pid=9467 comm="syz.2.932" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.532758][ T9520] tipc: Started in network mode [ 344.552595][ T9520] tipc: Node identity f2f7342c2b59, cluster identity 4711 [ 344.583360][ T9520] tipc: Enabled bearer , priority 0 [ 344.606531][ T9522] syzkaller0: entered promiscuous mode [ 344.629537][ T9522] syzkaller0: entered allmulticast mode [ 345.432203][ T9520] tipc: Resetting bearer [ 345.496711][ T9519] tipc: Resetting bearer [ 346.044527][ T30] audit: type=1107 audit(2000000044.270:614): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¦Æ­Øz ü‹ˆý’G:Žø¢Dø>ˆQ“·ÐšPn [ 346.086917][ T29] tipc: Node number set to 3652072492 [ 346.835727][ T9552] syzkaller0: entered promiscuous mode [ 346.860483][ T9552] syzkaller0: entered allmulticast mode [ 347.211795][ T30] audit: type=1400 audit(2000000045.900:615): avc: denied { listen } for pid=9559 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.869645][ T30] audit: type=1400 audit(2000000048.550:616): avc: denied { getopt } for pid=9587 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.351667][ T5818] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 351.210030][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 352.340118][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 352.352808][ T29] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 352.381646][ T29] usb 3-1: config 0 has no interface number 0 [ 352.387821][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.402632][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 352.414303][ T29] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.425496][ T29] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 352.439006][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 352.448155][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.480977][ T29] usb 3-1: config 0 descriptor?? [ 352.523235][ T29] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 353.042375][ T29] usb 3-1: USB disconnect, device number 8 [ 353.170485][ T29] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 354.470343][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 355.682911][ T30] audit: type=1804 audit(2000000054.360:617): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.971" name="bus" dev="ramfs" ino=24436 res=1 errno=0 [ 355.786067][ T30] audit: type=1400 audit(2000000054.470:618): avc: denied { create } for pid=9657 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.832954][ T30] audit: type=1400 audit(2000000055.500:619): avc: denied { create } for pid=9661 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 356.960727][ T30] audit: type=1400 audit(2000000055.500:620): avc: denied { ioctl } for pid=9661 comm="syz.0.974" path="socket:[24450]" dev="sockfs" ino=24450 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 359.464016][ T9680] syzkaller0: entered promiscuous mode [ 359.509678][ T9680] syzkaller0: entered allmulticast mode [ 359.792681][ T9690] 0: reclassify loop, rule prio 0, protocol 800 [ 361.961871][ T9715] lo speed is unknown, defaulting to 1000 [ 362.743511][ T9726] lo speed is unknown, defaulting to 1000 [ 363.130056][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 363.355162][ T29] usb 4-1: config 0 has no interfaces? [ 363.690932][ T29] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 363.718875][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.749821][ T29] usb 4-1: Product: syz [ 363.768555][ T9733] tipc: Enabling of bearer rejected, failed to enable media [ 363.777973][ T29] usb 4-1: Manufacturer: syz [ 363.783080][ T29] usb 4-1: SerialNumber: syz [ 363.803704][ T29] usb 4-1: config 0 descriptor?? [ 364.264912][ T30] audit: type=1400 audit(2000000062.950:621): avc: denied { setopt } for pid=9725 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.315662][ T9726] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.335235][ T30] audit: type=1400 audit(2000000062.980:622): avc: denied { setopt } for pid=9736 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.378870][ T30] audit: type=1400 audit(2000000062.980:623): avc: denied { bind } for pid=9736 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.416778][ T5921] usb 4-1: USB disconnect, device number 10 [ 364.486682][ T9740] lo speed is unknown, defaulting to 1000 [ 366.800632][ T9769] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 367.187787][ T9769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.288712][ T30] audit: type=1400 audit(2000000068.970:624): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 371.937944][ T9833] syzkaller0: entered promiscuous mode [ 371.946095][ T9833] syzkaller0: entered allmulticast mode [ 372.553972][ T9844] syzkaller0: entered promiscuous mode [ 372.559536][ T9844] syzkaller0: entered allmulticast mode [ 372.970595][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.010047][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.060605][ T30] audit: type=1400 audit(2000000071.740:625): avc: denied { read open } for pid=9853 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.254736][ T30] audit: type=1400 audit(2000000071.750:626): avc: denied { getattr } for pid=9853 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.899024][ T30] audit: type=1400 audit(2000000072.020:627): avc: denied { setopt } for pid=9852 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.656468][ T9875] lo speed is unknown, defaulting to 1000 [ 374.960621][ T30] audit: type=1400 audit(2000000073.640:628): avc: denied { add_name } for pid=9845 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.099383][ T30] audit: type=1400 audit(2000000073.680:629): avc: denied { create } for pid=9845 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.331070][ T30] audit: type=1400 audit(2000000073.680:630): avc: denied { write } for pid=9845 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.netdevsim0.link" dev="tmpfs" ino=5826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.813419][ T30] audit: type=1400 audit(2000000073.680:631): avc: denied { append } for pid=9845 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=5826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.038165][ T30] audit: type=1400 audit(2000000074.570:632): avc: denied { remove_name } for pid=9892 comm="rm" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=5826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.550017][ T30] audit: type=1400 audit(2000000074.570:633): avc: denied { unlink } for pid=9892 comm="rm" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=5826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.661583][ T30] audit: type=1400 audit(2000000075.350:634): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 377.151036][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1025'. [ 379.217750][ T30] audit: type=1400 audit(2000000077.900:635): avc: denied { transfer } for pid=9927 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 379.799194][ T9937] batadv_slave_0: entered promiscuous mode [ 379.821291][ T9937] batman_adv: batadv0: Adding interface: macvtap1 [ 379.834904][ T9937] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.893109][ T9937] batman_adv: batadv0: Interface activated: macvtap1 [ 382.531160][ T30] audit: type=1400 audit(2000000081.220:636): avc: denied { mount } for pid=9976 comm="syz.3.1045" name="/" dev="hugetlbfs" ino=26097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 382.531727][ T9977] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 382.531727][ T9977] [ 382.598969][ T793] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 382.611869][ T30] audit: type=1400 audit(2000000081.220:637): avc: denied { remount } for pid=9976 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 382.636682][ T793] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.826799][ T30] audit: type=1400 audit(2000000082.510:638): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 384.580760][T10007] binder: 10002:10007 ioctl c0306201 0 returned -14 [ 384.641623][T10009] tipc: Enabled bearer , priority 0 [ 384.659199][T10009] tipc: Resetting bearer [ 384.810557][ T793] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 385.022474][T10019] syzkaller0: entered promiscuous mode [ 385.028094][T10019] syzkaller0: entered allmulticast mode [ 385.149066][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.225826][T10021] batman_adv: batadv0: Adding interface: ipvlan2 [ 385.232804][T10021] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 385.258835][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.269688][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.279571][T10021] batman_adv: batadv0: Interface activated: ipvlan2 [ 385.509163][ T793] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.643056][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.679522][ T793] usb 3-1: config 0 descriptor?? [ 385.707521][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 386.341755][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 386.460668][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 386.497790][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.506033][ T793] pwc: recv_control_msg error -32 req 04 val 1000 [ 386.538143][ T793] pwc: recv_control_msg error -32 req 04 val 1300 [ 386.576230][ T793] pwc: recv_control_msg error -32 req 04 val 1400 [ 386.620664][ T793] pwc: recv_control_msg error -32 req 02 val 2000 [ 386.669327][ T793] pwc: recv_control_msg error -32 req 02 val 2100 [ 386.730724][ T793] pwc: recv_control_msg error -32 req 04 val 1500 [ 387.331531][ T793] pwc: recv_control_msg error -32 req 02 val 2500 [ 387.338995][ T793] pwc: recv_control_msg error -32 req 02 val 2400 [ 387.410470][ T793] pwc: recv_control_msg error -32 req 02 val 2600 [ 387.653509][ T793] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.702318][ T793] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.753572][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.790725][ T793] pwc: Registered as video103. [ 387.926681][T10050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.075251][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 388.117150][ T793] usb 3-1: USB disconnect, device number 9 [ 388.282546][T10046] netlink: 'syz.4.1067': attribute type 2 has an invalid length. [ 388.310534][T10046] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 388.781887][ T30] audit: type=1400 