last executing test programs: 4.283756278s ago: executing program 2 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write(r5, 0x0, 0x0) 2.782090559s ago: executing program 3 (id=1657): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xaa, 0x1881) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x4) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 2.76331416s ago: executing program 2 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0xff07}, 0x2000000) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x2022, 0x9, 0xa, 0x2, 0x3, 0xa4de36948e08189d}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00080008000100"/27, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) 2.623904027s ago: executing program 0 (id=1661): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 1.954400357s ago: executing program 0 (id=1663): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x100) 1.820821391s ago: executing program 3 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.601959828s ago: executing program 3 (id=1667): epoll_create1(0x0) r0 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r4, 0x1ad72f7) fcntl$dupfd(r0, 0x406, r0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0x20000002}) 1.380579072s ago: executing program 4 (id=1668): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_emit_vhci(&(0x7f0000005f00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x7, 0x8}, {0x6, 0x4, 0x4, 0x8}}}}, 0x15) 1.328267048s ago: executing program 1 (id=1669): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 1.076947362s ago: executing program 4 (id=1670): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff2}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 966.433873ms ago: executing program 1 (id=1671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000200000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffff5865}}}}}}}, 0xfdef) 949.399473ms ago: executing program 4 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x40c, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x20000844) 764.200067ms ago: executing program 2 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 735.257753ms ago: executing program 1 (id=1674): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 688.257633ms ago: executing program 2 (id=1675): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 644.893924ms ago: executing program 0 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x24000840) 614.621389ms ago: executing program 3 (id=1677): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) syz_open_pts(r1, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 553.774717ms ago: executing program 1 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x140}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 535.677506ms ago: executing program 2 (id=1679): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 492.46963ms ago: executing program 0 (id=1680): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xaf, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 384.300399ms ago: executing program 2 (id=1681): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x3}, 0x18) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x40000000}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1) sendmmsg$sock(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0d2) 339.311805ms ago: executing program 3 (id=1682): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff2}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 316.697495ms ago: executing program 1 (id=1683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) 236.196626ms ago: executing program 3 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000010c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 228.182718ms ago: executing program 4 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x20000014) 183.658615ms ago: executing program 1 (id=1686): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, &(0x7f0000001300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x100) 126.519835ms ago: executing program 0 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40040800) 112.24537ms ago: executing program 4 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) 622.813µs ago: executing program 0 (id=1689): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 4 (id=1690): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) kernel console output (not intermixed with test programs): arbage [ 71.565979][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 71.606998][ T30] audit: type=1400 audit(1762673203.528:144): avc: denied { prog_run } for pid=5995 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.635836][ T5886] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 71.723197][ T5886] cdc_wdm 5-1:1.0: Unknown control protocol [ 72.084145][ T30] audit: type=1400 audit(1762673204.008:145): avc: denied { ioctl } for pid=6002 comm="syz.1.19" path="socket:[9542]" dev="sockfs" ino=9542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.086581][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 72.654528][ T30] audit: type=1400 audit(1762673204.578:146): avc: denied { read write } for pid=5970 comm="syz.4.10" name="cdc-wdm0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.721014][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.727758][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.734891][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.741470][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.747694][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.754276][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.760513][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.767277][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.773509][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.780102][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.786319][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.792913][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.799472][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.806075][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.821693][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.828307][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.835096][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.841691][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.847954][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.854548][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 73.728551][ T30] audit: type=1400 audit(1762673204.578:147): avc: denied { open } for pid=5970 comm="syz.4.10" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 73.752104][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.762794][ T30] audit: type=1400 audit(1762673204.868:148): avc: denied { map_create } for pid=6012 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.781657][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.936879][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 73.955266][ T5956] usb 5-1: USB disconnect, device number 2 [ 74.936967][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.950053][ T24] usb 1-1: config 0 has no interfaces? [ 74.958234][ T30] audit: type=1400 audit(1762673204.938:149): avc: denied { create } for pid=6012 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.974235][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=f43b, bcdDevice=ff.ff [ 75.001164][ T24] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 75.009358][ T24] usb 1-1: Manufacturer: syz [ 75.033084][ T30] audit: type=1400 audit(1762673205.038:150): avc: denied { write } for pid=6012 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.076825][ T24] usb 1-1: config 0 descriptor?? [ 75.103086][ T30] audit: type=1400 audit(1762673206.158:151): avc: denied { map_read map_write } for pid=6010 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.396545][ T6025] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 75.702648][ T24] usb 1-1: USB disconnect, device number 2 [ 75.887145][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.091190][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.757658][ T5866] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 76.766447][ T5866] usb 4-1: config 0 has no interface number 0 [ 76.802094][ T5866] usb 4-1: config 0 interface 217 has no altsetting 0 [ 76.823775][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 76.843121][ T5866] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=f1.ab [ 76.862294][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.889844][ T5866] usb 4-1: Product: syz [ 76.909295][ T5866] usb 4-1: Manufacturer: syz [ 76.980969][ T5866] usb 4-1: SerialNumber: syz [ 76.984121][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 76.984134][ T30] audit: type=1400 audit(1762673208.908:164): avc: denied { create } for pid=6039 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.011654][ T5866] usb 4-1: config 0 descriptor?? [ 77.099012][ T6044] capability: warning: `syz.4.33' uses deprecated v2 capabilities in a way that may be insecure [ 77.235851][ T5866] usb 4-1: unknown interface protocol 0x5f, assuming v1 [ 77.247062][ T5866] usb 4-1: 217:2 : does not exist [ 77.265149][ T5866] usb 4-1: unit 1 not found! [ 78.152570][ T5866] usb 4-1: USB disconnect, device number 4 [ 78.224536][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.217/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.472379][ T6054] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 78.541308][ T30] audit: type=1400 audit(1762673210.458:165): avc: denied { write } for pid=6053 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.748124][ T30] audit: type=1400 audit(1762673210.668:166): avc: denied { write } for pid=6061 comm="syz.2.41" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.390753][ T6064] input: syz0 as /devices/virtual/input/input5 [ 79.721117][ T30] audit: type=1400 audit(1762673211.238:167): avc: denied { read write } for pid=6058 comm="syz.1.40" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.752585][ T30] audit: type=1400 audit(1762673211.238:168): avc: denied { open } for pid=6058 comm="syz.1.40" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.101216][ T30] audit: type=1400 audit(1762673211.258:169): avc: denied { ioctl } for pid=6058 comm="syz.1.40" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.192343][ T6072] trusted_key: encrypted_key: insufficient parameters specified [ 80.531254][ T30] audit: type=1400 audit(1762673211.608:170): avc: denied { read } for pid=5169 comm="acpid" name="js0" dev="devtmpfs" ino=2798 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.582019][ T6075] capability: warning: `syz.2.43' uses 32-bit capabilities (legacy support in use) [ 80.651035][ T30] audit: type=1400 audit(1762673211.608:171): avc: denied { open } for pid=5169 comm="acpid" path=2F6465762F696E7075742F6A7330202864656C6574656429 dev="devtmpfs" ino=2798 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.734722][ T6075] usb usb8: usbfs: process 6075 (syz.2.43) did not claim interface 0 before use [ 81.863227][ T869] cfg80211: failed to load regulatory.db [ 82.729103][ T6091] syzkaller0: entered promiscuous mode [ 82.740596][ T6091] syzkaller0: entered allmulticast mode [ 83.083442][ T30] audit: type=1400 audit(1762673215.008:172): avc: denied { read } for pid=6097 comm="syz.0.54" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.121887][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.154020][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.192312][ T30] audit: type=1400 audit(1762673215.008:173): avc: denied { open } for pid=6097 comm="syz.0.54" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.295889][ T30] audit: type=1400 audit(1762673215.008:174): avc: denied { read write } for pid=6096 comm="syz.2.53" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.465613][ T5866] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.469212][ T30] audit: type=1400 audit(1762673215.008:175): avc: denied { open } for pid=6096 comm="syz.2.53" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.497695][ T30] audit: type=1400 audit(1762673215.048:176): avc: denied { ioctl } for pid=6097 comm="syz.0.54" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.522560][ T30] audit: type=1400 audit(1762673215.118:177): avc: denied { create } for pid=6101 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.542764][ T30] audit: type=1400 audit(1762673215.118:178): avc: denied { write } for pid=6101 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.634129][ T30] audit: type=1400 audit(1762673215.118:179): avc: denied { nlmsg_write } for pid=6101 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.661388][ T30] audit: type=1400 audit(1762673215.188:180): avc: denied { setopt } for pid=6103 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.718058][ T5866] usb 3-1: config 0 has no interfaces? [ 84.730044][ T30] audit: type=1400 audit(1762673215.498:181): avc: denied { map } for pid=6103 comm="syz.3.46" path="socket:[9771]" dev="sockfs" ino=9771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.735481][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.806381][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.843300][ T5866] usb 3-1: SerialNumber: syz [ 85.243718][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.262351][ T5866] usb 3-1: config 0 descriptor?? [ 85.433624][ T5957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.491010][ T5957] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.593270][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.621470][ T6120] netlink: 96 bytes leftover after parsing attributes in process `syz.4.60'. [ 86.924623][ T5956] usb 3-1: USB disconnect, device number 3 [ 87.065838][ T5957] usb 4-1: Product: syz [ 87.461798][ T5957] usb 4-1: Manufacturer: syz [ 87.500972][ T5957] usb 4-1: SerialNumber: syz [ 88.222906][ T5957] cdc_ncm 4-1:1.0: bind() failure [ 88.368006][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.471787][ T6130] xt_NFQUEUE: number of total queues is 0 [ 88.595615][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 88.595630][ T30] audit: type=1400 audit(1762673220.388:188): avc: denied { setopt } for pid=6128 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.605887][ T5957] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 89.643260][ T5957] cdc_ncm 4-1:1.1: bind() failure [ 89.653845][ T5957] usb 4-1: USB disconnect, device