last executing test programs: 36.338700329s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x800, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0x20) 36.041221842s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) 35.050165265s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/tracing/instances/B/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(0xffffffffffffffff) 34.443011726s ago: executing program 0 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x40000) 19.341123139s ago: executing program 32 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x40000) 8.367135932s ago: executing program 5 (id=148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x9732) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x5, 0x5}]}) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 8.197464849s ago: executing program 5 (id=150): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000018, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x96}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='n\x00', 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f00006d8000/0x2000)=nil, r10, 0xd, 0x4000010, r9, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/page_idle/bitmap\x00', 0x2, 0x0) write(r11, &(0x7f0000000300)="ffffffffffffffffffffffffffffffff", 0x10) 7.247500526s ago: executing program 2 (id=154): r0 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000000)={@multicast2}}) pread64(0xffffffffffffffff, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) syz_clone(0x74002580, &(0x7f0000000040), 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="7edede87692c7eda0ce83ef7b9ee5b20b39444a7227e7353cd150d1a8b0e524768a05504d6") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet(0x2, 0x1, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r4, 0x1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x1, "d9298561bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdbf3bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000040)={0x2, 0x6d85, 0x7}) listen(r8, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffa8) r9 = getpid() fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x7, 0xa81, r9}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x1406, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14) 5.485906987s ago: executing program 5 (id=160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f0000000000)={0xe, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) 5.255334889s ago: executing program 2 (id=163): listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x20000000, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x42, 0x0) syz_io_uring_setup(0x744e, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x40000051}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.026496742s ago: executing program 2 (id=164): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(0x0, 0x6000, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) 4.258988282s ago: executing program 1 (id=167): socket$inet6(0xa, 0x1, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) 4.151583553s ago: executing program 1 (id=168): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.496548195s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 2.676518687s ago: executing program 5 (id=174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x6, 0x0, 0x8, 0x7fff7ffc}, {0x1002, 0xfd, 0x4, 0xfffffc91}, {0x7, 0x15, 0xf, 0x6}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) eventfd2(0x74a6, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) 2.515391222s ago: executing program 1 (id=175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.360534609s ago: executing program 1 (id=176): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000000)={@multicast2}}) pread64(0xffffffffffffffff, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) syz_clone(0x74002580, &(0x7f0000000040), 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="7edede87692c7eda0ce83ef7b9ee5b20b39444a7227e7353cd150d1a8b0e524768a05504d6") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet(0x2, 0x1, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r5, 0x1) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x1, "d9298561bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdbf3bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x2, 0x6d85, 0x7}) listen(r9, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18bba4cd003f0000000000000900000018110000", @ANYRES32=r1, @ANYRES16=r9], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffa8) r10 = getpid() fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x7, 0xa81, r10}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x1406, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14) 2.225847324s ago: executing program 4 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.183112779s ago: executing program 3 (id=179): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7f) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r1, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x7f, 0x2000) syz_usb_disconnect(r0) 1.921058499s ago: executing program 2 (id=180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 1.919278979s ago: executing program 4 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="10", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.755575999s ago: executing program 2 (id=182): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x2}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) add_key$user(0x0, 0x0, 0x0, 0x0, r2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x50172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x92) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) 1.727611764s ago: executing program 4 (id=183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='never', 0x5) 1.71983775s ago: executing program 5 (id=184): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="403698"], 0x0, 0x0}) 1.613280233s ago: executing program 4 (id=185): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x47, 0x3c5b, 0x80000001, 0x26, 0xd, 0x3fdf, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x21c, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f00000007c0)=""/136, 0x88) 1.429538344s ago: executing program 1 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 742.200949ms ago: executing program 3 (id=187): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000180), 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0xdd, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x401, 0x3, 0xe, 0x0, 0x1, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x6, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) 723.47748ms ago: executing program 4 (id=188): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 610.828011ms ago: executing program 3 (id=189): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 466.690303ms ago: executing program 4 (id=190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) 300.252736ms ago: executing program 2 (id=191): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r4, 0x0, r5, 0x0, 0x6, 0xc) landlock_restrict_self(r1, 0x1) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 57.78302ms ago: executing program 3 (id=192): socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 36.757106ms ago: executing program 3 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)={0x8}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x20002040) poll(&(0x7f0000000400)=[{r2, 0x200}, {r0, 0x5404}], 0x2, 0x7fff) 2.390808ms ago: executing program 5 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 0s ago: executing program 3 (id=195): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044050}, 0x8010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 65.339717][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 65.339732][ T30] audit: type=1400 audit(1785916838.648:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.369577][ T30] audit: type=1400 audit(1785916838.678:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.372653][ T5596] cgroup: Unknown subsys name 'net' [ 65.400216][ T30] audit: type=1400 audit(1785916838.708:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.540874][ T5596] cgroup: Unknown subsys name 'cpuset' [ 65.548790][ T5596] cgroup: Unknown subsys name 'rlimit' [ 65.676752][ T30] audit: type=1400 audit(1785916838.978:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.710221][ T30] audit: type=1400 audit(1785916838.978:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.732792][ T30] audit: type=1400 audit(1785916838.978:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.758424][ T30] audit: type=1400 audit(1785916838.978:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.785049][ T30] audit: type=1400 audit(1785916838.998:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.802898][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.810259][ T30] audit: type=1400 audit(1785916838.998:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.842038][ T30] audit: type=1400 audit(1785916839.128:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.807703][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.702603][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.710918][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.719326][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.727530][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.730155][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.735793][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.747719][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.757163][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.757713][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.765906][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.772674][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.779148][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.785908][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.793290][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.800289][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.808515][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.814902][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.820552][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.829110][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.841678][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.849360][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.863756][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.872657][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.885806][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.893202][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.149043][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.156662][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.163971][ T5614] bridge_slave_0: entered allmulticast mode [ 70.170901][ T5614] bridge_slave_0: entered promiscuous mode [ 70.178190][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.185243][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.192422][ T5615] bridge_slave_0: entered allmulticast mode [ 70.199357][ T5615] bridge_slave_0: entered promiscuous mode [ 70.209832][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.216910][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.224315][ T5609] bridge_slave_0: entered allmulticast mode [ 70.231054][ T5609] bridge_slave_0: entered promiscuous mode [ 70.248609][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.255726][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.262857][ T5614] bridge_slave_1: entered allmulticast mode [ 70.269574][ T5614] bridge_slave_1: entered promiscuous mode [ 70.276201][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.283362][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.290700][ T5615] bridge_slave_1: entered allmulticast mode [ 70.297309][ T5615] bridge_slave_1: entered promiscuous mode [ 70.307536][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.314759][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.322178][ T5609] bridge_slave_1: entered allmulticast mode [ 70.328941][ T5609] bridge_slave_1: entered promiscuous mode [ 70.369176][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.376330][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.383681][ T5608] bridge_slave_0: entered allmulticast mode [ 70.390355][ T5608] bridge_slave_0: entered promiscuous mode [ 70.418002][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.427624][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.435554][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.442767][ T5608] bridge_slave_1: entered allmulticast mode [ 70.449749][ T5608] bridge_slave_1: entered promiscuous mode [ 70.458270][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.469174][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.486173][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.503542][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.514417][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.524146][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.531512][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.538660][ T5622] bridge_slave_0: entered allmulticast mode [ 70.545289][ T5622] bridge_slave_0: entered promiscuous mode [ 70.576599][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.583814][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.591508][ T5622] bridge_slave_1: entered allmulticast mode [ 70.598231][ T5622] bridge_slave_1: entered promiscuous mode [ 70.612427][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.641529][ T5609] team0: Port device team_slave_0 added [ 70.648722][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.659835][ T5614] team0: Port device team_slave_0 added [ 70.666746][ T5615] team0: Port device team_slave_0 added [ 70.680325][ T5609] team0: Port device team_slave_1 added [ 70.694348][ T5614] team0: Port device team_slave_1 added [ 70.701471][ T5615] team0: Port device team_slave_1 added [ 70.709066][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.744615][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.761924][ T5608] team0: Port device team_slave_0 added [ 70.792267][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.799366][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.825463][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.838075][ T5608] team0: Port device team_slave_1 added [ 70.844525][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.851498][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.877429][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.889480][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.896423][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.924466][ T5618] Bluetooth: hci2: command tx timeout [ 70.924656][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.930392][ T5616] Bluetooth: hci4: command tx timeout [ 70.937589][ T5619] Bluetooth: hci0: command tx timeout [ 70.942693][ T5618] Bluetooth: hci3: command tx timeout [ 70.947924][ T5619] Bluetooth: hci1: command tx timeout [ 70.954025][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.960441][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.970366][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.982690][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.008725][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.026895][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.034072][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.060043][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.092961][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.100040][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.126026][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.138069][ T5622] team0: Port device team_slave_0 added [ 71.145771][ T5622] team0: Port device team_slave_1 added [ 71.159482][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.166475][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.192374][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.227664][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.234713][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.260770][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.282940][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.289955][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.315940][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.330735][ T5609] hsr_slave_0: entered promiscuous mode [ 71.336837][ T5609] hsr_slave_1: entered promiscuous mode [ 71.357450][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.364543][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.390573][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.422368][ T5614] hsr_slave_0: entered promiscuous