audit(2000000087.460:639): avc: denied { append } for pid=10056 comm="syz.3.1070" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 390.792756][ T30] audit: type=1400 audit(2000000089.480:640): avc: denied { setopt } for pid=10077 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.018109][T10092] syzkaller0: entered promiscuous mode [ 393.040691][T10092] syzkaller0: entered allmulticast mode [ 393.879593][ T30] audit: type=1400 audit(2000000092.560:641): avc: denied { ioctl } for pid=10105 comm="syz.1.1083" path="socket:[26734]" dev="sockfs" ino=26734 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.905331][T10106] syzkaller0: entered promiscuous mode [ 393.929450][T10106] syzkaller0: entered allmulticast mode [ 396.473152][T10129] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 396.546914][ T30] audit: type=1400 audit(2000000095.230:642): avc: denied { ioctl } for pid=10126 comm="syz.1.1088" path="socket:[26766]" dev="sockfs" ino=26766 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.966277][ T30] audit: type=1400 audit(2000000095.590:643): avc: denied { mount } for pid=10134 comm="syz.3.1090" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 397.952315][T10149] ptrace attach of "./syz-executor exec"[5806] was attempted by " [ 401.430963][ T5794] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 402.091629][ T5794] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 402.245478][ T5794] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 402.264722][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.279393][ T5794] usb 2-1: Product: syz [ 402.601591][ T30] audit: type=1400 audit(2000000101.160:644): avc: denied { remount } for pid=10198 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 402.684415][ T5794] usb 2-1: Manufacturer: syz [ 403.074553][ T30] audit: type=1400 audit(2000000101.760:645): avc: denied { create } for pid=10213 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 403.076380][ T5794] usb 2-1: SerialNumber: syz [ 403.217529][ T5794] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 403.675127][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.686877][ T5794] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.703247][ T30] audit: type=1800 audit(2000000102.350:646): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1112" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 403.725807][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.775085][ T5794] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 403.794193][ T5794] usb 2-1: media controller created [ 403.842564][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.941448][T10229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1114'. [ 404.001940][T10232] netlink: 'syz.2.1115': attribute type 13 has an invalid length. [ 404.468396][ T4806] usb 2-1: USB disconnect, device number 6 [ 404.615645][ T30] audit: type=1400 audit(2000000103.300:647): avc: denied { getopt } for pid=10242 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 404.651571][T10243] loop7: detected capacity change from 0 to 16384 [ 404.813993][ C0] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 404.824646][T10244] loop7: detected capacity change from 16384 to 0 [ 404.825196][ C0] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.840906][ C0] buffer_io_error: 27 callbacks suppressed [ 404.840915][ C0] Buffer I/O error on dev loop7, logical block 512, async page read [ 405.940056][T10261] syzkaller0: entered promiscuous mode [ 405.963429][T10261] syzkaller0: entered allmulticast mode [ 407.274682][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1126'. [ 407.292050][ T30] audit: type=1400 audit(2000000105.960:648): avc: denied { write } for pid=10266 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 407.378084][T10280] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 407.542812][T10285] bridge0: port 3(batadv0) entered disabled state [ 407.686288][T10287] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 408.043000][T10280] netlink: 'syz.4.1128': attribute type 10 has an invalid length. [ 408.075893][T10285] bridge_slave_0: left allmulticast mode [ 408.095861][T10285] bridge_slave_0: left promiscuous mode [ 408.122642][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.154703][T10285] bridge_slave_1: left allmulticast mode [ 408.172331][T10285] bridge_slave_1: left promiscuous mode [ 408.232803][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.349666][T10285] bond0: (slave bond_slave_0): Releasing backup interface [ 408.819099][T10285] bond0: (slave bond_slave_1): Releasing backup interface [ 408.873240][T10285] team0: Port device team_slave_0 removed [ 408.907169][T10285] team0: Port device team_slave_1 removed [ 408.930887][T10285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.961160][T10285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.994579][T10285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.036287][T10285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.124217][T10285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.187399][T10280] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 