number 5 [ 89.935419][ T30] audit: type=1326 audit(1762673221.858:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.040978][ T30] audit: type=1326 audit(1762673221.858:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.073515][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 90.114901][ T30] audit: type=1326 audit(1762673221.858:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.198977][ T30] audit: type=1326 audit(1762673221.858:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.226537][ T6143] netlink: 'syz.2.69': attribute type 2 has an invalid length. [ 90.290922][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 90.342183][ T30] audit: type=1326 audit(1762673221.858:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.398468][ T30] audit: type=1326 audit(1762673221.858:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.453138][ T30] audit: type=1326 audit(1762673221.858:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.481130][ T30] audit: type=1326 audit(1762673221.858:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 90.511537][ T30] audit: type=1326 audit(1762673221.858:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 93.763736][ T6166] Zero length message leads to an empty skb [ 94.201877][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 94.201893][ T30] audit: type=1400 audit(1762673226.128:216): avc: denied { create } for pid=6167 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.493370][ T30] audit: type=1400 audit(1762673226.408:217): avc: denied { write } for pid=6167 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.523960][ T6175] netlink: 'syz.0.77': attribute type 29 has an invalid length. [ 94.562255][ T6175] netlink: 'syz.0.77': attribute type 29 has an invalid length. [ 94.683044][ T30] audit: type=1400 audit(1762673226.588:218): avc: denied { setopt } for pid=6176 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.723843][ T6182] sit0: entered promiscuous mode [ 94.732521][ T6125] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 94.763719][ T6182] netlink: 'syz.1.79': attribute type 3 has an invalid length. [ 94.790926][ T6182] netlink: 1 bytes leftover after parsing attributes in process `syz.1.79'. [ 94.960793][ T6125] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 95.123762][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 95.303711][ T30] audit: type=1400 audit(1762673227.098:219): avc: denied { execute } for pid=6179 comm="syz.4.80" path="/15/cpuacct.usage_percpu" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.459009][ T30] audit: type=1400 audit(1762673227.378:220): avc: denied { mounton } for pid=6191 comm="syz.1.84" path="/proc/54/task" dev="proc" ino=8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.661011][ T30] audit: type=1400 audit(1762673227.548:221): avc: denied { setopt } for pid=6198 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.728973][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 96.740441][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 96.740470][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.740482][ T5827] Workqueue: hci2 hci_rx_work [ 96.740515][ T5827] Call Trace: [ 96.740522][ T5827] [ 96.740530][ T5827] dump_stack_lvl+0x16c/0x1f0 [ 96.740563][ T5827] sysfs_warn_dup+0x7f/0xa0 [ 96.740587][ T5827] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.740611][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.740634][ T5827] ? find_held_lock+0x2b/0x80 [ 96.740661][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 96.740683][ T5827] kobject_add_internal+0x2c4/0x9b0 [ 96.740707][ T5827] kobject_add+0x16e/0x240 [ 96.740725][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 96.740745][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 96.740765][ T5827] ? kobject_put+0xab/0x5a0 [ 96.740790][ T5827] device_add+0x288/0x1aa0 [ 96.740814][ T5827] ? __pfx_dev_set_name+0x10/0x10 [ 96.740839][ T5827] ? __pfx_device_add+0x10/0x10 [ 96.740864][ T5827] ? mgmt_send_event_skb+0x2fb/0x460 [ 96.740891][ T5827] hci_conn_add_sysfs+0x17e/0x230 [ 96.740915][ T5827] le_conn_complete_evt+0x1260/0x2150 [ 96.740940][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.740960][ T5827] ? hci_event_packet+0x459/0x11c0 [ 96.740988][ T5827] hci_le_conn_complete_evt+0x23c/0x370 [ 96.741016][ T5827] hci_le_meta_evt+0x357/0x5e0 [ 96.741039][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 96.741065][ T5827] hci_event_packet+0x685/0x11c0 [ 96.741087][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.741112][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 96.741134][ T5827] ? kcov_remote_start+0x3c9/0x6d0 [ 96.741151][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.741181][ T5827] hci_rx_work+0x2c5/0x16b0 [ 96.741207][ T5827] ? rcu_is_watching+0x12/0xc0 [ 96.741230][ T5827] process_one_work+0x9cf/0x1b70 [ 96.741257][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 96.741283][ T5827] ? assign_work+0x1a0/0x250 [ 96.741302][ T5827] worker_thread+0x6c8/0xf10 [ 96.741329][ T5827] ? __kthread_parkme+0x19e/0x250 [ 96.741354][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 96.741379][ T5827] kthread+0x3c5/0x780 [ 96.741397][ T5827] ? __pfx_kthread+0x10/0x10 [ 96.741417][ T5827] ? rcu_is_watching+0x12/0xc0 [ 96.741440][ T5827] ? __pfx_kthread+0x10/0x10 [ 96.741457][ T5827] ret_from_fork+0x675/0x7d0 [ 96.741470][ T5827] ? __pfx_kthread+0x10/0x10 [ 96.741484][ T5827] ret_from_fork_asm+0x1a/0x30 [ 96.741522][ T5827] [ 96.987354][ T5827] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.002514][ T5827] Bluetooth: hci2: failed to register connection device [ 97.031156][ T30] audit: type=1400 audit(1762673228.648:222): avc: denied { listen } for pid=6199 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.104799][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.122296][ T5827] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 97.123250][ T30] audit: type=1400 audit(1762673229.048:223): avc: denied { ioctl } for pid=6204 comm="syz.0.89" path="socket:[9982]" dev="sockfs" ino=9982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.213251][ T6221] input: syz0 as /devices/virtual/input/input6 [ 100.371186][ T30] audit: type=1400 audit(1762673231.028:224): avc: denied { allowed } for pid=6228 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.511000][ T30] audit: type=1400 audit(1762673231.028:225): avc: denied { sqpoll } for pid=6228 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.678572][ T6238] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 100.710925][ T30] audit: type=1400 audit(1762673232.388:226): avc: denied { bind } for pid=6235 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.851371][ T30] audit: type=1400 audit(1762673232.388:227): avc: denied { setopt } for pid=6235 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.872388][ T5956] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.882762][ T6238] team0: Port device dummy0 added [ 101.035830][ T5956] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.061117][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.081490][ T5956] usb 3-1: Product: syz [ 101.085661][ T6250] loop8: detected capacity change from 0 to 8 [ 101.106457][ T6250] Dev loop8: unable to read RDB block 8 [ 101.111700][ T5956] usb 3-1: Manufacturer: syz [ 101.116759][ T5956] usb 3-1: SerialNumber: syz [ 101.120994][ T6250] loop8: unable to read partition table [ 101.127123][ T6250] loop8: partition table beyond EOD, truncated [ 101.139703][ T5956] usb 3-1: config 0 descriptor?? [ 101.150977][ T6250] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 101.301159][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.364463][ T5956] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.460991][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 101.477757][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.515696][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 101.544004][ T5886] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 101.554639][ T5886] usb 1-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 101.572987][ T5886] usb 1-1: Product: syz [ 101.579182][ T5886] usb 1-1: Manufacturer: syz [ 101.584544][ T5886] usb 1-1: SerialNumber: syz [ 101.655561][ T30] audit: type=1400 audit(1762673233.578:228): avc: denied { create } for pid=6258 comm="syz.3.105" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.682525][ T5886] usb 1-1: config 0 descriptor?? [ 101.713521][ T5886] usb 1-1: no audio or video endpoints found [ 101.801074][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.930938][ T30] audit: type=1400 audit(1762673233.578:229): avc: denied { ioctl } for pid=6258 comm="syz.3.105" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10063 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.017654][ T30] audit: type=1400 audit(1762673233.858:230): avc: denied { name_bind } for pid=6247 comm="syz.0.102" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.039467][ T30] audit: type=1400 audit(1762673233.858:231): avc: denied { node_bind } for pid=6247 comm="syz.0.102" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.071111][ T30] audit: type=1400 audit(1762673233.858:232): avc: denied { read write } for pid=6247 comm="syz.0.102" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.099852][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 103.105045][ T30] audit: type=1400 audit(1762673233.858:233): avc: denied { open } for pid=6247 comm="syz.0.102" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.132379][ T5856] usb 5-1: config 0 has no interfaces? [ 103.138362][ T5956] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 103.139566][ T5856] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 103.244837][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.253028][ T5856] usb 5-1: Product: syz [ 103.257401][ T5856] usb 5-1: Manufacturer: syz [ 103.262162][ T5856] usb 5-1: SerialNumber: syz [ 103.278190][ T5856] usb 5-1: config 0 descriptor?? [ 103.662706][ T5866] usb 5-1: USB disconnect, device number 3 [ 103.681732][ T5957] usb 1-1: USB disconnect, device number 3 [ 104.012055][ T5827] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 104.405812][ T5866] usb 3-1: USB disconnect, device number 4 [ 104.507760][ T5827] Bluetooth: Wrong link type (-71) [ 106.471328][ T1205] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.491441][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 106.491457][ T30] audit: type=1400 audit(1762673238.408:242): avc: denied { getopt } for pid=6340 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.559889][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 106.603036][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 106.670975][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 106.688812][ T1205] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 106.717310][ T1205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.740088][ T1205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.758960][ T30] audit: type=1326 audit(1762673238.658:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 106.830534][ T30] audit: type=1400 audit(1762673238.658:244): avc: denied { append } for pid=6351 comm="syz.1.138" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.875028][ T1205] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.887129][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.912326][ T1205] usb 4-1: Product: syz [ 106.914023][ T6357] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 106.916512][ T1205] usb 4-1: Manufacturer: syz [ 106.933581][ T30] audit: type=1326 audit(1762673238.708:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 106.972266][ T1205] usb 4-1: SerialNumber: syz [ 106.979180][ T30] audit: type=1326 audit(1762673238.718:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 107.083678][ T30] audit: type=1326 audit(1762673238.718:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 107.143607][ T30] audit: type=1326 audit(1762673238.718:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 107.167858][ T30] audit: type=1326 audit(1762673238.718:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 107.242456][ T30] audit: type=1326 audit(1762673238.718:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 108.268506][ T1205] usb 4-1: 0:2 : does not exist [ 108.351976][ T30] audit: type=1326 audit(1762673238.718:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2c65b8f6c9 code=0x7ffc0000 [ 108.673011][ T1205] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 108.723690][ T1205] usb 4-1: USB disconnect, device number 6 [ 108.811608][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.974342][ T5856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.130951][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 109.138244][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.151999][ T5856] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.180948][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.203583][ T5856] usb 5-1: config 0 descriptor?? [ 109.223306][ T5856] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 109.352970][ T6417] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 109.385303][ T1205] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.448196][ T6421] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 109.561977][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 109.589785][ T1205] usb 2-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 109.610470][ T1205] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 109.644124][ T1205] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 109.662151][ T1205] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.676570][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.686146][ T1205] usb 2-1: SerialNumber: syz [ 109.689664][ T6432] loop8: detected capacity change from 0 to 8 [ 109.702222][ T6417] veth3: entered promiscuous mode [ 109.710568][ T6417] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 109.720465][ T5821] Dev loop8: unable to read RDB block 8 [ 109.759563][ T5821] loop8: unable to read partition table [ 109.765494][ T5821] loop8: partition table beyond EOD, truncated [ 109.781157][ T6432] Dev loop8: unable to read RDB block 8 [ 109.787006][ T6432] loop8: unable to read partition table [ 109.793192][ T6432] loop8: partition table beyond EOD, truncated [ 109.799440][ T6432] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 109.922583][ T1205] usb 2-1: USB disconnect, device