mode [ 71.428569][ T5614] hsr_slave_1: entered promiscuous mode [ 71.434538][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.440429][ T5614] Cannot create hsr debugfs directory [ 71.467015][ T5608] hsr_slave_0: entered promiscuous mode [ 71.473284][ T5608] hsr_slave_1: entered promiscuous mode [ 71.479408][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 71.485527][ T5608] Cannot create hsr debugfs directory [ 71.513839][ T5615] hsr_slave_0: entered promiscuous mode [ 71.519893][ T5615] hsr_slave_1: entered promiscuous mode [ 71.525823][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 71.531681][ T5615] Cannot create hsr debugfs directory [ 71.596727][ T5622] hsr_slave_0: entered promiscuous mode [ 71.602790][ T5622] hsr_slave_1: entered promiscuous mode [ 71.609154][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 71.614859][ T5622] Cannot create hsr debugfs directory [ 71.909723][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.921034][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.929472][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.938474][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.946523][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.955485][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.964008][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.973847][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.025874][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.036496][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.046271][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.055266][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.070908][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.080185][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.087827][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.096895][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.153820][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.162844][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.171201][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.180687][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.197246][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.205637][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.221022][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.230468][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.312072][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.321219][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.329459][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.337823][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.346048][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.354727][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.362597][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.371859][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.387615][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.441162][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.472931][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.482194][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.495910][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.503461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.513870][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.522952][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.530777][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.540395][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.557460][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.566390][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.579926][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.587008][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.597225][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.639488][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.665704][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.672799][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.682407][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.689490][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.704820][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.744629][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.757336][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.770039][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.777115][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.829808][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.839806][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.846939][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.865288][ T5608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.889392][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.896507][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.943635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.950788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.992044][ T4928] Bluetooth: hci4: command tx timeout [ 72.992068][ T5616] Bluetooth: hci2: command tx timeout [ 72.997456][ T4928] Bluetooth: hci1: command tx timeout [ 72.997527][ T5619] Bluetooth: hci3: command tx timeout [ 73.018593][ T5618] Bluetooth: hci0: command tx timeout [ 73.086721][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.174399][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.227423][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.234587][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.273819][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.281026][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.519361][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.687037][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.710702][ T5609] veth0_vlan: entered promiscuous mode [ 73.758685][ T5609] veth1_vlan: entered promiscuous mode [ 73.860103][ T5609] veth0_macvtap: entered promiscuous mode [ 73.882641][ T5609] veth1_macvtap: entered promiscuous mode [ 73.926269][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.954728][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.984505][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.085061][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.123925][ T5614] veth0_vlan: entered promiscuous mode [ 74.167029][ T5614] veth1_vlan: entered promiscuous mode [ 74.177755][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.228033][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.239630][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.284627][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.295602][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299111][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.330967][ T5614] veth0_macvtap: entered promiscuous mode [ 74.337503][ T5608] veth0_vlan: entered promiscuous mode [ 74.347659][ T5622] veth0_vlan: entered promiscuous mode [ 74.351736][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 74.351749][ T30] audit: type=1400 audit(1785916847.658:152): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.AH4Qqn/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.360347][ T5622] veth1_vlan: entered promiscuous mode [ 74.396305][ T5615] veth0_vlan: entered promiscuous mode [ 74.410027][ T5615] veth1_vlan: entered promiscuous mode [ 74.417073][ T30] audit: type=1400 audit(1785916847.698:153): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.442294][ T5608] veth1_vlan: entered promiscuous mode [ 74.446509][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.456011][ T5614] veth1_macvtap: entered promiscuous mode [ 74.468276][ T30] audit: type=1400 audit(1785916847.698:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.AH4Qqn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.486902][ T5615] veth0_macvtap: entered promiscuous mode [ 74.496065][ T30] audit: type=1400 audit(1785916847.698:155): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.520217][ T5608] veth0_macvtap: entered promiscuous mode [ 74.527221][ T30] audit: type=1400 audit(1785916847.698:156): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.AH4Qqn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.555159][ T30] audit: type=1400 audit(1785916847.708:157): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.AH4Qqn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.567244][ T5615] veth1_macvtap: entered promiscuous mode [ 74.583845][ T30] audit: type=1400 