409.206578][T10280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.490154][T10280] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 409.691026][ T30] audit: type=1400 audit(2000000108.370:649): avc: denied { append } for pid=10294 comm="syz.3.1132" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 409.819350][ T5861] lo speed is unknown, defaulting to 1000 [ 409.852316][ T5861] syz0: Port: 1 Link DOWN [ 415.934082][ T30] audit: type=1400 audit(2000000114.610:650): avc: denied { add_name } for pid=10360 comm="syz.1.1146" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.295460][T10366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.311939][ T30] audit: type=1400 audit(2000000114.610:651): avc: denied { create } for pid=10360 comm="syz.1.1146" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 421.080044][T10413] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 422.806441][T10443] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1164'. [ 428.990311][T10486] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 429.021528][T10486] team0: Port device dummy0 added [ 429.065609][T10486] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 429.110115][ T30] audit: type=1400 audit(2000000127.750:652): avc: denied { append } for pid=10485 comm="syz.2.1173" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 429.270162][ T30] audit: type=1400 audit(2000000127.930:653): avc: denied { shutdown } for pid=10485 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.305263][T10486] team0: Port device dummy0 removed [ 429.892546][T10486] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.204545][T10505] tipc: Enabling of bearer rejected, failed to enable media [ 431.062410][ T30] audit: type=1326 audit(2000000129.750:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7ffc0000 [ 431.086847][ T5794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 431.199025][ T30] audit: type=1326 audit(2000000129.750:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7ffc0000 [ 431.300462][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 431.310639][ T30] audit: type=1326 audit(2000000129.750:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb07c79bf79 code=0x7ffc0000 [ 431.520612][ T5794] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 431.733728][T10526] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 431.741621][T10526] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 431.751212][T10526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.519094][ T30] audit: type=1326 audit(2000000129.750:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7ffc0000 [ 432.660076][ T30] audit: type=1326 audit(2000000129.750:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07c79bf79 code=0x7ffc0000 [ 432.694312][ T30] audit: type=1326 audit(2000000129.750:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb07c79d807 code=0x7ffc0000 [ 432.844721][ T30] audit: type=1326 audit(2000000129.750:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb07c75c84e code=0x7ffc0000 [ 432.847334][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.868781][ T30] audit: type=1326 audit(2000000129.750:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb07c75c84e code=0x7ffc0000 [ 433.671215][ T5794] usb 3-1: Product: syz [ 433.735389][ T5794] usb 3-1: Manufacturer: syz [ 433.744863][ T5794] usb 3-1: SerialNumber: syz [ 433.809536][ T5794] usb 3-1: config 0 descriptor?? [ 433.861390][ T5794] usb 3-1: can't set config #0, error -71 [ 433.911946][ T5794] usb 3-1: USB disconnect, device number 10 [ 434.646660][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.656438][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.663925][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 434.663936][ T30] audit: type=1400 audit(2000000132.870:683): avc: denied { mount } for pid=10540 comm="syz.0.1197" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 435.503622][ T30] audit: type=1400 audit(2000000133.910:684): avc: denied { map } for pid=10548 comm="syz.1.1199" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 435.726849][ T30] audit: type=1400 audit(2000000133.910:685): avc: denied { execute } for pid=10548 comm="syz.1.1199" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 441.545996][T10600] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 441.554780][T10600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1209'. [ 442.324923][T10596] i2c i2c-0: dtv_property_process_set: SET cmd 0xe0480008 undefined [ 443.335875][T10620] ptrace attach of "./syz-executor exec"[10621] was attempted by "./syz-executor exec"[10620] [ 444.916614][T10629] capability: warning: `syz.4.1211' uses 32-bit capabilities (legacy support in use) [ 447.686935][T10639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.207293][ T30] audit: type=1400 audit(2000000146.470:686): avc: denied { ioctl } for pid=10641 comm="syz.1.1218" path="/231/file0" dev="tmpfs" ino=1210 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.301645][T10639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.622315][T10651] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1224'. [ 448.633360][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 