number 2 [ 109.983702][ T6439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 110.111957][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 110.287279][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.297064][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.305435][ T24] usb 1-1: Product: syz [ 110.309711][ T24] usb 1-1: Manufacturer: syz [ 110.319876][ T24] usb 1-1: SerialNumber: syz [ 110.328123][ T24] usb 1-1: config 0 descriptor?? [ 110.549734][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.654507][ T5856] usb 5-1: USB disconnect, device number 4 [ 111.372181][ T6481] loop8: detected capacity change from 0 to 8 [ 111.385956][ T6481] Dev loop8: unable to read RDB block 8 [ 111.391840][ T6481] loop8: unable to read partition table [ 111.397616][ T6481] loop8: partition table beyond EOD, truncated [ 111.406472][ T6481] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 111.680793][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 111.680807][ T30] audit: type=1400 audit(1762673243.598:271): avc: denied { create } for pid=6491 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.750271][ T30] audit: type=1400 audit(1762673243.608:272): avc: denied { write } for pid=6491 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.954628][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 111.961764][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 111.971292][ T1205] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.980968][ T5957] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.999129][ T6502] ceph: No mds server is up or the cluster is laggy [ 112.007978][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.020829][ T24] usb 1-1: USB disconnect, device number 4 [ 112.131248][ T1205] usb 5-1: Using ep0 maxpacket: 32 [ 112.143793][ T1205] usb 5-1: config 32 has an invalid interface number: 85 but max is 0 [ 112.161030][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 112.180928][ T1205] usb 5-1: config 32 has no interface number 0 [ 112.197244][ T1205] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.208909][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.235450][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.271912][ T1205] usb 5-1: config 32 interface 85 has no altsetting 0 [ 112.278806][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.296002][ T1205] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 112.313302][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.327103][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.352410][ T1205] usb 5-1: Product: syz [ 112.359908][ T1205] usb 5-1: Manufacturer: syz [ 112.365441][ T5957] usb 4-1: config 0 descriptor?? [ 112.377473][ T1205] usb 5-1: SerialNumber: syz [ 112.387633][ T5957] hub 4-1:0.0: USB hub found [ 112.414096][ T30] audit: type=1400 audit(1762673244.338:273): avc: denied { write } for pid=6513 comm="syz.1.206" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.508707][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.516746][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.600041][ T5957] hub 4-1:0.0: 1 port detected [ 113.604805][ T6530] input: syz0 as /devices/virtual/input/input9 [ 113.638941][ T6523] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.782958][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.806860][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.843110][ T6523] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.872878][ T6523] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.911332][ T1205] appletouch 5-1:32.85: Geyser mode initialized. [ 113.916357][ T6523] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.932988][ T6523] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.941301][ T6523] usb 2-1: Product: syz [ 113.945533][ T6523] usb 2-1: Manufacturer: syz [ 113.952431][ T6523] usb 2-1: SerialNumber: syz [ 113.952828][ T1205] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.85/input/input8 [ 113.970051][ T6523] usb 2-1: config 0 descriptor?? [ 113.983793][ T6523] usb 2-1: selecting invalid altsetting 0 [ 114.009016][ T30] audit: type=1400 audit(1762673245.928:274): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2873 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.273827][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.291076][ T6536] usb 5-1: USB disconnect, device number 5 [ 114.291128][ C1] appletouch 5-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 114.327888][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.343994][ T6520] hub 4-1:0.0: activate --> -90 [ 114.354213][ T6515] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 114.375934][ T6526] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 114.391470][ T6520] usb 4-1: USB disconnect, device number 7 [ 114.398193][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.426156][ T6537] usb 2-1: USB disconnect, device number 3 [ 114.437722][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.451193][ T6536] appletouch 5-1:32.85: input: appletouch disconnected [ 114.884335][ T30] audit: type=1400 audit(1762673246.808:275): avc: denied { create } for pid=6559 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.905713][ T6561] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.008437][ T6520] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.192686][ T6520] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.204479][ T6578] loop8: detected capacity change from 0 to 8 [ 115.220941][ T6520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.234230][ T6578] Dev loop8: unable to read RDB block 8 [ 115.239828][ T6578] loop8: unable to read partition table [ 115.256226][ T6578] loop8: partition table beyond EOD, truncated [ 115.265643][ T6520] usb 5-1: config 0 descriptor?? [ 115.292807][ T6578] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 115.310005][ T6520] cp210x 5-1:0.0: cp210x converter detected [ 115.350601][ T6586] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 115.462801][ T30] audit: type=1400 audit(1762673247.378:276): avc: denied { ioctl } for pid=6588 comm="syz.3.232" path="socket:[12332]" dev="sockfs" ino=12332 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.501394][ T6591] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2898581692 (23188653536 ns) > initial count (6059612160 ns). Using initial count to start timer. [ 115.550992][ T869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.717013][ T869] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 115.726215][ T6520] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 115.733747][ T869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.733769][ T869] usb 2-1: Product: syz [ 115.733782][ T869] usb 2-1: Manufacturer: syz [ 115.733794][ T869] usb 2-1: SerialNumber: syz [ 115.757658][ T30] audit: type=1400 audit(1762673247.668:277): avc: denied { map } for pid=6602 comm="syz.3.239" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.799392][ T6520] usb 5-1: cp210x converter now attached to ttyUSB0 [ 115.994349][ T6520] usb 5-1: USB disconnect, device number 6 [ 116.008571][ T869] rtl8150 2-1:1.0: couldn't reset the device [ 116.028409][ T869] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 116.028770][ T6520] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.081050][ T869] usb 2-1: USB disconnect, device number 4 [ 116.130636][ T6520] cp210x 5-1:0.0: device disconnected [ 116.375516][ T30] audit: type=1400 audit(1762673248.298:278): avc: denied { read } for pid=6625 comm="syz.2.246" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.404277][ T30] audit: type=1400 audit(1762673248.298:279): avc: denied { open } for pid=6625 comm="syz.2.246" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.428852][ T30] audit: type=1400 audit(1762673248.298:280): avc: denied { mount } for pid=6625 comm="syz.2.246" name="/" dev="autofs" ino=12522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 117.014842][ T6631] input: syz0 as /devices/virtual/input/input10 [ 117.595862][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 117.595877][ T30] audit: type=1400 audit(1762673249.518:283): avc: denied { append } for pid=6636 comm="syz.4.250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.761863][ T6526] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.910989][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 117.934511][ T6526] usb 2-1: Using ep0 maxpacket: 32 [ 117.946083][ T6526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.977660][ T6526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.991689][ T6526] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.001170][ T6526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.015115][ T6526] usb 2-1: config 0 descriptor?? [ 118.021013][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.031121][ T6526] hub 2-1:0.0: USB hub found [ 118.100993][ T6520] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 118.159758][ T6655] syzkaller0: entered promiscuous mode [ 118.166637][ T6655] syzkaller0: entered allmulticast mode [ 118.178081][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.201751][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.212697][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.223227][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.238425][ T6526] hub 2-1:0.0: 1 port detected [ 118.243444][ T10] usb 4-1: SerialNumber: syz [ 118.252544][ T6520] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 118.261653][ T6520] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.275706][ T6520] usb 1-1: config 0 has no interface number 0 [ 118.288001][ T6520] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.301263][ T6520] usb 1-1: config 0 interface 52 has no altsetting 0 [ 118.308915][ T6520] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 118.318253][ T6520] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 118.326415][ T6520] usb 1-1: Manufacturer: syz [ 118.344389][ T6520] usb 1-1: config 0 descriptor?? [ 118.360373][ T6520] hub 1-1:0.52: bad descriptor, ignoring hub [ 118.372181][ T6520] hub 1-1:0.52: probe with driver hub failed with error -5 [ 118.770878][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.401674][ T6526] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 119.408871][ T6526] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 119.442394][ T6520] usb 1-1: Can not set alternate setting to 1, error: -71 [ 119.567595][ T10] usb 4-1: 0:2 : does not exist [ 119.572558][ T6520] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 119.613150][ T10] usb 4-1: USB disconnect, device number 8 [ 119.625508][ T6520] usb 1-1: USB disconnect, device number 5 [ 119.681557][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.796523][ T6526] usbhid 2-1:0.0: can't add hid device: -32 [ 119.811720][ T6526] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 119.851835][ T6526] usb 2-1: USB disconnect, device number 5 [ 119.939469][ T52] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 120.201808][ T52] Bluetooth: hci4: Unable to find connection for big 0x00 [ 120.491743][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 120.657843][ T6526] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.232554][ T6526] usb 3-1: Using ep0 maxpacket: 32 [ 121.773973][ T6526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.822738][ T6526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.858914][ T30] audit: type=1400 audit(1762673253.778:284): avc: denied { read } for pid=6713 comm="syz.4.284" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.880846][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.887136][ T6526] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.906459][ T6717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.918847][ T52] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 121.941763][ T6717] block device autoloading is deprecated and will be removed. [ 121.942270][ T6526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.967450][ T30] audit: type=1400 audit(1762673253.778:285): avc: denied { open } for pid=6713 comm="syz.4.284" path="/45/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.992651][ T6526] usb 3-1: config 0 descriptor?? [ 121.997836][ T30] audit: type=1400 audit(1762673253.848:286): avc: denied { create } for pid=6718 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.019256][ T6526] hub 3-1:0.0: USB hub found [ 122.238485][ T6526] hub 3-1:0.0: 1 port detected [ 123.551992][ T6737] input: syz0 as /devices/virtual/input/input11 [ 123.740631][ T6526] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 123.924428][ T30] audit: type=1400 audit(1762673255.848:287): avc: denied { bind } for pid=6747 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.931904][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 124.211067][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.401677][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 124.415649][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.440934][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.467196][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.718474][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.743748][ T10] usb 2-1: config 0 descriptor?? [ 124.760954][ T10] hub 2-1:0.0: USB hub found [ 124.874442][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 124.883435][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.4.306'. [ 124.969141][ T10] hub 2-1:0.0: 1 port detected [ 125.298428][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.353233][ T6526] usb 3-1: USB disconnect, device number 5 [ 125.379160][ T10] usb 2-1: USB disconnect, device number 6 [ 125.397950][ T30] audit: type=1400 audit(1762673257.318:288): avc: denied { append } for pid=6777 comm="syz.3.311" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.434958][ T6778] loop6: detected capacity change from 0 to 7 [ 125.467990][ T6778] Dev loop6: unable to read RDB block 7 [ 125.511004][ T6778] loop6: AHDI p1 p2 [ 125.524547][ T6778] loop6: partition table partially beyond EOD, truncated [ 125.550385][ T6778] loop6: p1 start 926365495 is beyond EOD, truncated [ 126.314835][ T6792] Bluetooth: MGMT ver 1.23 [ 126.319484][ T6792] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 126.475920][ T30] audit: type=1400 audit(1762673258.398:289): avc: denied { create } for pid=6797 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.482874][ T6798] netlink: 332 bytes leftover after parsing attributes in process `syz.0.320'. [ 126.531067][ T30] audit: type=1400 audit(1762673258.398:290): avc: denied { bind } for pid=6797 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.581059][ T30] audit: type=1400 audit(1762673258.398:291): avc: denied { listen } for pid=6797 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.607888][ T30] audit: type=1400 audit(1762673258.398:292): avc: denied { mount } for pid=6801 comm="syz.2.321" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.629931][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.644266][ T6808] bridge0: port 3(syz_tun) entered blocking state [ 126.662672][ T6808] bridge0: port 3(syz_tun) entered disabled state [ 126.672936][ T6808] syz_tun: entered allmulticast mode [ 126.695076][ T6808] syz_tun: entered promiscuous mode [ 126.828987][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 127.561128][ T30] audit: type=1400 audit(1762673259.458:293): avc: denied { create } for pid=6831 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.587932][ T30] audit: type=1400 audit(1762673259.468:294): avc: denied { getopt } for pid=6831 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.459023][ T30] audit: type=1400 audit(1762673259.928:295): avc: denied { write } for pid=6842 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.512359][ T6853] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 128.689703][ T30] audit: type=1400 audit(1762673260.608:296): avc: denied { shutdown } for pid=6856 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.830280][ T6863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'. [ 128.940827][ T52] Bluetooth: hci4: unexpected event for opcode 0x1426 [ 129.098204][ T52] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 129.275532][ T6880] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.299786][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 129.299804][ T30] audit: type=1400 audit(1762673261.218:302): avc: denied { call } for pid=6884 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.321021][ T6880] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.342681][ T6886] binder_alloc: 6884: binder_alloc_buf size 62720 failed, no address space [ 129.381044][ T6886] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 129.409355][ T30] audit: type=1400 audit(1762673261.218:303): avc: denied { transfer } for pid=6884 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.428436][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.560931][ T30] audit: type=1400 audit(1762673261.438:304): avc: denied { ioctl } for pid=6894 comm="syz.0.360" path="socket:[13189]" dev="sockfs" ino=13189 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.586569][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.588606][ T5827] Bluetooth: hci1: unexpected event for opcode 0x1426 [ 129.667662][ T6880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.681417][ T6880] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 129.850923][ T6880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.867086][ T6880] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 129.931225][ T6880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.937248][ T6880] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 129.950952][ T6526] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.141974][ T6880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.170497][ T6880] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.192786][ T6526] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.226284][ T6526] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 130.241091][ T6526] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 130.271002][ T6526] usb 5-1: config 220 has no interface number 2 [ 130.277381][ T6526] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 130.321011][ T6526] usb 5-1: config 220 interface 0 has no altsetting 0 [ 130.327818][ T6526] usb 5-1: config 220 interface 76 has no altsetting 0 [ 130.384292][ T6526] usb 5-1: config 220 interface 1 has no altsetting 0 [ 130.416728][ T6526] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.428389][ T6526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.450203][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 130.459928][ T6526] usb 5-1: Product: syz [ 130.467484][ T6526] usb 5-1: Manufacturer: syz [ 130.498374][ T6526] usb 5-1: SerialNumber: syz [ 130.726881][ T6526] usb 5-1: selecting invalid altsetting 0 [ 130.761447][ T6526] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.805680][ T6526] uvcvideo 5-1:220.0: No valid video chain found. [ 130.841264][ T6526] usb 5-1: selecting invalid altsetting 0 [ 130.867375][ T6526] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 130.909757][ T6526] usb 5-1: USB disconnect, device number 7 [ 131.084253][ T30] audit: type=1400 audit(1762673263.008:305): avc: denied { write } for pid=6928 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.141190][ T6930] tipc: Started in network mode [ 131.147765][ T6930] tipc: Node identity e21cd40bd723, cluster identity 4711 [ 131.156207][ T6930] tipc: Enabled bearer , priority 0 [ 131.406079][ T30] audit: type=1400 audit(1762673263.318:306): avc: denied { setopt } for pid=6931 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.567279][ T30] audit: type=1400 audit(1762673263.318:307): avc: denied { ioctl } for pid=6931 comm="syz.0.374" path="socket:[13268]" dev="sockfs" ino=13268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.007660][ T30] audit: type=1400 audit(1762673263.318:308): avc: denied { write } for pid=6931 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.032374][ T6921] tipc: Disabling bearer [ 132.044037][ T30] audit: type=1400 audit(1762673263.968:309): avc: denied { write } for pid=6940 comm="syz.2.379" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.234762][ T30] audit: type=1400 audit(1762673264.158:310): avc: denied { bind } for pid=6943 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.425050][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.440962][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.462829][ T30] audit: type=1326 audit(1762673264.378:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8f6c9 code=0x7ffc0000 [ 133.351405][ T6977] netlink: 91 bytes leftover after parsing attributes in process `syz.3.393'. [ 133.425088][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 134.475472][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 134.475486][ T30] audit: type=1400 audit(1762673266.398:322): avc: denied { getopt } for pid=7009 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.514744][ T7015] input: syz0 as /devices/virtual/input/input12 [ 136.099983][ T30] audit: type=1400 audit(1762673268.018:323): avc: denied { create } for pid=7012 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.155364][ T30] audit: type=1400 audit(1762673268.028:324): avc: denied { read } for pid=7035 comm="syz.4.419" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.307355][ T30] audit: type=1400 audit(1762673268.028:325): avc: denied { open } for pid=7035 comm="syz.4.419" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.391070][ T30] audit: type=1400 audit(1762673268.048:326): avc: denied { ioctl } for pid=7012 comm="syz.2.408" path="socket:[13972]" dev="sockfs" ino=13972 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.786925][ T30] audit: type=1400 audit(1762673268.708:327): avc: denied { mount } for pid=7032 comm="syz.1.418" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 138.304613][ T7056] input: syz0 as /devices/virtual/input/input13 [ 139.214509][ T30] audit: type=1400 audit(1762673271.138:328): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.770739][ T7080] syzkaller1: entered promiscuous mode [ 139.779885][ T7080] syzkaller1: entered allmulticast mode [ 139.801120][ T5957] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.972205][ T5957] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.995276][ T5957] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.015249][ T5957] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.037576][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.071077][ T7072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.086423][ T5957] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.130096][ T30] audit: type=1400 audit(1762673272.048:329): avc: denied { bind } for pid=7086 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.592773][ T7097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7097 comm=syz.3.439 [ 141.194428][ T869] usb 5-1: USB disconnect, device number 8 [ 141.215454][ T30] audit: type=1400 audit(1762673273.118:330): avc: denied { read } for pid=7101 comm="syz.1.443" path="socket:[14569]" dev="sockfs" ino=14569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.672945][ T7109] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 141.697153][ T7109] bridge0: port 3(team0) entered blocking state [ 141.711072][ T7109] bridge0: port 3(team0) entered disabled state [ 141.732681][ T7109] team0: entered allmulticast mode [ 141.737826][ T7109] team_slave_0: entered allmulticast mode [ 141.768343][ T7109] team_slave_1: entered allmulticast mode [ 141.795275][ T7109] dummy0: entered allmulticast mode [ 141.813078][ T7109] team0: entered promiscuous mode [ 141.830739][ T7109] team_slave_0: entered promiscuous mode [ 141.845671][ T7109] team_slave_1: entered promiscuous mode [ 141.859105][ T7109] dummy0: entered promiscuous mode [ 141.867196][ T7109] bridge0: port 3(team0) entered blocking state [ 141.873631][ T7109] bridge0: port 3(team0) entered forwarding state [ 141.966863][ T30] audit: type=1400 audit(1762673273.888:331): avc: denied { create } for pid=7120 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.008815][ T30] audit: type=1400 audit(1762673273.908:332): avc: denied { connect } for pid=7120 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.041374][ T30] audit: type=1400 audit(1762673273.918:333): avc: denied { write } for pid=7120 comm="syz.3.453" path="socket:[14126]" dev="sockfs" ino=14126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.071676][ T30] audit: type=1400 audit(1762673273.998:334): avc: denied { ioctl } for pid=7123 comm="syz.4.452" path="socket:[14590]" dev="sockfs" ino=14590 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.781710][ T7139] input: syz0 as /devices/virtual/input/input14 [ 143.499463][ T7146] syzkaller1: entered promiscuous mode [ 143.511822][ T7146] syzkaller1: entered allmulticast mode [ 143.550567][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 143.752009][ T7159] syzkaller0: entered promiscuous mode [ 143.764764][ T7159] syzkaller0: entered allmulticast mode [ 144.570250][ T7174] input: syz0 as /devices/virtual/input/input15 [ 145.198900][ T30] audit: type=1400 audit(1762673277.118:335): avc: denied { create } for pid=7178 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 145.246251][ T30] audit: type=1400 audit(1762673277.118:336): avc: denied { ioctl } for pid=7178 comm="syz.3.473" path="socket:[14213]" dev="sockfs" ino=14213 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.423681][ T30] audit: type=1400 audit(1762673278.348:337): avc: denied { mount } for pid=7212 comm="syz.0.488" name="/" dev="ramfs" ino=14255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.499358][ T30] audit: type=1804 audit(1762673278.348:338): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.488" name="file1" dev="ramfs" ino=14256 res=1 errno=0 [ 146.565585][ T30] audit: type=1400 audit(1762673278.488:339): avc: denied { name_connect } for pid=7217 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 147.410932][ T30] audit: type=1400 audit(1762673279.328:340): avc: denied { read append } for pid=7238 comm="syz.1.496" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.459458][ T30] audit: type=1400 audit(1762673279.328:341): avc: denied { open } for pid=7238 comm="syz.1.496" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.521045][ T30] audit: type=1400 audit(1762673279.328:342): avc: denied { ioctl } for pid=7238 comm="syz.1.496" path="/dev/comedi4" dev="devtmpfs" ino=1280 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.545579][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.603472][ T30] audit: type=1400 audit(1762673279.528:343): avc: denied { connect } for pid=7244 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.501552][ T30] audit: type=1400 audit(1762673280.418:344): avc: denied { bind } for pid=7265 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.658278][ T7308] autofs: Bad value for 'fd' [ 150.778140][ T7316] tmpfs: Bad value for 'mpol' [ 150.848040][ T7319] mmap: syz.2.529 (7319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.155413][ T7317] No such timeout policy "syz1" [ 151.206399][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.206414][ T30] audit: type=1400 audit(1762673283.128:346): avc: denied { sys_module } for pid=7309 comm="syz.4.524" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 151.284446][ T30] audit: type=1400 audit(1762673283.208:347): avc: denied { read } for pid=7330 comm="syz.1.532" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.336276][ T30] audit: type=1400 audit(1762673283.208:348): avc: denied { open } for pid=7330 comm="syz.1.532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.389772][ T30] audit: type=1400 audit(1762673283.208:349): avc: denied { ioctl } for pid=7330 comm="syz.1.532" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.620460][ T30] audit: type=1400 audit(1762673283.538:350): avc: denied { read } for pid=7340 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.842824][ T30] audit: type=1400 audit(1762673283.768:351): avc: denied { getopt } for pid=7344 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.161769][ T7365] binder: BINDER_SET_CONTEXT_MGR already set [ 153.116266][ T7365] binder: 7364:7365 ioctl 4018620d 2000000002c0 returned -16 [ 153.455787][ T30] audit: type=1400 audit(1762673285.368:352): avc: denied { write } for pid=7379 comm="syz.1.551" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.785565][ T30] audit: type=1400 audit(1762673285.538:353): avc: denied { create } for pid=7376 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.985717][ T30] audit: type=1400 audit(1762673285.608:354): avc: denied { ioctl } for pid=7376 comm="syz.4.552" path="socket:[15680]" dev="sockfs" ino=15680 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 154.077696][ T30] audit: type=1400 