448.834344][T10639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.906902][T10639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.206882][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.628770][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.661321][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.698745][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.751633][T10665] syzkaller0: entered promiscuous mode [ 449.833129][T10665] syzkaller0: entered allmulticast mode [ 450.731909][ T30] audit: type=1800 audit(2000000149.420:687): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1229" name="file1" dev="tmpfs" ino=1207 res=0 errno=0 [ 451.961437][ T30] audit: type=1400 audit(2000000150.640:688): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.001638][ T30] audit: type=1400 audit(2000000150.640:689): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.380210][ T30] audit: type=1400 audit(2000000150.640:690): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.446334][ T30] audit: type=1400 audit(2000000150.760:691): avc: denied { create } for pid=10681 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 452.848267][ T30] audit: type=1400 audit(2000000150.780:692): avc: denied { create } for pid=10681 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 452.926611][ T30] audit: type=1400 audit(2000000150.800:693): avc: denied { create } for pid=10687 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.049765][ T30] audit: type=1400 audit(2000000150.870:694): avc: denied { getopt } for pid=10687 comm="syz.1.1233" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.112713][ T30] audit: type=1400 audit(2000000150.870:695): avc: denied { setopt } for pid=10687 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.155506][T10706] bond0: Caught tx_queue_len zero misconfig [ 453.257379][ T30] audit: type=1400 audit(2000000150.870:696): avc: denied { read } for pid=10687 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.359812][ T30] audit: type=1400 audit(2000000150.890:697): avc: denied { getopt } for pid=10681 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.442807][ T30] audit: type=1400 audit(2000000150.920:698): avc: denied { write } for pid=10687 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.484625][ T30] audit: type=1400 audit(2000000151.120:699): avc: denied { ioctl } for pid=10691 comm="syz.3.1234" path="socket:[28118]" dev="sockfs" ino=28118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.635272][ T30] audit: type=1400 audit(2000000151.160:700): avc: denied { read } for pid=10691 comm="syz.3.1234" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 454.716080][ T30] audit: type=1400 audit(2000000151.160:701): avc: denied { open } for pid=10691 comm="syz.3.1234" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 454.741226][ T30] audit: type=1400 audit(2000000151.230:702): avc: denied { watch } for pid=10691 comm="syz.3.1234" path="/273/file1" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 454.776330][ T30] audit: type=1400 audit(2000000151.230:703): avc: denied { watch_sb watch_reads } for pid=10691 comm="syz.3.1234" path="/273/file1" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.825071][ T30] audit: type=1400 audit(2000000151.270:704): avc: denied { execute } for pid=10691 comm="syz.3.1234" path="/273/file1" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.889402][ T30] audit: type=1400 audit(2000000151.280:705): avc: denied { module_request } for pid=10693 comm="syz.0.1235" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 455.044327][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 458.310899][ T793] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 458.557941][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 458.557973][ T30] audit: type=1400 audit(2000000157.160:744): avc: denied { mounton } for pid=10766 comm="syz.4.1252" path="/234/file0" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 459.370572][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 459.378662][ T793] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 459.387485][ T793] usb 3-1: config 0 has no interface number 0 [ 459.409413][ T793] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 459.733336][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.741941][ T793] usb 3-1: Product: syz [ 459.747823][ T793] usb 3-1: Manufacturer: syz [ 459.753131][ T793] usb 3-1: SerialNumber: syz [ 459.773409][ T793] usb 3-1: config 0 descriptor?? [ 459.782030][ T793] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 459.790509][ T30] audit: type=1400 audit(2000000157.170:745): avc: denied { unlink } for pid=10766 comm="syz.4.1252" name="#13" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.830596][ T793] dw2102: su3000_power_ctrl: 1, initialized 0 [ 459.850835][ T30] audit: type=1400 audit(2000000157.180:746): avc: denied { mount } for pid=10766 comm="syz.4.1252" name="/" dev="overlay" ino=1221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.860802][ T793] dvb-usb: bulk message failed: -22 (2/0) [ 459.911996][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.942401][ T793] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 459.949313][ T30] audit: type=1400 audit(2000000158.420:747): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.988640][ T30] audit: type=1400 audit(2000000158.670:748): avc: denied { write } for pid=10770 comm="syz.1.1254" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 460.075181][ T793] usb 3-1: media controller created [ 460.088796][ T30] audit: type=1400 audit(2000000158.700:749): avc: denied { setopt } for pid=10764 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.098087][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.264692][ T793] dw2102: i2c transfer failed. [ 460.271781][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.277568][ T793] dw2102: i2c transfer failed. [ 460.286866][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.296961][ T793] dw2102: i2c transfer failed. [ 460.302030][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.307766][ T793] dw2102: i2c transfer failed. [ 460.312595][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.320096][ T793] dw2102: i2c transfer failed. [ 460.324862][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 460.391260][ T30] audit: type=1400 audit(2000000159.070:750): avc: denied { create } for pid=10777 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 460.438500][ T30] audit: type=1400 audit(2000000159.070:751): avc: denied { listen } for pid=10777 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 460.710186][ T793] dw2102: i2c transfer failed. [ 460.715499][ T793] dvb-usb: MAC address: 02:02:02:02:02:02 [ 460.815007][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.839370][T10763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.876713][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 460.905034][ T793] dw2102: command 0x0e transfer failed. [ 460.935676][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 461.007722][ T793] dw2102: command 0x0e transfer failed. [ 461.067163][ T30] audit: type=1400 audit(2000000159.750:752): avc: denied { allowed } for pid=10789 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 461.114922][T10787] tipc: Enabled bearer , priority 0 [ 461.226516][T10792] syzkaller0: entered promiscuous mode [ 461.236967][T10792] syzkaller0: entered allmulticast mode [ 461.264118][ T30] audit: type=1400 audit(2000000159.750:753): avc: denied { create } for pid=10789 comm="syz.0.1259" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 461.725050][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 461.732431][ T793] dw2102: command 0x0e transfer failed. [ 461.756620][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 461.764424][ T793] dw2102: command 0x0e transfer failed. [ 461.781426][T10796] tipc: Resetting bearer [ 461.783452][ T793] dvb-usb: bulk message failed: -22 (1/0) [ 461.807280][ T793] dw2102: command 0x51 transfer failed. [ 461.813650][T10786] tipc: Resetting bearer [ 461.846490][T10786] tipc: Disabling bearer [ 461.938753][ T793] DVB: Unable to find symbol ds3000_attach() [ 461.966227][ T793] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 462.132311][ T793] rc_core: IR keymap rc-su3000 not found [ 462.886004][ T793] Registered IR keymap rc-empty [ 462.898580][ T793] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 462.942362][ T793] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 462.971592][ T793] dvb-usb: schedule remote query interval to 150 msecs. [ 463.004247][ T793] dw2102: su3000_power_ctrl: 0, initialized 1 [ 463.020504][ T793] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 463.071608][ T793] usb 3-1: USB disconnect, device number 11 [ 463.258749][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 463.329895][ T5861] dw2102: i2c transfer failed. [ 463.586009][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 463.586052][ T30] audit: type=1400 audit(2000000162.270:768): avc: denied { map_read } for pid=10804 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 464.111232][ T793] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 464.578125][ T30] audit: type=1400 audit(2000000162.340:769): avc: denied { append } for pid=10804 comm="syz.1.1262" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.082105][ T30] audit: type=1400 audit(2000000162.580:770): avc: denied { read } for pid=10810 comm="syz.4.1263" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 465.604703][ T30] audit: type=1400 audit(2000000162.580:771): avc: denied { open } for pid=10810 comm="syz.4.1263" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 465.666145][ T30] audit: type=1400 audit(2000000162.580:772): avc: denied { create } for pid=10810 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 465.749569][ T30] audit: type=1400 audit(2000000162.590:773): avc: denied { ioctl } for pid=10810 comm="syz.4.1263" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 465.927421][T10837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.224334][ T30] audit: type=1400 audit(2000000164.820:774): avc: denied { create } for pid=10839 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.306908][T10845] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 466.373915][ T30] audit: type=1400 audit(2000000164.820:775): avc: denied { bind } for pid=10839 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.397268][ T30] audit: type=1400 audit(2000000164.820:776): avc: denied { write } for pid=10839 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.126856][ T30] audit: type=1400 audit(2000000164.820:777): avc: denied { read write } for pid=10839 comm="syz.3.1272" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.218237][T10837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.278620][T10834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.999066][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 468.999401][ T30] audit: type=1400 audit(2000000167.670:781): avc: denied { create } for pid=10864 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.029781][T10867] syzkaller0: entered promiscuous mode [ 469.039584][T10867] syzkaller0: entered allmulticast mode [ 469.089642][ T30] audit: type=1400 audit(2000000167.670:782): avc: denied { create } for pid=10864 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 469.139017][ T30] audit: type=1400 audit(2000000167.810:783): avc: denied { bind } for pid=10864 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.480028][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 469.518762][T10873] syzkaller0: entered promiscuous mode [ 469.530138][T10873] syzkaller0: entered allmulticast mode [ 469.649992][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 469.707238][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.745350][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.805386][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.829465][T10875] syzkaller0: entered promiscuous mode [ 469.835003][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.835062][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.851381][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.919574][T10875] syzkaller0: entered allmulticast mode [ 470.950440][ T5874] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.972123][T10879] lo speed is unknown, defaulting to 1000 [ 470.998007][ T5874] usb 4-1: Manufacturer: syz [ 471.105900][ T5874] usb 4-1: config 0 descriptor?? [ 471.520964][ T5874] rc_core: IR keymap rc-hauppauge not found [ 471.533860][ T5874] Registered IR keymap rc-empty [ 471.585480][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.624972][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.728906][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 471.744135][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 471.770300][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.811985][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.845171][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.000139][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.120086][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.227218][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.275698][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.320690][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.965802][ T30] audit: type=1400 audit(2000000171.130:784): avc: denied { connect } for pid=10895 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.013785][ T30] audit: type=1400 audit(2000000171.130:785): avc: denied { shutdown } for pid=10895 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.041009][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.131347][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.510574][ T5874] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.519627][ T5874] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.549984][ T30] audit: type=1400 audit(2000000171.900:786): avc: denied { create } for pid=10896 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.660171][ T5874] usb 4-1: USB disconnect, device number 11 [ 473.776745][ T30] audit: type=1400 audit(2000000171.900:787): avc: denied { getopt } for pid=10896 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.929743][T10910] trusted_key: syz.1.1290 sent an empty control message without MSG_MORE. [ 474.528713][T10912] Device name cannot be null; rc = [-22] [ 475.104498][ T30] audit: type=1400 audit(2000000173.620:788): avc: denied { create } for pid=10913 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.828620][ T30] audit: type=1400 audit(2000000173.920:789): avc: denied { firmware_load } for pid=10913 comm="syz.1.1292" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 477.927782][T10920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1293'. [ 478.911209][ T6348] ------------[ cut here ]------------ [ 478.917328][ T6348] time_after(jiffies, timeout) [ 478.917543][ T6348] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#0: kworker/u8:17/6348 [ 478.934129][ T6348] Modules linked in: [ 478.938406][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.950316][ T6348] Tainted: [L]=SOFTLOCKUP [ 478.954670][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.965584][ T6348] Workqueue: iou_exit io_ring_exit_work [ 478.971776][ T6348] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 478.977483][ T6348] Code: 8e e8 37 90 3f 01 48 8b 05 70 bd 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 7e 3e d3 00 4d 85 ed 79 12 e8 94 43 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 