audit(1762673285.998:355): avc: denied { connect } for pid=7390 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.167220][ T7397] binder: BINDER_SET_CONTEXT_MGR already set [ 154.202790][ T7397] binder: 7396:7397 ioctl 4018620d 2000000002c0 returned -16 [ 154.482785][ T7403] input: syz0 as /devices/virtual/input/input16 [ 156.053392][ T7418] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 157.435007][ T7443] binder_alloc: 7441: binder_alloc_buf, no vma [ 157.593140][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.593156][ T30] audit: type=1400 audit(1762673289.518:358): avc: denied { open } for pid=7448 comm="syz.3.580" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 157.709217][ T30] audit: type=1400 audit(1762673289.528:359): avc: denied { ioctl } for pid=7448 comm="syz.3.580" path="/dev/ttyqa" dev="devtmpfs" ino=385 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 157.723303][ T7458] binder: 7455:7458 ioctl c0306201 200000000180 returned -14 [ 162.572736][ T7534] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.502623][ T7544] bridge1: entered promiscuous mode [ 164.263397][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 165.580663][ T30] audit: type=1400 audit(1762673296.968:360): avc: denied { write } for pid=7567 comm="syz.1.621" name="sockstat6" dev="proc" ino=4026533136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.339478][ T7596] ======================================================= [ 166.339478][ T7596] WARNING: The mand mount option has been deprecated and [ 166.339478][ T7596] and is ignored by this kernel. Remove the mand [ 166.339478][ T7596] option from the mount to silence this warning. [ 166.339478][ T7596] ======================================================= [ 166.462517][ T30] audit: type=1400 audit(1762673298.298:361): avc: denied { mount } for pid=7595 comm="syz.2.628" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 167.094516][ T30] audit: type=1400 audit(1762673298.518:362): avc: denied { mounton } for pid=7595 comm="syz.2.628" path="/135/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.154067][ T7604] syzkaller0: entered promiscuous mode [ 167.239768][ T30] audit: type=1400 audit(1762673298.528:363): avc: denied { mount } for pid=7595 comm="syz.2.628" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.254033][ T7604] syzkaller0: entered allmulticast mode [ 167.286466][ T30] audit: type=1400 audit(1762673299.208:364): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.357427][ T7620] No such timeout policy "syz1" [ 169.282754][ T7447] Set syz1 is full, maxelem 65536 reached [ 170.741898][ T7647] syzkaller0: entered promiscuous mode [ 170.747361][ T7647] syzkaller0: entered allmulticast mode [ 171.035451][ T7656] No such timeout policy "syz1" [ 171.884979][ T30] audit: type=1400 audit(1762673303.808:365): avc: denied { write } for pid=7663 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.905145][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.652'. [ 172.236126][ T7672] input: syz0 as /devices/virtual/input/input17 [ 173.806231][ T7685] syzkaller0: entered promiscuous mode [ 173.825414][ T7685] syzkaller0: entered allmulticast mode [ 174.529981][ T30] audit: type=1400 audit(1762673306.448:366): avc: denied { create } for pid=7700 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.552710][ T7706] usb usb9: usbfs: process 7706 (syz.3.668) did not claim interface 0 before use [ 174.701019][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 174.951064][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 174.966452][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 174.987074][ T10] usb 1-1: config 0 has no interface number 0 [ 174.996789][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 175.007177][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 175.017028][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.025541][ T10] usb 1-1: Product: syz [ 175.029870][ T10] usb 1-1: Manufacturer: syz [ 175.035498][ T10] usb 1-1: SerialNumber: syz [ 175.045071][ T10] usb 1-1: config 0 descriptor?? [ 175.269062][ T10] ipheth 1-1:0.196: Unable to find endpoints [ 175.280601][ T10] usb 1-1: USB disconnect, device number 6 [ 175.405851][ T7718] syzkaller0: entered promiscuous mode [ 175.429910][ T7718] syzkaller0: entered allmulticast mode [ 175.606534][ T30] audit: type=1400 audit(1762673307.528:367): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 176.408953][ T30] audit: type=1400 audit(1762673308.328:368): avc: denied { read write } for pid=7733 comm="syz.4.681" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.472352][ T30] audit: type=1400 audit(1762673308.328:369): avc: denied { open } for pid=7733 comm="syz.4.681" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.064528][ T30] audit: type=1400 audit(1762673308.858:370): avc: denied { ioctl } for pid=7756 comm="syz.1.688" path="socket:[16631]" dev="sockfs" ino=16631 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 178.590300][ T30] audit: type=1400 audit(1762673310.488:371): avc: denied { create } for pid=7783 comm="syz.4.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 179.011190][ T30] audit: type=1400 audit(1762673310.928:372): avc: denied { read } for pid=7790 comm="syz.0.700" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.053421][ T30] audit: type=1400 audit(1762673310.928:373): avc: denied { open } for pid=7790 comm="syz.0.700" path="/134/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.076274][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.265003][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 179.490962][ T6536] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 179.835172][ T6536] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 179.844449][ T30] audit: type=1400 audit(1762673311.688:374): avc: denied { create } for pid=7826 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.896918][ T6536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.029639][ T30] audit: type=1400 audit(1762673311.688:375): avc: denied { setopt } for pid=7826 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.053222][ T6536] usb 1-1: config 0 descriptor?? [ 180.069366][ T30] audit: type=1400 audit(1762673311.748:376): avc: denied { bind } for pid=7826 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.229422][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 180.273401][ T6522] usb 1-1: USB disconnect, device number 7 [ 181.901050][ T6536] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 183.437010][ T6536] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.458602][ T6536] usb 3-1: config 0 has no interface number 0 [ 183.501459][ T6536] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 183.521025][ T6536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.543289][ T6536] usb 3-1: config 0 descriptor?? [ 183.624735][ T6536] usb 3-1: selecting invalid altsetting 1 [ 183.632225][ T6536] dvb_ttusb_budget: ttusb_init_controller: error [ 183.639205][ T6536] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 183.732297][ T6536] DVB: Unable to find symbol cx22700_attach() [ 183.788189][ T6536] DVB: Unable to find symbol tda10046_attach() [ 183.799357][ T6536] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 183.833472][ T6536] usb 3-1: USB disconnect, device number 6 [ 185.149333][ T30] audit: type=1400 audit(1762673317.068:377): avc: denied { read } for pid=7942 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.388415][ T7986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.775'. [ 186.435378][ T30] audit: type=1400 audit(1762673318.348:378): avc: denied { connect } for pid=7987 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.821278][ T6537] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.974638][ T6537] usb 4-1: Using ep0 maxpacket: 32 [ 186.985171][ T6537] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 186.997902][ T6537] usb 4-1: config 0 has no interface number 0 [ 187.006805][ T6537] usb 4-1: config 0 interface 196 has no altsetting 0 [ 187.019123][ T6537] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 187.029622][ T6537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.038440][ T6537] usb 4-1: Product: syz [ 187.044049][ T6537] usb 4-1: Manufacturer: syz [ 187.291429][ T5184] Dev loop6: unable to read RDB block 7 [ 187.303333][ T5184] loop6: AHDI p1 p2 [ 187.307727][ T5184] loop6: partition table partially beyond EOD, truncated [ 187.450082][ T6537] usb 4-1: SerialNumber: syz [ 187.459252][ T6537] usb 4-1: config 0 descriptor?? [ 187.464421][ T5184] loop6: p1 start 926365495 is beyond EOD, truncated [ 187.672100][ T6537] ipheth 4-1:0.196: Unable to find endpoints [ 187.696749][ T6537] usb 4-1: USB disconnect, device number 9 [ 188.076069][ T8036] binder: BINDER_SET_CONTEXT_MGR already set [ 188.098462][ T8036] binder: 8034:8036 ioctl 4018620d 200000004a80 returned -16 [ 189.073002][ T8047] binder: 8046:8047 ioctl 4018620d 0 returned -22 [ 189.308871][ T8055] Dead loop on virtual device ip6_vti0, fix it urgently! [ 190.871057][ T30] audit: type=1400 audit(1762673322.748:379): avc: denied { ioctl } for pid=8071 comm="syz.4.808" path="socket:[17247]" dev="sockfs" ino=17247 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 191.021005][ T30] audit: type=1400 audit(1762673322.928:380): avc: denied { connect } for pid=8078 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.071103][ T8077] warning: `syz.4.808' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 191.158539][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 191.502575][ T30] audit: type=1400 audit(1762673323.428:381): avc: denied { write } for pid=8103 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.691066][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 191.936007][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.040899][ T10] usb 3-1: config 0 has no interface number 0 [ 192.047040][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 192.080286][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.098897][ T10] usb 3-1: config 0 descriptor?? [ 192.107712][ T10] usb 3-1: selecting invalid altsetting 1 [ 192.121442][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 192.127880][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 192.314091][ T10] DVB: Unable to find symbol cx22700_attach() [ 192.433974][ T10] DVB: Unable to find symbol tda10046_attach() [ 192.440558][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 192.493993][ T10] usb 3-1: USB disconnect, device number 7 [ 192.609154][ T30] audit: type=1400 audit(1762673324.458:382): avc: denied { connect } for pid=8119 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.878844][ T30] audit: type=1400 audit(1762673324.458:383): avc: denied { write } for pid=8119 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.920220][ T30] audit: type=1400 audit(1762673324.458:384): avc: denied { read } for pid=8119 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.670046][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 193.676231][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 193.840546][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.847019][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.062387][ T6536] libceph: connect (1)[c::]:6789 error -101 [ 194.069025][ T6536] libceph: mon0 (1)[c::]:6789 connect error [ 194.161117][ T30] audit: type=1400 audit(1762673326.078:385): avc: denied { append } for pid=8200 comm="syz.2.861" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.408228][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 194.591245][ T8171] ceph: No mds server is up or the cluster is laggy [ 194.919025][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 194.925243][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 195.443481][ T30] audit: type=1400 audit(1762673327.368:386): avc: denied { map } for pid=8236 comm="syz.1.874" path="socket:[18609]" dev="sockfs" ino=18609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 196.341014][ T10] libceph: connect (1)[c::]:6789 error -101 [ 196.396537][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 196.539078][ T10] libceph: connect (1)[c::]:6789 error -101 [ 196.599314][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.882'. [ 196.614860][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 196.622595][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 196.647405][ T8258] tc_dump_action: action bad kind [ 196.723724][ T30] audit: type=1400 audit(1762673328.648:387): avc: denied { write } for pid=8265 comm="syz.0.887" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 196.941992][ T30] audit: type=1400 audit(1762673328.648:388): avc: denied { open } for pid=8265 comm="syz.0.887" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 197.607814][ T8272] input: syz1 as /devices/virtual/input/input18 [ 197.632420][ T30] audit: type=1400 audit(1762673328.968:389): avc: denied { getopt } for pid=8265 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.693679][ T10] libceph: connect (1)[c::]:6789 error -101 [ 197.695700][ T8249] ceph: No mds server is up or the cluster is laggy [ 197.699846][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 197.756181][ T30] audit: type=1400 audit(1762673329.048:390): avc: denied { ioctl } for pid=8265 comm="syz.0.887" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 197.781125][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.221813][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 198.474240][ T30] audit: type=1400 audit(1762673330.378:391): avc: denied { name_connect } for pid=8298 comm="syz.1.901" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 198.495689][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.597779][ T10] libceph: connect (1)[c::]:6789 error -101 [ 198.610384][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 198.734211][ T30] audit: type=1400 audit(1762673330.598:392): avc: denied { read } for pid=8293 comm="syz.4.898" laddr=172.20.20.10 lport=47559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.873896][ T10] libceph: connect (1)[c::]:6789 error -101 [ 198.987849][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 199.571515][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 199.578224][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 199.598325][ T8303] ceph: No mds server is up or the cluster is laggy [ 200.517172][ T6522] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 200.802923][ T6522] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.821056][ T6522] usb 1-1: config 0 has no interface number 0 [ 200.827236][ T6522] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 200.837170][ T6522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.848242][ T6522] usb 1-1: config 0 descriptor?? [ 200.871632][ T6522] usb 1-1: selecting invalid altsetting 1 [ 200.889166][ T6520] libceph: connect (1)[c::]:6789 error -101 [ 200.889924][ T6522] dvb_ttusb_budget: ttusb_init_controller: error [ 200.903002][ T6520] libceph: mon0 (1)[c::]:6789 connect error [ 200.915876][ T6522] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 201.003290][ T6522] DVB: Unable to find symbol cx22700_attach() [ 201.026695][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.924'. [ 201.075329][ T6522] DVB: Unable to find symbol tda10046_attach() [ 201.081835][ T6522] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 201.101017][ T30] audit: type=1400 audit(1762673333.008:393): avc: denied { create } for pid=8374 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.120715][ T6522] usb 1-1: USB disconnect, device number 8 [ 201.141380][ T30] audit: type=1400 audit(1762673333.028:394): avc: denied { setopt } for pid=8374 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.171656][ T6520] libceph: connect (1)[c::]:6789 error -101 [ 201.186949][ T6520] libceph: mon0 (1)[c::]:6789 connect error [ 201.242086][ T8380] syz_tun: entered allmulticast mode [ 201.252942][ T8379] syz_tun: left allmulticast mode [ 201.710759][ T8361] ceph: No mds server is up or the cluster is laggy [ 201.831086][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 201.837879][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 202.562511][ T8426] binder: BINDER_SET_CONTEXT_MGR already set [ 202.568578][ T8426] binder: 8425:8426 ioctl 4018620d 2000000002c0 returned -16 [ 202.619341][ T6520] libceph: connect (1)[c::]:6789 error -101 [ 202.635787][ T6520] libceph: mon0 (1)[c::]:6789 connect error [ 202.674915][ T8438] team0: No ports can be present during mode change [ 202.731004][ T6522] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 202.731040][ T6526] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 202.880957][ T6522] usb 2-1: Using ep0 maxpacket: 32 [ 202.888093][ T6522] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 202.899988][ T6522] usb 2-1: config 0 has no interface number 0 [ 202.906342][ T6522] usb 2-1: config 0 interface 196 has no altsetting 0 [ 202.915866][ T6522] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 202.925612][ T6522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.934088][ T6522] usb 2-1: Product: syz [ 202.938624][ T6522] usb 2-1: Manufacturer: syz [ 202.943659][ T6522] usb 2-1: SerialNumber: syz [ 202.951653][ T6522] usb 2-1: config 0 descriptor?? [ 202.983849][ T6520] libceph: connect (1)[c::]:6789 error -101 [ 202.990287][ T6520] libceph: mon0 (1)[c::]:6789 connect error [ 203.002460][ T6526] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.010507][ T6526] usb 3-1: config 0 has no interface number 0 [ 203.016818][ T6526] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 203.025903][ T6526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.035672][ T6526] usb 3-1: config 0 descriptor?? [ 203.197637][ T6522] ipheth 2-1:0.196: Unable to find endpoints [ 203.375178][ T6522] usb 2-1: USB disconnect, device number 7 [ 203.419291][ T8429] ceph: No mds server is up or the cluster is laggy [ 203.441886][ T6526] usb 3-1: selecting invalid altsetting 1 [ 203.448318][ T6526] dvb_ttusb_budget: ttusb_init_controller: error [ 203.465224][ T6526] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 203.552802][ T6526] DVB: Unable to find symbol cx22700_attach() [ 203.568433][ T30] audit: type=1400 audit(1762673335.488:395): avc: denied { read write } for pid=8456 comm="syz.4.956" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.594729][ T30] audit: type=1400 audit(1762673335.518:396): avc: denied { open } for pid=8456 comm="syz.4.956" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.680975][ T6526] DVB: Unable to find symbol tda10046_attach() [ 203.693458][ T6526] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 203.810331][ T6526] usb 3-1: USB disconnect, device number 8 [ 204.213624][ T30] audit: type=1400 audit(1762673336.128:397): avc: denied { setopt } for pid=8468 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.238759][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 204.244947][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 204.511939][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 204.573669][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 205.140407][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 205.146409][ T8484] ceph: No mds server is up or the cluster is laggy [ 205.161033][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 205.983406][ T30] audit: type=1400 audit(1762673337.668:398): avc: denied { ioctl } for pid=8506 comm="syz.3.975" path="mnt:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.399785][ T30] audit: type=1400 audit(1762673338.318:399): avc: denied { setattr } for pid=8520 comm="syz.4.980" path="socket:[19728]" dev="sockfs" ino=19728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.429395][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 206.542665][ T6536] libceph: connect (1)[c::]:6789 error -101 [ 206.559711][ T6536] libceph: mon0 (1)[c::]:6789 connect error [ 207.258298][ T6536] libceph: connect (1)[c::]:6789 error -101 [ 207.265213][ T30] audit: type=1400 audit(1762673338.828:400): avc: denied { accept } for pid=8538 comm="syz.4.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.299547][ T6536] libceph: mon0 (1)[c::]:6789 connect error [ 207.316658][ T30] audit: type=1400 audit(1762673339.218:401): avc: denied { mount } for pid=8545 comm="syz.0.990" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 207.344120][ T8531] ceph: No mds server is up or the cluster is laggy [ 207.855727][ T8565] netlink: 'syz.3.995': attribute type 4 has an invalid length. [ 207.872459][ T30] audit: type=1400 audit(1762673339.758:402): avc: denied { bind } for pid=8556 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.938540][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 208.208564][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 208.215087][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 208.218646][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 208.261066][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.390104][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 208.420990][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 208.432763][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 208.443285][ T10] usb 5-1: config 0 has no interface number 0 [ 208.449473][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 208.459858][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 208.469407][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.482782][ T6520] libceph: connect (1)[c::]:6789 error -101 [ 208.488848][ T6520] libceph: mon0 (1)[c::]:6789 connect error [ 208.495344][ T10] usb 5-1: Product: syz [ 208.499585][ T10] usb 5-1: Manufacturer: syz [ 208.504809][ T10] usb 5-1: SerialNumber: syz [ 208.517878][ T10] usb 5-1: config 0 descriptor?? [ 208.755925][ T10] ipheth 5-1:0.196: Unable to find endpoints [ 208.770794][ T10] usb 5-1: USB disconnect, device number 9 [ 208.853044][ T6537] kernel read not supported for file /594/sessionid (pid: 6537 comm: kworker/1:16) [ 208.902134][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 208.975026][ T8630] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 208.983141][ T8630] netlink: 'syz.3.1023': attribute type 2 has an invalid length. [ 209.008473][ T8588] ceph: No mds server is up or the cluster is laggy [ 209.020470][ T10] libceph: connect (1)[c::]:6789 error -101 [ 209.046890][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 211.192148][ T8651] binder: BINDER_SET_CONTEXT_MGR already set [ 211.210967][ T8651] binder: 8650:8651 ioctl 4018620d 200000004a80 returned -16 [ 211.649669][ T10] libceph: connect (1)[c::]:6789 error -101 [ 211.892529][ T6536] kernel read not supported for file /514/sessionid (pid: 6536 comm: kworker/1:15) [ 212.107431][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 212.371118][ T10] libceph: connect (1)[c::]:6789 error -101 [ 212.377480][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 212.384292][ T8689] binder: 8688:8689 ioctl c0306201 0 returned -14 [ 212.421966][ T8663] ceph: No mds server is up or the cluster is laggy [ 212.722831][ T30] audit: type=1400 audit(1762673344.638:403): avc: denied { setopt } for pid=8691 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.867987][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 213.479215][ T8710] 9pnet_fd: Insufficient options for proto=fd [ 213.748180][ T8719] binder: 8718:8719 ioctl c0306201 0 returned -14 [ 213.870955][ T10] libceph: connect (1)[c::]:6789 error -101 [ 213.887011][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 214.223936][ T10] libceph: connect (1)[c::]:6789 error -101 [ 214.416583][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 214.669841][ T8722] ceph: No mds server is up or the cluster is laggy [ 215.213742][ T8744] vivid-008: ================= START STATUS ================= [ 215.274522][ T8744] vivid-008: FM Deviation: 75000 [ 215.315751][ T8744] vivid-008: ================== END STATUS ================== [ 215.546184][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 215.561434][ T8750] vlan3: entered promiscuous mode [ 215.787098][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 215.880148][ T8763] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1072'. [ 215.899635][ T8763] team0: No ports can be present during mode change [ 216.011332][ T8767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.018852][ T8767] IPv6: NLM_F_CREATE should be set when creating new route [ 216.026188][ T8767] IPv6: NLM_F_CREATE should be set when creating new route [ 216.080509][ T8774] lo: entered allmulticast mode [ 216.103734][ T8774] tunl0: entered allmulticast mode [ 216.115658][ T8774] gre0: entered allmulticast mode [ 216.174558][ T8774] gretap0: entered allmulticast mode [ 216.201254][ T8774] erspan0: entered allmulticast mode [ 216.217719][ T8774] ip_vti0: entered allmulticast mode [ 216.244277][ T8774] ip6_vti0: entered allmulticast mode [ 216.262922][ T8774] sit0: left promiscuous mode [ 216.269985][ T8774] sit0: entered allmulticast mode [ 216.280804][ T8774] ip6tnl0: entered allmulticast mode [ 216.302947][ T8774] ip6gre0: entered allmulticast mode [ 216.321259][ T8774] syz_tun: entered allmulticast mode [ 216.367895][ T8774] ip6gretap0: entered allmulticast mode [ 216.377831][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.386507][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.398931][ T8774] bridge0: entered allmulticast mode [ 216.407833][ T30] audit: type=1400 audit(1762673348.328:404): avc: denied { bind } for pid=8772 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.441359][ T8774] vcan0: entered allmulticast mode [ 216.449548][ T8774] bond0: entered allmulticast mode [ 216.455364][ T8774] bond_slave_0: entered allmulticast mode [ 216.461540][ T8774] bond_slave_1: entered allmulticast mode [ 216.484257][ T8774] team0: entered allmulticast mode [ 216.490236][ T8774] team_slave_0: entered allmulticast mode [ 216.496132][ T8774] team_slave_1: entered allmulticast mode [ 216.505236][ T8774] dummy0: entered allmulticast mode [ 216.517748][ T8774] nlmon0: entered allmulticast mode [ 216.527004][ T8774] caif0: entered allmulticast mode [ 216.532693][ T8774] batadv0: entered allmulticast mode [ 216.541668][ T8774] vxcan0: entered allmulticast mode [ 216.548203][ T8774] vxcan1: entered allmulticast mode [ 216.556079][ T8774] veth0: entered allmulticast mode [ 216.564614][ T8774] veth1: entered allmulticast mode [ 216.598821][ T8774] wg0: entered allmulticast mode [ 216.610170][ T8774] wg1: entered allmulticast mode [ 216.619088][ T8774] wg2: entered allmulticast mode [ 216.626920][ T8774] veth0_to_bridge: entered allmulticast mode [ 216.637689][ T8774] veth1_to_bridge: entered allmulticast mode [ 216.651675][ T8774] veth0_to_bond: entered allmulticast mode [ 216.659782][ T8774] veth1_to_bond: entered allmulticast mode [ 216.668178][ T8774] veth0_to_team: entered allmulticast mode [ 216.677355][ T8774] veth1_to_team: entered allmulticast mode [ 216.686098][ T8774] veth0_to_batadv: entered allmulticast mode [ 216.694092][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.702678][ T8774] batadv_slave_0: entered allmulticast mode [ 216.711573][ T8774] veth1_to_batadv: entered allmulticast mode [ 216.718991][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.727040][ T8774] batadv_slave_1: entered allmulticast mode [ 216.734827][ T8774] xfrm0: entered allmulticast mode [ 216.741480][ T8774] veth0_to_hsr: entered allmulticast mode [ 216.748532][ T8774] hsr_slave_0: entered allmulticast mode [ 216.756198][ T8774] veth1_to_hsr: entered allmulticast mode [ 216.761092][ T8794] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 216.763921][ T8774] hsr_slave_1: entered allmulticast mode [ 216.777189][ T8774] hsr0: entered allmulticast mode [ 216.783980][ T8774] veth1_virt_wifi: entered allmulticast mode [ 216.792188][ T8774] veth0_virt_wifi: entered allmulticast mode [ 216.800275][ T8774] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 216.808151][ T8774] veth1_vlan: entered allmulticast mode [ 216.815591][ T8774] veth0_vlan: entered allmulticast mode [ 216.828174][ T8774] vlan0: entered allmulticast mode [ 216.834101][ T8774] vlan1: entered allmulticast mode [ 216.839719][ T8774] macvlan0: entered allmulticast mode [ 216.847145][ T8774] macvlan1: entered allmulticast mode [ 216.854409][ T8774] ipvlan0: entered allmulticast mode [ 216.859776][ T8774] ipvlan1: entered allmulticast mode [ 216.865851][ T8774] veth1_macvtap: entered allmulticast mode [ 216.873408][ T8774] veth0_macvtap: entered allmulticast mode [ 216.881621][ T8774] macvtap0: entered allmulticast mode [ 216.888640][ T8774] macsec0: entered allmulticast mode [ 216.900461][ T8774] geneve0: entered allmulticast mode [ 216.909546][ T8774] geneve1: entered allmulticast mode [ 216.918191][ T8774] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 216.928819][ T8774] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 216.939514][ T8774] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 216.953213][ T8774] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 216.969663][ T8774] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 216.985670][ T8774] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 216.996587][ T8774] erspan0.1: entered allmulticast mode [ 217.003474][ T8774] erspan1: entered allmulticast mode [ 217.009016][ T8774] veth2: entered allmulticast mode [ 217.014561][ T8774] veth3: entered allmulticast mode [ 217.020004][ T8774] syztnl0: entered allmulticast mode [ 217.028534][ T6126] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.052891][ T2924] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.080096][ T2924] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.110768][ T2924] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.225074][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 218.340367][ T30] audit: type=1400 audit(1762673350.258:405): avc: denied { write } for pid=8795 comm="syz.2.1086" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 218.398640][ T5184] Dev loop6: unable to read RDB block 7 [ 218.406548][ T5184] loop6: AHDI p1 p2 [ 218.416251][ T5184] loop6: partition table partially beyond EOD, truncated [ 218.430023][ T5184] loop6: p1 start 926365495 is beyond EOD, truncated [ 218.439924][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 218.446068][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 218.711404][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 218.723452][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 218.849609][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 218.885561][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'. [ 219.748899][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 219.755734][ T8838] ceph: No mds server is up or the cluster is laggy [ 219.762912][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 221.749330][ T30] audit: type=1400 audit(1762673353.668:406): avc: denied { connect } for pid=8894 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.390847][ T30] audit: type=1400 audit(1762673353.868:407): avc: denied { bind } for pid=8897 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.432627][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 222.438880][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 222.952301][ T30] audit: type=1400 audit(1762673354.858:408): avc: denied { create } for pid=8920 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.000325][ T8907] ceph: No mds server is up or the cluster is laggy [ 223.032048][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 223.038175][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 223.075517][ T30] audit: type=1400 audit(1762673354.868:409): avc: denied { setopt } for pid=8920 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.207716][ T8931] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1134'. [ 224.398817][ T8949] bridge0: entered allmulticast mode [ 224.441688][ T8949] pim6reg: entered allmulticast mode [ 224.479706][ T8949] bridge0: left allmulticast mode [ 224.496161][ T8948] pim6reg: left allmulticast mode [ 224.922594][ T30] audit: type=1400 audit(1762673356.848:410): avc: denied { relabelfrom } for pid=8954 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 224.966410][ T10] libceph: connect (1)[c::]:6789 error -101 [ 224.985508][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 225.018167][ T30] audit: type=1400 audit(1762673356.848:411): avc: denied { relabelto } for pid=8954 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 225.293289][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 225.299551][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 225.362631][ T8979] binder: 8978:8979 ioctl 4018620d 0 returned -22 [ 225.610220][ T8982] netlink: 'syz.0.1153': attribute type 3 has an invalid length. [ 225.740447][ T8962] ceph: No mds server is up or the cluster is laggy [ 226.609331][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 226.615444][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 226.881191][ T6536] libceph: connect (1)[c::]:6789 error -101 [ 226.906590][ T6536] libceph: mon0 (1)[c::]:6789 connect error [ 227.139824][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1168'. [ 227.159591][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1168'. [ 227.427345][ T9020] ceph: No mds server is up or the cluster is laggy [ 227.452071][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 227.458866][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 228.388403][ T9071] input: syz0 as /devices/virtual/input/input19 [ 228.731815][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 228.830419][ T9090] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 228.864935][ T9090] bond1 (unregistering): Released all slaves [ 229.168305][ T30] audit: type=1400 audit(1762673361.088:412): avc: denied { setopt } for pid=9107 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.264409][ T9116] syz_tun: entered allmulticast mode [ 229.313346][ T9111] syz_tun: left allmulticast mode [ 230.488669][ T30] audit: type=1400 audit(1762673362.408:413): avc: denied { ioctl } for pid=9136 comm="syz.2.1204" path="socket:[21170]" dev="sockfs" ino=21170 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.518796][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.589184][ T9151] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 232.101276][ T9170] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 232.354628][ T30] audit: type=1400 audit(1762673364.278:414): avc: denied { getopt } for pid=9175 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.549909][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 232.635909][ T9193] bridge0: entered allmulticast mode [ 232.652080][ T9193] bridge0: left allmulticast mode [ 232.779076][ T9199] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 233.744096][ T30] audit: type=1400 audit(1762673365.538:415): avc: denied { connect } for pid=9205 comm="syz.3.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.583655][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 235.729677][ T30] audit: type=1400 audit(1762673367.628:416): avc: denied { watch } for pid=9248 comm="syz.0.1247" path="/240/file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.811944][ T9255] bridge0: entered allmulticast mode [ 236.043606][ T30] audit: type=1400 audit(1762673367.628:417): avc: denied { watch_sb watch_reads } for pid=9248 comm="syz.0.1247" path="/240/file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.133420][ T9258] pim6reg: entered allmulticast mode [ 236.158779][ T9255] pim6reg: left allmulticast mode [ 236.170990][ T9255] bridge0: left allmulticast mode [ 238.316446][ T30] audit: type=1400 audit(1762673370.238:418): avc: denied { create } for pid=9336 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 240.835632][ T30] audit: type=1400 audit(1762673372.758:419): avc: denied { write } for pid=9359 comm="syz.0.1292" path="socket:[22585]" dev="sockfs" ino=22585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 240.883882][ T9365] infiniband syz2: set down [ 241.040938][ T9365] infiniband syz2: added bond0 [ 241.088973][ T9365] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 241.094857][ T9365] infiniband syz2: Couldn't open port 1 [ 241.187896][ T9365] RDS/IB: syz2: added [ 241.197873][ T9365] smc: adding ib device syz2 with port count 1 [ 241.211169][ T9365] smc: ib device syz2 port 1 has no pnetid [ 241.233122][ T9376] pim6reg: entered allmulticast mode [ 241.276072][ T9375] pim6reg: left allmulticast mode [ 241.791694][ T9386] veth0_vlan: entered allmulticast mode [ 241.834572][ T9386] veth0_vlan: left promiscuous mode [ 241.843652][ T9386] veth0_vlan: entered promiscuous mode [ 243.232633][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1304'. [ 243.324608][ T30] audit: type=1400 audit(1762673375.248:420): avc: denied { ioctl } for pid=9398 comm="syz.4.1306" path="socket:[22137]" dev="sockfs" ino=22137 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.655579][ T5184] Dev loop6: unable to read RDB block 7 [ 243.669981][ T5184] loop6: AHDI p1 p2 [ 243.680678][ T5184] loop6: partition table partially beyond EOD, truncated [ 243.695840][ T5184] loop6: p1 start 926365495 is beyond EOD, truncated [ 243.858708][ T9406] netlink: 'syz.4.1308': attribute type 4 has an invalid length. [ 243.866520][ T9406] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1308'. [ 244.067463][ T9410] pim6reg: entered allmulticast mode [ 244.077144][ T9409] pim6reg: left allmulticast mode [ 244.221280][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 244.536931][ T9424] binder: 9423:9424 ioctl c0306201 0 returned -14 [ 245.163841][ T9439] syzkaller0: entered promiscuous mode [ 245.177729][ T9439] syzkaller0: entered allmulticast mode [ 245.347183][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 245.489536][ T9457] 9p: Unknown Cache mode or invalid value f [ 245.639108][ T9464] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1334'. [ 246.505619][ T9479] process 'syz.3.1337' launched './file2' with NULL argv: empty string added [ 246.575482][ T30] audit: type=1400 audit(1762673378.438:421): avc: denied { execute_no_trans } for pid=9470 comm="syz.3.1337" path="/290/file2" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.814851][ T30] audit: type=1400 audit(1762673378.478:422): avc: denied { ioctl } for pid=9470 comm="syz.3.1337" path="socket:[22263]" dev="sockfs" ino=22263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.840714][ T30] audit: type=1400 audit(1762673378.698:423): avc: denied { map } for pid=9477 comm="syz.1.1341" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 246.867479][ T9486] syzkaller0: entered promiscuous mode [ 246.873831][ T30] audit: type=1400 audit(1762673378.698:424): avc: denied { execute } for pid=9477 comm="syz.1.1341" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 246.879369][ T9486] syzkaller0: entered allmulticast mode [ 247.050985][ T30] audit: type=1400 audit(1762673378.768:425): avc: denied { map } for pid=9477 comm="syz.1.1341" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.150455][ T30] audit: type=1400 audit(1762673378.768:426): avc: denied { execute } for pid=9477 comm="syz.1.1341" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.705980][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 250.018429][ T5184] Dev loop6: unable to read RDB block 7 [ 250.039239][ T5184] loop6: AHDI p1 p2 [ 250.050477][ T5184] loop6: partition table partially beyond EOD, truncated [ 250.058679][ T5184] loop6: p1 start 926365495 is beyond EOD, truncated [ 251.000229][ T9571] pim6reg: entered allmulticast mode [ 251.009230][ T9570] pim6reg: left allmulticast mode [ 251.090949][ T9578] syzkaller0: entered promiscuous mode [ 251.096546][ T9578] syzkaller0: entered allmulticast mode [ 252.053056][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1389'. [ 252.085656][ T30] audit: type=1400 audit(1762673384.008:427): avc: denied { append } for pid=9602 comm="syz.0.1390" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.167801][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 252.174212][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.620149][ T9609] Bluetooth: hci5: Frame reassembly failed (-90) [ 253.225326][ T30] audit: type=1400 audit(1762673385.148:428): avc: denied { bind } for pid=9617 comm="syz.4.1396" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.252409][ T30] audit: type=1400 audit(1762673385.168:429): avc: denied { name_bind } for pid=9617 comm="syz.4.1396" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 253.274518][ T30] audit: type=1400 audit(1762673385.168:430): avc: denied { node_bind } for pid=9617 comm="syz.4.1396" saddr=ff00::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 253.601027][ T9629] syzkaller0: entered promiscuous mode [ 253.636112][ T9629] syzkaller0: entered allmulticast mode [ 254.723306][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.293559][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.299899][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.364592][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 255.794805][ T30] audit: type=1400 audit(1762673387.708:431): avc: denied { create } for pid=9666 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.387346][ T9684] random: crng reseeded on system resumption [ 257.666930][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1429'. [ 257.804778][ T30] audit: type=1400 audit(1762673388.308:432): avc: denied { write } for pid=9679 comm="syz.4.1420" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 257.830541][ T30] audit: type=1400 audit(1762673388.328:433): avc: denied { ioctl } for pid=9679 comm="syz.4.1420" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.150138][ T9722] pim6reg: entered allmulticast mode [ 258.172482][ T9721] pim6reg: left allmulticast mode [ 258.261945][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 258.467954][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 258.585608][ T9740] team0: Port device team_slave_0 removed [ 258.653914][ T9746] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 258.680267][ T9746] CIFS mount error: No usable UNC path provided in device string! [ 258.680267][ T9746] [ 258.690533][ T9746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.412397][ T30] audit: type=1400 audit(1762673391.308:434): avc: denied { append } for pid=9750 comm="syz.1.1452" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.775786][ T9767] pim6reg: entered allmulticast mode [ 259.796774][ T9763] pim6reg: left allmulticast mode [ 259.848847][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'. [ 259.858684][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 260.042133][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 260.119167][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 260.132073][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 260.391593][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 260.398595][ T9801] pim6reg: entered allmulticast mode [ 260.416892][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 260.433519][ T9800] pim6reg: left allmulticast mode [ 260.804071][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1481'. [ 260.933625][ T9783] ceph: No mds server is up or the cluster is laggy [ 260.943598][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 260.955678][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 261.624751][ T9862] binder: 9860:9862 ioctl c0306201 0 returned -14 [ 262.757235][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1515'. [ 263.765289][ T9914] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 263.810429][ T9914] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 263.838440][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 263.877815][ T9914] syz_tun: left allmulticast mode [ 263.886413][ T9914] syz_tun: left promiscuous mode [ 263.892202][ T9914] bridge0: port 3(syz_tun) entered disabled state [ 263.916208][ T9914] bridge_slave_1: left allmulticast mode [ 263.932883][ T9914] bridge_slave_1: left promiscuous mode [ 264.131154][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.308813][ T30] audit: type=1400 audit(1762673396.208:435): avc: denied { listen } for pid=9922 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.434740][ T9914] bridge_slave_0: left allmulticast mode [ 264.567649][ T9914] bridge_slave_0: left promiscuous mode [ 264.601939][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1529'. [ 264.611682][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.656905][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1532'. [ 264.689104][ T9914] bond0: (slave bridge0): Releasing backup interface [ 265.294042][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 265.300136][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 265.314574][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 265.603841][ T869] libceph: connect (1)[c::]:6789 error -101 [ 265.611947][ T869] libceph: mon0 (1)[c::]:6789 connect error [ 266.095697][ T9967] ceph: No mds server is up or the cluster is laggy [ 266.370610][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 266.721592][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 266.729465][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 266.820161][ T30] audit: type=1400 audit(1762673398.728:436): avc: denied { bind } for pid=10024 comm="syz.3.