82 43 d3 00 48 8b 74 24 38 [ 478.997708][ T6348] RSP: 0018:ffffc9000cbcfab0 EFLAGS: 00010293 [ 479.004315][ T6348] RAX: 0000000000000000 RBX: ffff88804b02c778 RCX: ffffffff81355522 [ 479.012675][ T6348] RDX: ffff88807a5a4900 RSI: ffffffff8135552c RDI: ffff88807a5a4900 [ 479.021126][ T6348] RBP: ffffc9000cbcfc38 R08: 0000000000000007 R09: 0000000000000000 [ 479.029111][ T6348] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804b02c000 [ 479.037473][ T6348] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 479.045568][ T6348] FS: 0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 479.054493][ T6348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.061063][ T6348] CR2: 0000001b2fd09ff8 CR3: 000000005dbad000 CR4: 00000000003526f0 [ 479.069023][ T6348] Call Trace: [ 479.072674][ T6348] [ 479.075585][ T6348] ? __pfx_io_ring_exit_work+0x10/0x10 [ 479.081454][ T6348] ? __pfx___schedule+0x10/0x10 [ 479.086303][ T6348] ? preempt_schedule_thunk+0x16/0x30 [ 479.092053][ T6348] process_one_work+0x9d7/0x1920 [ 479.096971][ T6348] ? __pfx_process_one_work+0x10/0x10 [ 479.103058][ T6348] ? __pfx_io_ring_exit_work+0x10/0x10 [ 479.108517][ T6348] worker_thread+0x5da/0xe40 [ 479.113695][ T6348] ? __pfx_worker_thread+0x10/0x10 [ 479.118804][ T6348] ? kthread+0x13a/0x450 [ 479.123427][ T6348] ? __pfx_worker_thread+0x10/0x10 [ 479.128516][ T6348] kthread+0x370/0x450 [ 479.132991][ T6348] ? __pfx_kthread+0x10/0x10 [ 479.137579][ T6348] ret_from_fork+0x754/0xd80 [ 479.142543][ T6348] ? __pfx_ret_from_fork+0x10/0x10 [ 479.147628][ T6348] ? rcu_is_watching+0x12/0xc0 [ 479.152771][ T6348] ? __switch_to+0x7b4/0x1120 [ 479.157438][ T6348] ? __pfx_kthread+0x10/0x10 [ 479.162418][ T6348] ret_from_fork_asm+0x1a/0x30 [ 479.167167][ T6348] [ 479.170629][ T6348] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.177883][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.188957][ T6348] Tainted: [L]=SOFTLOCKUP [ 479.193250][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.203291][ T6348] Workqueue: iou_exit io_ring_exit_work [ 479.208818][ T6348] Call Trace: [ 479.212068][ T6348] [ 479.214973][ T6348] dump_stack_lvl+0x100/0x190 [ 479.219628][ T6348] vpanic+0x552/0x970 [ 479.223580][ T6348] ? __pfx_vpanic+0x10/0x10 [ 479.228057][ T6348] panic+0xd1/0xe0 [ 479.231749][ T6348] ? __pfx_panic+0x10/0x10 [ 479.236140][ T6348] ? check_panic_on_warn+0x1f/0x90 [ 479.241244][ T6348] check_panic_on_warn.cold+0x19/0x34 [ 479.246589][ T6348] ? io_ring_exit_work+0x42d/0xcdb [ 479.251674][ T6348] __warn.cold+0x191/0x348 [ 479.256061][ T6348] __report_bug+0x296/0x3d0 [ 479.260536][ T6348] ? io_ring_exit_work+0x42d/0xcdb [ 479.265624][ T6348] ? __pfx___report_bug+0x10/0x10 [ 479.270618][ T6348] ? trace_contention_end+0x140/0x180 [ 479.275961][ T6348] ? __mutex_lock+0x26a/0x1b90 [ 479.280698][ T6348] ? find_held_lock+0x2b/0x80 [ 479.285346][ T6348] ? io_req_caches_free+0x49/0x60 [ 479.290347][ T6348] ? io_req_caches_free+0x49/0x60 [ 479.295347][ T6348] ? io_ring_exit_work+0x42d/0xcdb [ 479.300433][ T6348] report_bug+0xb2/0x220 [ 479.304648][ T6348] ? io_ring_exit_work+0x42d/0xcdb [ 479.309733][ T6348] handle_bug+0x166/0x2a0 [ 479.314037][ T6348] exc_invalid_op+0x17/0x50 [ 479.318515][ T6348] asm_exc_invalid_op+0x1a/0x20 [ 479.323337][ T6348] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 479.329032][ T6348] Code: 8e e8 37 90 3f 01 48 8b 05 70 bd 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 7e 3e d3 00 4d 85 ed 79 12 e8 94 43 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 82 43 d3 00 48 8b 74 24 38 [ 479.348608][ T6348] RSP: 0018:ffffc9000cbcfab0 EFLAGS: 00010293 [ 479.354648][ T6348] RAX: 0000000000000000 RBX: ffff88804b02c778 RCX: ffffffff81355522 [ 479.362589][ T6348] RDX: ffff88807a5a4900 RSI: ffffffff8135552c RDI: ffff88807a5a4900 [ 479.370530][ T6348] RBP: ffffc9000cbcfc38 R08: 0000000000000007 R09: 0000000000000000 [ 479.378472][ T6348] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804b02c000 [ 479.386411][ T6348] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 479.394357][ T6348] ? io_ring_exit_work+0x422/0xcdb [ 479.399442][ T6348] ? io_ring_exit_work+0x42c/0xcdb [ 479.404532][ T6348] ? __pfx_io_ring_exit_work+0x10/0x10 [ 479.409969][ T6348] ? __pfx___schedule+0x10/0x10 [ 479.414796][ T6348] ? preempt_schedule_thunk+0x16/0x30 [ 479.420146][ T6348] process_one_work+0x9d7/0x1920 [ 479.425064][ T6348] ? __pfx_process_one_work+0x10/0x10 [ 479.430408][ T6348] ? __pfx_io_ring_exit_work+0x10/0x10 [ 479.435844][ T6348] worker_thread+0x5da/0xe40 [ 479.440406][ T6348] ? __pfx_worker_thread+0x10/0x10 [ 479.445489][ T6348] ? kthread+0x13a/0x450 [ 479.449698][ T6348] ? __pfx_worker_thread+0x10/0x10 [ 479.454778][ T6348] kthread+0x370/0x450 [ 479.458815][ T6348] ? __pfx_kthread+0x10/0x10 [ 479.463381][ T6348] ret_from_fork+0x754/0xd80 [ 479.467943][ T6348] ? __pfx_ret_from_fork+0x10/0x10 [ 479.473022][ T6348] ? rcu_is_watching+0x12/0xc0 [ 479.477757][ T6348] ? __switch_to+0x7b4/0x1120 [ 479.482407][ T6348] ? __pfx_kthread+0x10/0x10 [ 479.486976][ T6348] ret_from_fork_asm+0x1a/0x30 [ 479.491731][ T6348] [ 479.494991][ T6348] Kernel Offset: disabled [ 479.499288][ T6348] Rebooting in 86400 seconds..