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.861019][ T30] audit: type=1400 audit(1762673398.728:437): avc: denied { node_bind } for pid=10024 comm="syz.3.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 266.924718][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1569'. [ 266.942302][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 267.011273][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 267.019611][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 267.629500][T10014] ceph: No mds server is up or the cluster is laggy [ 267.891533][ T6526] libceph: connect (1)[c::]:6789 error -101 [ 267.897621][ T6526] libceph: mon0 (1)[c::]:6789 connect error [ 268.025877][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 268.255630][T10078] bridge0: entered allmulticast mode [ 268.266291][T10078] pim6reg: entered allmulticast mode [ 268.273850][T10078] pim6reg: left allmulticast mode [ 268.278966][T10078] bridge0: left allmulticast mode [ 268.505855][ T869] libceph: connect (1)[c::]:6789 error -101 [ 268.515018][ T869] libceph: mon0 (1)[c::]:6789 connect error [ 268.792239][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 268.798507][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 269.326653][ T6522] libceph: connect (1)[c::]:6789 error -101 [ 269.328259][T10091] ceph: No mds server is up or the cluster is laggy [ 269.359064][ T6522] libceph: mon0 (1)[c::]:6789 connect error [ 270.152376][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'. [ 270.295861][T10168] syzkaller0: entered promiscuous mode [ 270.301650][T10168] syzkaller0: entered allmulticast mode [ 272.618813][ T30] audit: type=1400 audit(1762673404.538:438): avc: denied { bind } for pid=10203 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.650684][ T30] audit: type=1400 audit(1762673404.538:439): avc: denied { accept } for pid=10203 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.686114][ T30] audit: type=1400 audit(1762673404.608:440): avc: denied { write } for pid=10203 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 272.826201][T10219] bridge0: entered allmulticast mode [ 272.842756][T10219] bridge0: left allmulticast mode [ 274.057659][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 275.047400][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 275.314961][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 275.406075][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 275.518519][T10288] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 275.541391][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.548995][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.589750][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.596976][T10288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.604463][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.604810][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 275.611601][T10288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.664063][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 275.668703][T10288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 275.802819][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1682'. [ 276.079328][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 276.091898][T10318] ------------[ cut here ]------------ [ 276.097649][T10318] WARNING: CPU: 1 PID: 10318 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 276.107734][T10318] Modules linked in: [ 276.112005][T10318] CPU: 1 UID: 0 PID: 10318 Comm: syz.0.1689 Not tainted syzkaller #0 PREEMPT(full) [ 276.121612][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.131781][T10318] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 276.137957][T10318] Code: 48 8d 35 00 00 00 00 e8 5e 2a c2 f6 e8 19 55 cc f6 e9 25 fe ff ff e8 6f 50 e6 f6 90 0f 0b 90 e9 17 fe ff ff e8 61 50 e6 f6 90 <0f> 0b 90 eb b1 e8 56 50 e6 f6 e8 71 20 cb f6 31 ff 89 c3 89 c6 e8 [ 276.157787][T10318] RSP: 0018:ffffc90003877208 EFLAGS: 00010283 [ 276.163916][T10318] RAX: 0000000000004f7f RBX: ffff88802940c000 RCX: ffffc90005621000 [ 276.172251][T10318] RDX: 0000000000080000 RSI: ffffffff8ad6a86f RDI: 0000000000000005 [ 276.180233][T10318] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 276.188291][T10318] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801cbe7360 [ 276.196323][T10318] R13: ffff888032e78e80 R14: ffff8880569d8000 R15: 0000000000000000 [ 276.204334][T10318] FS: 00007f2c6695e6c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 276.213325][T10318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.219918][T10318] CR2: 0000200000001080 CR3: 000000007370a000 CR4: 00000000003526f0 [ 276.227971][T10318] Call Trace: [ 276.231351][T10318] [ 276.234291][T10318] rate_control_rate_init_all_links+0x76/0x1e0 [ 276.240473][T10318] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 276.246802][T10318] sta_apply_parameters+0xca8/0x1930 [ 276.252167][T10318] ieee80211_add_station+0x3fa/0x6c0 [ 276.257481][T10318] nl80211_new_station+0x1502/0x1c90 [ 276.262856][T10318] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.268526][T10318] ? nl80211_pre_doit+0x1b0/0xb10 [ 276.273818][T10318] genl_family_rcv_msg_doit+0x209/0x2f0 [ 276.279385][T10318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.285541][T10318] ? bpf_lsm_capable+0x9/0x10 [ 276.290227][T10318] ? security_capable+0x7e/0x260 [ 276.295220][T10318] ? ns_capable+0xd7/0x110 [ 276.299643][T10318] genl_rcv_msg+0x55c/0x800 [ 276.304247][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.309281][T10318] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.314713][T10318] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.320351][T10318] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.326825][T10318] netlink_rcv_skb+0x158/0x420 [ 276.326880][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.326900][T10318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.342103][T10318] ? netlink_deliver_tap+0x1ae/0xd30 [ 276.347402][T10318] genl_rcv+0x28/0x40 [ 276.351423][T10318] netlink_unicast+0x5aa/0x870 [ 276.356388][T10318] ? __pfx_netlink_unicast+0x10/0x10 [ 276.361744][T10318] netlink_sendmsg+0x8c8/0xdd0 [ 276.366528][T10318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.372031][T10318] ____sys_sendmsg+0xa98/0xc70 [ 276.377007][T10318] ? copy_msghdr_from_user+0x10a/0x160 [ 276.382547][T10318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.387832][T10318] ? preempt_schedule_thunk+0x16/0x30 [ 276.393416][T10318] ? try_to_wake_up+0xa67/0x1870 [ 276.398358][T10318] ___sys_sendmsg+0x134/0x1d0 [ 276.403127][T10318] ? find_held_lock+0x2b/0x80 [ 276.407810][T10318] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.413039][T10318] ? __lock_acquire+0x622/0x1c90 [ 276.418023][T10318] __sys_sendmsg+0x16d/0x220 [ 276.422676][T10318] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.427788][T10318] ? __x64_sys_futex+0x1e0/0x4c0 [ 276.432796][T10318] do_syscall_64+0xcd/0xfa0 [ 276.437302][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.443258][T10318] RIP: 0033:0x7f2c65b8f6c9 [ 276.447667][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.467335][T10318] RSP: 002b:00007f2c6695e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.476127][T10318] RAX: ffffffffffffffda RBX: 00007f2c65de5fa0 RCX: 00007f2c65b8f6c9 [ 276.484260][T10318] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 276.492296][T10318] RBP: 00007f2c65c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 276.500267][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.508294][T10318] R13: 00007f2c65de6038 R14: 00007f2c65de5fa0 R15: 00007ffe4ae5fbc8 [ 276.516321][T10318] [ 276.519337][T10318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.526618][T10318] CPU: 1 UID: 0 PID: 10318 Comm: syz.0.1689 Not tainted syzkaller #0 PREEMPT(full) [ 276.535988][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.546044][T10318] Call Trace: [ 276.549331][T10318] [ 276.552256][T10318] dump_stack_lvl+0x3d/0x1f0 [ 276.556859][T10318] vpanic+0x640/0x6f0 [ 276.560855][T10318] ? rate_control_rate_init+0x5c0/0x720 [ 276.566399][T10318] panic+0xca/0xd0 [ 276.570151][T10318] ? __pfx_panic+0x10/0x10 [ 276.574585][T10318] check_panic_on_warn+0xab/0xb0 [ 276.579533][T10318] __warn+0xf6/0x3c0 [ 276.583424][T10318] ? rate_control_rate_init+0x5c0/0x720 [ 276.588971][T10318] report_bug+0x3c3/0x580 [ 276.593312][T10318] ? rate_control_rate_init+0x5c0/0x720 [ 276.598858][T10318] handle_bug+0x184/0x210 [ 276.603194][T10318] exc_invalid_op+0x17/0x50 [ 276.607704][T10318] asm_exc_invalid_op+0x1a/0x20 [ 276.612552][T10318] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 276.618703][T10318] Code: 48 8d 35 00 00 00 00 e8 5e 2a c2 f6 e8 19 55 cc f6 e9 25 fe ff ff e8 6f 50 e6 f6 90 0f 0b 90 e9 17 fe ff ff e8 61 50 e6 f6 90 <0f> 0b 90 eb b1 e8 56 50 e6 f6 e8 71 20 cb f6 31 ff 89 c3 89 c6 e8 [ 276.638309][T10318] RSP: 0018:ffffc90003877208 EFLAGS: 00010283 [ 276.644375][T10318] RAX: 0000000000004f7f RBX: ffff88802940c000 RCX: ffffc90005621000 [ 276.652342][T10318] RDX: 0000000000080000 RSI: ffffffff8ad6a86f RDI: 0000000000000005 [ 276.660308][T10318] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 276.668278][T10318] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801cbe7360 [ 276.676244][T10318] R13: ffff888032e78e80 R14: ffff8880569d8000 R15: 0000000000000000 [ 276.684238][T10318] ? rate_control_rate_init+0x5bf/0x720 [ 276.689790][T10318] ? rate_control_rate_init+0x5bf/0x720 [ 276.695342][T10318] rate_control_rate_init_all_links+0x76/0x1e0 [ 276.701502][T10318] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 276.707753][T10318] sta_apply_parameters+0xca8/0x1930 [ 276.713048][T10318] ieee80211_add_station+0x3fa/0x6c0 [ 276.718342][T10318] nl80211_new_station+0x1502/0x1c90 [ 276.723640][T10318] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.729319][T10318] ? nl80211_pre_doit+0x1b0/0xb10 [ 276.734358][T10318] genl_family_rcv_msg_doit+0x209/0x2f0 [ 276.739908][T10318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.746014][T10318] ? bpf_lsm_capable+0x9/0x10 [ 276.750695][T10318] ? security_capable+0x7e/0x260 [ 276.755661][T10318] ? ns_capable+0xd7/0x110 [ 276.760084][T10318] genl_rcv_msg+0x55c/0x800 [ 276.764589][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.769668][T10318] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.775048][T10318] ? __pfx_nl80211_new_station+0x10/0x10 [ 276.780687][T10318] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.786151][T10318] netlink_rcv_skb+0x158/0x420 [ 276.790909][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.795915][T10318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.801193][T10318] ? netlink_deliver_tap+0x1ae/0xd30 [ 276.806466][T10318] genl_rcv+0x28/0x40 [ 276.810435][T10318] netlink_unicast+0x5aa/0x870 [ 276.815186][T10318] ? __pfx_netlink_unicast+0x10/0x10 [ 276.820476][T10318] netlink_sendmsg+0x8c8/0xdd0 [ 276.825234][T10318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.830513][T10318] ____sys_sendmsg+0xa98/0xc70 [ 276.835259][T10318] ? copy_msghdr_from_user+0x10a/0x160 [ 276.840769][T10318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.846037][T10318] ? preempt_schedule_thunk+0x16/0x30 [ 276.851410][T10318] ? try_to_wake_up+0xa67/0x1870 [ 276.856338][T10318] ___sys_sendmsg+0x134/0x1d0 [ 276.861083][T10318] ? find_held_lock+0x2b/0x80 [ 276.865748][T10318] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.870932][T10318] ? __lock_acquire+0x622/0x1c90 [ 276.875891][T10318] __sys_sendmsg+0x16d/0x220 [ 276.880474][T10318] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.885570][T10318] ? __x64_sys_futex+0x1e0/0x4c0 [ 276.890501][T10318] do_syscall_64+0xcd/0xfa0 [ 276.894987][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.900861][T10318] RIP: 0033:0x7f2c65b8f6c9 [ 276.905256][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.924854][T10318] RSP: 002b:00007f2c6695e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.933247][T10318] RAX: ffffffffffffffda RBX: 00007f2c65de5fa0 RCX: 00007f2c65b8f6c9 [ 276.941200][T10318] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 276.949160][T10318] RBP: 00007f2c65c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 276.957114][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.965067][T10318] R13: 00007f2c65de6038 R14: 00007f2c65de5fa0 R15: 00007ffe4ae5fbc8 [ 276.973044][T10318] [ 276.976152][T10318] Kernel Offset: disabled [ 276.980448][T10318] Rebooting in 86400 seconds..