audit(1785916847.708:158): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.617458][ T30] audit: type=1400 audit(1785916847.708:159): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.628580][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.642708][ T30] audit: type=1400 audit(1785916847.708:160): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=7636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.670345][ T30] audit: type=1400 audit(1785916847.718:161): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.701492][ T634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.723954][ T5608] veth1_macvtap: entered promiscuous mode [ 74.734819][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.751755][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.760900][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.774335][ T5802] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 74.793530][ T5622] veth0_macvtap: entered promiscuous mode [ 74.819527][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.835976][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.847975][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.857475][ T5622] veth1_macvtap: entered promiscuous mode [ 74.912508][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.943602][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.968681][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.991014][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.000912][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.008503][ T634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.016351][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.018897][ T634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.049719][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069025][ T5618] Bluetooth: hci0: command tx timeout [ 75.069219][ T5620] Bluetooth: hci3: command tx timeout [ 75.074439][ T5618] Bluetooth: hci1: command tx timeout [ 75.080005][ T5619] Bluetooth: hci4: command tx timeout [ 75.085538][ T5616] Bluetooth: hci2: command tx timeout [ 75.120696][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143348][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.158830][ T5710] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.160748][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.174509][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.188703][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.210698][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.220423][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.239612][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.266339][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.278996][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.319294][ T1174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.337298][ T1174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.367092][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.380660][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.414118][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.423571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.483403][ T634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512775][ T634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.537946][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.549295][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 75.564258][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.572950][ T634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.577534][ T5710] usb 2-1: can't read configurations, error -71 [ 75.599067][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.825408][ T5814] 0: reclassify loop, rule prio 0, protocol 03 [ 75.833130][ T1174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.846019][ T1174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850649][ T5819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5819 comm=syz.2.3 [ 75.875529][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.906210][ T5819] 8021q: VLANs not supported on gre0 [ 75.918619][ T634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927756][ T634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.942107][ T634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121262][ T5824] gadgetfs: bound to dummy_udc driver [ 76.240528][ T5827] nbd1: detected capacity change from 0 to 8 [ 76.253348][ T5829] block nbd1: shutting down sockets [ 76.265658][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.275400][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.294800][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.305306][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.317223][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.343710][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.357666][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.368866][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.379334][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.390502][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.402430][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.413272][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.423329][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.435022][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.444469][ T1714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.455337][ T1714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.493662][ T5602] ldm_validate_partition_table(): Disk read failed. [ 76.539126][ T5834] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.549039][ T5834] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.558010][ T5834] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.569421][ T5834] Buffer I/O error on dev nbd1, logical block 0, async page read [ 76.579741][ T5602] Dev nbd1: unable to read RDB block 0 [ 76.592280][ T5602] nbd1: unable to read partition table [ 76.598068][ T5602] nbd1: partition table beyond EOD, truncated [ 76.612962][ T5602] ldm_validate_partition_table(): Disk read failed. [ 76.631679][ T5602] Dev nbd1: unable to read RDB block 0 [ 76.633083][ T5811] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.637452][ T5602] nbd1: unable to read partition table [ 76.651749][ T5602] nbd1: partition table beyond EOD, truncated [ 76.658724][ C0] gadgetfs: connected [ 76.664120][ T5821] gadgetfs: suspended from state 3 [ 76.674841][ T5821] gadgetfs: disconnected [ 76.808807][ T5710] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.979339][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 77.057411][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.085698][ T5710] usb 2-1: no configurations [ 77.096818][ T5710] usb 2-1: can't read configurations, error -22 [ 77.112406][ T5710] usb usb2-port1: attempt power cycle [ 77.130138][ T5857] gadgetfs: bound to dummy_udc driver [ 77.151423][ T5854] tipc: Started in network mode [ 77.157157][ T5616] Bluetooth: hci4: command tx timeout [ 77.163354][ T4928] Bluetooth: hci0: command tx timeout [ 77.163370][ T5619] Bluetooth: hci2: command tx timeout [ 77.169742][ T4928] Bluetooth: hci1: command tx timeout [ 77.178173][ T5854] tipc: Node identity 1000001, cluster identity 4369 [ 77.180294][ T5618] Bluetooth: hci3: command tx timeout [ 77.205121][ T5854] tipc: Node number set to 16777217 [ 77.221511][ T5854] tipc: Cannot configure node identity twice [ 77.262528][ T5854] tipc: New replicast peer: 127.0.0.1 [ 77.271136][ T5854] tipc: Enabled bearer , priority 10 [ 77.528448][ C0] gadgetfs: connected [ 77.534566][ T5811] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 77.539698][ T5855] gadgetfs: suspended from state 3 [ 77.553962][ T5811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 77.557296][ T5855] gadgetfs: disconnected [ 77.575642][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.664261][ T5811] usb 1-1: can't set config #1, error -71 [ 77.696116][ T5811] usb 1-1: USB disconnect, device number 2 [ 77.820578][ T5868] vlan2: entered allmulticast mode [ 77.832087][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.849807][ T5868] bond0: entered allmulticast mode [ 77.872421][ T5868] bond_slave_0: entered allmulticast mode [ 77.889289][ T5868] bond_slave_1: entered allmulticast mode [ 77.917639][ T5868] bridge0: port 3(vlan2) entered blocking state [ 77.932989][ T5868] bridge0: port 3(vlan2) entered disabled state [ 77.958157][ T5868] vlan2: entered promiscuous mode [ 77.977724][ T5868] bond0: entered promiscuous mode [ 77.991246][ T5868] bond_slave_0: entered promiscuous mode [ 78.007284][ T5868] bond_slave_1: entered promiscuous mode [ 78.026849][ T5868] bridge0: port 3(vlan2) entered blocking state [ 78.034550][ T5868] bridge0: port 3(vlan2) entered forwarding state [ 78.093983][ T5873] bridge_slave_0: left allmulticast mode [ 78.114349][ T5873] bridge_slave_0: left promiscuous mode [ 78.124957][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.151436][ T5873] bridge_slave_1: left allmulticast mode [ 78.167316][ T5873] bridge_slave_1: left promiscuous mode [ 78.177046][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.209192][ T5873] bond0: (slave bond_slave_0): Releasing backup interface [ 78.238438][ T5873] bond_slave_0: left promiscuous mode [ 78.269970][ T5873] bond_slave_0: left allmulticast mode [ 78.295538][ T5873] bond0: (slave bond_slave_1): Releasing backup interface [ 78.323510][ T5873] bond_slave_1: left promiscuous mode [ 78.329262][ T5873] bond_slave_1: left allmulticast mode [ 78.347097][ T5873] team0: Port device team_slave_0 removed [ 78.379741][ T5873] team0: Port device team_slave_1 removed [ 78.396391][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.411461][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.422869][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.431865][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.440905][ T5873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.475751][ T148] bridge0: port 3(vlan2) entered disabled state [ 78.665798][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a7800: rx timeout, send abort [ 78.685493][ T5892] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 79.165981][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a7400: rx timeout, send abort [ 79.174811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a7800: abort rx timeout. Force session deactivation [ 79.665074][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 79.665089][ T30] audit: type=1400 audit(1785916852.968:240): avc: denied { create } for pid=5893 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.674247][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1a7400: abort rx timeout. Force session deactivation [ 79.709687][ T30] audit: type=1400 audit(1785916853.008:241): avc: denied { view } for pid=5893 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.868804][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.875425][ T5616] Bluetooth: hci5: command 0x1003 tx timeout [ 79.911533][ T5898] nbd4: detected capacity change from 0 to 8 [ 79.946856][ T5902] block nbd4: shutting down sockets [ 80.001134][ T5601] ldm_validate_partition_table(): Disk read failed. [ 80.019586][ T5601] Dev nbd4: unable to read RDB block 0 [ 80.036983][ T5601] nbd4: unable to read partition table [ 80.047030][ T5601] nbd4: partition table beyond EOD, truncated [ 80.067505][ T5601] ldm_validate_partition_table(): Disk read failed. [ 80.078525][ T5601] Dev nbd4: unable to read RDB block 0 [ 80.084330][ T5601] nbd4: unable to read partition table [ 80.090000][ T187] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.098000][ T5601] nbd4: partition table beyond EOD, truncated [ 80.168251][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.219938][ T5723] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.254559][ T30] audit: type=1400 audit(1785916853.558:242): avc: denied { map_read map_write } for pid=5908 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.294364][ T187] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 80.306150][ T30] audit: type=1400 audit(1785916853.588:243): avc: denied { prog_run } for pid=5908 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.328007][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.336108][ T187] usb 4-1: Product: syz [ 80.340557][ T187] usb 4-1: Manufacturer: syz [ 80.345327][ T187] usb 4-1: SerialNumber: syz [ 80.352356][ T30] audit: type=1400 audit(1785916853.588:244): avc: denied { create } for pid=5908 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.376359][ T30] audit: type=1400 audit(1785916853.598:245): avc: denied { bind } for pid=5908 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.401224][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.416282][ T29] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 80.430094][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.439295][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 80.502276][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.522237][ T5723] usb 5-1: no configurations [ 80.525271][ T30] audit: type=1400 audit(1785916853.818:246): avc: denied { map } for pid=5910 comm="syz.1.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.554398][ T29] as10x_usb: device has been detected [ 80.560551][ T5723] usb 5-1: can't read configurations, error -22 [ 80.567738][ T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 80.589857][ T30] audit: type=1400 audit(1785916853.828:247): avc: denied { read write } for pid=5910 comm="syz.1.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.625762][ T29] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 80.762844][ T30] audit: type=1400 audit(1785916854.068:248): avc: denied { firmware_load } for pid=29 comm="kworker/1:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.792006][ T29] as10x_usb: error during firmware upload part1 [ 80.799779][ T29] Registered device Abilis Systems DVB-Titan [ 80.895997][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 80.926124][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 80.941298][ T30] audit: type=1400 audit(1785916854.248:249): avc: denied { create } for pid=5914 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.719497][ T5926] netlink: 256 bytes leftover after parsing attributes in process `syz.4.41'. [ 81.731024][ T5926] unsupported nlmsg_type 40 [ 82.048188][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.155127][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 82.198415][ T5723] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.211854][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 82.224330][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.358718][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 82.369896][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 82.373930][ T5723] usb 2-1: config 64 interface 0 has no altsetting 0 [ 82.382999][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 82.405030][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 82.411818][ T5723] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 82.419280][ T5710] usb 3-1: USB disconnect, device number 2 [ 82.431283][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.434814][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 82.444322][ T5723] usb 2-1: Product: syz [ 82.452633][ T5723] usb 2-1: Manufacturer: syz [ 82.458912][ T5723] usb 2-1: SerialNumber: syz [ 82.473047][ T187] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 82.492559][ T5710] Unregistered device Abilis Systems DVB-Titan [ 82.502716][ T5710] as10x_usb: device has been disconnected [ 82.521471][ T187] usb 4-1: USB disconnect, device number 2 [ 82.523962][ T5723] snd_usb_toneport 2-1:64.0: Line 6 TonePort UX2 found [ 82.710802][ T5723] snd_usb_toneport 2-1:64.0: Line 6 TonePort UX2 now disconnected [ 82.721104][ T5723] snd_usb_toneport 2-1:64.0: probe with driver snd_usb_toneport failed with error -22 [ 82.967916][ T5710] usb 2-1: USB disconnect, device number 5 [ 83.087289][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 83.110479][ T5936] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 83.296762][ T10] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 2 [ 83.596767][ T5943] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 83.672003][ T10] gud 5-1:1.0: [drm] Cannot find any crtc or sizes [ 84.069346][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.087735][ T5710] gud 5-1:1.0: [drm] Cannot find any crtc or sizes [ 84.231105][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 84.245584][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.265976][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.288141][ T29] usb 5-1: USB disconnect, device number 4 [ 84.297351][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.317309][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.329117][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.387395][ T5723] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.411018][ T5723] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.428251][ T5723] usb 2-1: Manufacturer: syz [ 84.447489][ T5723] usb 2-1: config 0 descriptor?? [ 84.749467][ T5723] rc_core: IR keymap rc-hauppauge not found [ 84.761492][ T5723] Registered IR keymap rc-empty [ 84.778437][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.809218][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.842226][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 84.896811][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 84.942269][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.963646][ T5962] binder: 5960:5962 unknown command 0 [ 84.978248][ T5962] binder: 5960:5962 ioctl c0306201 200000004a40 returned -22 [ 84.990567][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.029276][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.058230][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.088586][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.128217][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.158749][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 85.158765][ T30] audit: type=1400 audit(1785916858.458:267): avc: denied { create } for pid=5963 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.168172][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.192574][ T30] audit: type=1400 audit(1785916858.458:268): avc: denied { bind } for pid=5963 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.231127][ T30] audit: type=1400 audit(1785916858.458:269): avc: denied { listen } for pid=5963 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.254089][ T30] audit: type=1400 audit(1785916858.468:270): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.258295][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.284187][ T30] audit: type=1400 audit(1785916858.468:271): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.311031][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.336964][ T30] audit: type=1400 audit(1785916858.468:272): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.370783][ T5723] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.398172][ T30] audit: type=1400 audit(1785916858.468:273): avc: denied { read } for pid=5273 comm="dhcpcd" name="n30" dev="tmpfs" ino=2160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.454111][ T5723] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 85.473740][ T30] audit: type=1400 audit(1785916858.468:274): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.505122][ T5723] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 85.549304][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 85.562568][ T5723] usb 2-1: USB disconnect, device number 6 [ 85.577104][ T30] audit: type=1400 audit(1785916858.468:275): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.663364][ T30] audit: type=1400 audit(1785916858.958:276): avc: denied { read } for pid=5975 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.989248][ T5986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.148499][ T5710] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.285352][ T805] cfg80211: failed to load regulatory.db [ 86.318736][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 86.339695][ T5710] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 86.358314][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.388021][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 86.412405][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.436920][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.471763][ T5710] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 86.491125][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.513965][ T5710] usb 5-1: config 0 descriptor?? [ 86.533068][ T5983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.562730][ T5710] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 86.809405][ T29] usb 5-1: USB disconnect, device number 5 [ 87.315343][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 87.394818][ T6031] Cannot find add_set index 0 as target [ 87.668426][ T5710] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.808284][ T5710] usb 4-1: device descriptor read/64, error -71 [ 88.058325][ T5710] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.197348][ T5710] usb 4-1: device descriptor read/64, error -71 [ 88.319077][ T5710] usb usb4-port1: attempt power cycle [ 88.669917][ T5710] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.734326][ T5710] usb 4-1: device descriptor read/8, error -71 [ 88.989886][ T5710] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.018661][ T5710] usb 4-1: device descriptor read/8, error -71 [ 89.147848][ T5710] usb usb4-port1: unable to enumerate USB device [ 89.528695][ T5710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.698183][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 89.721909][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.755872][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.777167][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.807526][ T5710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.821485][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.856937][ T5710] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.876891][ T5710] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.895213][ T5710] usb 3-1: Manufacturer: syz [ 89.907283][ T5710] usb 3-1: config 0 descriptor?? [ 90.212478][ T6147] binder: 6145:6147 ioctl c0306201 200000000180 returned -14 [ 90.259137][ T5710] rc_core: IR keymap rc-hauppauge not found [ 90.288695][ T5710] Registered IR keymap rc-empty [ 90.308547][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.348690][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.406310][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 90.444714][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 90.491310][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 90.491326][ T30] audit: type=1400 audit(1785916863.798:337): avc: denied { write } for pid=6153 comm="syz.3.88" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.529894][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.567797][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.601696][ T30] audit: type=1400 audit(1785916863.898:338): avc: denied { write } for pid=6141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.624898][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.658641][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.698469][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.735562][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.778590][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.794206][ T30] audit: type=1400 audit(1785916864.088:339): avc: denied { unmount } for pid=6163 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.839580][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.868831][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.881648][ T30] audit: type=1400 audit(1785916864.158:340): avc: denied { write } for pid=6164 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.931265][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 90.958506][ T30] audit: type=1400 audit(1785916864.268:341): avc: denied { mounton } for pid=6170 comm="syz.4.92" path="/24/file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.008714][ T5710] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 91.021600][ T5710] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.041022][ T30] audit: type=1400 audit(1785916864.328:342): avc: denied { create } for pid=6169 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.073425][ T5710] usb 3-1: USB disconnect, device number 3 [ 91.298790][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.461491][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.510257][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.590136][ T5811] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 91.627729][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.650898][ T30] audit: type=1400 audit(1785916864.948:343): avc: denied { write } for pid=6176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.682965][ T5811] usb 2-1: config 0 descriptor?? [ 91.841127][ T30] audit: type=1400 audit(1785916865.138:344): avc: denied { write } for pid=6194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.223610][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.244261][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.266339][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.285866][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.306339][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.318993][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.327301][ T5811] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 92.359038][ T5811] steelseries 0003:1038:12B6.0001: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 92.472303][ T5811] steelseries 0003:1038:12B6.0001: hid_hw_raw_request() failed with -71 [ 92.499938][ T5811] usb 2-1: USB disconnect, device number 7 [ 92.742234][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 92.770235][ T6204] Cannot find add_set index 0 as target [ 92.812720][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.823996][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.832520][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.843190][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.851467][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.250204][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.328983][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.480008][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.648069][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.414636][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.422693][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.434832][ T6205] bridge_slave_0: entered allmulticast mode [ 94.443892][ T6205] bridge_slave_0: entered promiscuous mode [ 94.462328][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.469526][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.484933][ T6205] bridge_slave_1: entered allmulticast mode [ 94.502581][ T6205] bridge_slave_1: entered promiscuous mode [ 94.654147][ T6252] input: syz0 as /devices/virtual/input/input8 [ 94.679593][ T30] audit: type=1400 audit(1785916867.938:345): avc: denied { ioctl } for pid=6248 comm="syz.4.109" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.908866][ T4928] Bluetooth: hci5: command tx timeout [ 95.795476][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.821567][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.876300][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 95.887545][ T6258] Cannot find add_set index 0 as target [ 95.935294][ T6205] team0: Port device team_slave_0 added [ 95.943951][ T6205] team0: Port device team_slave_1 added [ 95.960600][ T30] audit: type=1400 audit(1785916869.268:346): avc: denied { write } for pid=6259 comm="syz.2.112" path="socket:[11025]" dev="sockfs" ino=11025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.987766][ T6260] Bluetooth: MGMT ver 1.23 [ 96.007728][ T13] bridge_slave_1: left allmulticast mode [ 96.019171][ T13] bridge_slave_1: left promiscuous mode [ 96.036941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.067402][ T13] bridge_slave_0: left allmulticast mode [ 96.076746][ T13] bridge_slave_0: left promiscuous mode [ 96.101267][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.305128][ T6273] process 'syz.2.114' launched './file0' with NULL argv: empty string added [ 96.438323][ T30] audit: type=1400 audit(1785916869.738:347): avc: denied { setopt } for pid=6277 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.465704][ T30] audit: type=1400 audit(1785916869.768:348): avc: denied { write } for pid=6277 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.564010][ T30] audit: type=1400 audit(1785916869.768:349): avc: denied { connect } for pid=6277 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.742584][ T30] audit: type=1400 audit(1785916869.788:350): avc: denied { name_connect } for pid=6277 comm="syz.4.115" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.834483][ T30] audit: type=1400 audit(1785916870.018:351): avc: denied { write } for pid=6264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.890701][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.926109][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.942474][ T30] audit: type=1400 audit(1785916870.168:352): avc: denied { execute } for pid=6282 comm="syz.3.116" path="/29/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.976222][ T13] bond0 (unregistering): Released all slaves [ 96.989537][ T4928] Bluetooth: hci5: command tx timeout [ 97.012961][ T30] audit: type=1400 audit(1785916870.308:353): avc: denied { write } for pid=6284 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.062050][ T6288] netlink: 256 bytes leftover after parsing attributes in process `syz.3.117'. [ 97.121260][ T30] audit: type=1400 audit(1785916870.428:354): avc: denied { unlink } for pid=6286 comm="syz.4.118" name="#1" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.151637][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.183520][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.220720][ T30] audit: type=1400 audit(1785916870.428:355): avc: denied { watch } for pid=6286 comm="syz.4.118" path="/28/bus/file1" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.256719][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.299845][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.306931][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.341473][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.365016][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 97.649135][ T6205] hsr_slave_0: entered promiscuous mode [ 97.673676][ T6205] hsr_slave_1: entered promiscuous mode [ 97.699701][ T6205] debugfs: 'hsr0' already exists in 'hsr' [ 97.723627][ T6205] Cannot create hsr debugfs directory [ 97.964918][ T13] hsr_slave_0: left promiscuous mode [ 97.978965][ T13] hsr_slave_1: left promiscuous mode [ 97.989861][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.999990][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.018810][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.036332][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.057341][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.119893][ T13] veth1_macvtap: left promiscuous mode [ 98.131938][ T13] veth0_macvtap: left promiscuous mode [ 98.143584][ T13] veth1_vlan: left promiscuous mode [ 98.161635][ T13] veth0_vlan: left promiscuous mode [ 98.167145][ T5811] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.190948][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.215150][ T5811] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.244946][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.302871][ T5811] usb 3-1: Product: syz [ 98.363582][ T5811] usb 3-1: Manufacturer: syz [ 98.413482][ T5811] usb 3-1: SerialNumber: syz [ 98.725942][ T5811] usb 3-1: config 0 descriptor?? [ 98.803237][ T5811] usb 3-1: selecting invalid altsetting 0 [ 99.068934][ T4928] Bluetooth: hci5: command tx timeout [ 99.221617][ T5811] usb 3-1: USB disconnect, device number 4 [ 99.408307][ T13] team0 (unregistering): Port device team_slave_1 removed [ 99.440629][ T13] team0 (unregistering): Port device team_slave_0 removed [ 99.565202][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.070899][ T6205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.087646][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.097881][ T6205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.113531][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.138140][ T6205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.495674][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.520241][ T6205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.538051][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.682251][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.719687][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.731570][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.738708][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.748220][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.781999][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.789148][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.900566][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.922347][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 100.944696][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.000007][ T10] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 101.043853][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.137814][ T10] as10x_usb: device has been detected [ 101.148735][ T4928] Bluetooth: hci5: command tx timeout [ 101.164069][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 101.637932][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 101.675084][ T10] as10x_usb: error during firmware upload part1 [ 101.705813][ T10] Registered device Abilis Systems DVB-Titan [ 102.038485][ T805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.186852][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.216576][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 102.216591][ T30] audit: type=1400 audit(1785916875.518:370): avc: denied { write } for pid=6401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.255069][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 102.275605][ T805] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.297482][ T805] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.318181][ T805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.340069][ T805] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 102.373704][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.391938][ T805] usb 5-1: Product: syz [ 102.399344][ T805] usb 5-1: Manufacturer: syz [ 102.404995][ T30] audit: type=1400 audit(1785916875.708:371): avc: denied { write } for pid=6428 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.438470][ T805] usb 5-1: SerialNumber: syz [ 102.445860][ T805] usb 5-1: config 0 descriptor?? [ 102.509978][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 102.568562][ T30] audit: type=1400 audit(1785916875.868:372): avc: denied { create } for pid=6439 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.624265][ T6205] veth0_vlan: entered promiscuous mode [ 102.642148][ T6205] veth1_vlan: entered promiscuous mode [ 102.676678][ T6205] veth0_macvtap: entered promiscuous mode [ 102.679170][ T30] audit: type=1400 audit(1785916875.978:373): avc: denied { ioctl } for pid=6404 comm="syz.4.141" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12656 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.694426][ T6205] veth1_macvtap: entered promiscuous mode [ 102.753845][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.770254][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.810213][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.842246][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878546][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.897476][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.962770][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.976878][ T805] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 102.989833][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.116585][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.128771][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.157472][ T30] audit: type=1400 audit(1785916876.458:374): avc: denied { mounton } for pid=6205 comm="syz-executor" path="/root/syzkaller.2MHa6Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.199335][ T805] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 103.221620][ T805] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 103.259134][ T805] usb 5-1: USB disconnect, device number 6 [ 103.399530][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.558791][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 103.565440][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.577501][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.584489][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 103.594068][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.609708][ T10] usb 2-1: config 0 descriptor?? [ 103.687261][ T30] audit: type=1400 audit(1785916876.988:375): avc: denied { accept } for pid=6459 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.764666][ T6462] block nbd5: shutting down sockets [ 104.061990][ T10] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 104.321456][ T30] audit: type=1400 audit(1785916877.628:376): avc: denied { write } for pid=6448 comm="syz.1.145" name="hidraw0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.473294][ T30] audit: type=1400 audit(1785916877.778:377): avc: denied { setopt } for pid=6476 comm="syz.3.151" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.501130][ T6477] syz_tun: entered allmulticast mode [ 104.559171][ T6476] syz_tun: left allmulticast mode [ 104.614063][ T5730] usb 2-1: USB disconnect, device number 8 [ 104.765604][ T5799] usb 3-1: USB disconnect, device number 5 [ 104.787914][ T30] audit: type=1400 audit(1785916878.088:378): avc: denied { setopt } for pid=6482 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.867573][ T5799] Unregistered device Abilis Systems DVB-Titan [ 104.869200][ T30] audit: type=1400 audit(1785916878.118:379): avc: denied { bind } for pid=6482 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.914530][ T5799] as10x_usb: device has been disconnected [ 106.178549][ T6494] syzkaller0: entered promiscuous mode [ 106.209547][ T6494] syzkaller0: entered allmulticast mode [ 106.568199][ T805] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.756038][ T805] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.776278][ T805] usb 5-1: config 0 has no interface number 0 [ 106.793510][ T805] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.807717][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.826679][ T805] usb 5-1: Product: syz [ 106.837288][ T805] usb 5-1: Manufacturer: syz [ 106.847923][ T805] usb 5-1: SerialNumber: syz [ 106.860413][ T805] usb 5-1: config 0 descriptor?? [ 106.881301][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.068468][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 107.083084][ T805] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 107.101476][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.125966][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.146757][ T805] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.157418][ T29] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 107.166793][ T805] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 107.174913][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.184012][ T805] usb 5-1: media controller created [ 107.192648][ T29] usb 6-1: config 0 descriptor?? [ 107.207868][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.434399][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 107.449979][ T6521] Cannot find add_set index 0 as target [ 107.654802][ T29] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 107.671544][ T29] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 107.848876][ T29] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 108.054518][ T29] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 108.256719][ T29] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 108.277973][ T29] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 108.359535][ T805] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 108.432776][ T805] usb 5-1: USB disconnect, device number 7 [ 108.643067][ T5730] usb 6-1: USB disconnect, device number 2 [ 109.401149][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 109.401165][ T30] audit: type=1400 audit(1785916882.708:385): avc: denied { read } for pid=6549 comm="syz.5.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.762239][ T30] audit: type=1400 audit(1785916883.068:386): avc: denied { bind } for pid=6558 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.976814][ T6563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 110.175074][ T6569] syzkaller0: entered promiscuous mode [ 110.181268][ T6569] syzkaller0: entered allmulticast mode [ 110.488286][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.598290][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.625171][ T30] audit: type=1400 audit(1785916883.928:387): avc: denied { mount } for pid=6579 comm="syz.1.186" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.678179][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 110.686014][ T29] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 110.695154][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 110.703351][ T29] usb 3-1: Product: syz [ 110.707494][ T29] usb 3-1: Manufacturer: syz [ 110.712135][ T29] usb 3-1: SerialNumber: syz [ 110.718343][ T29] usb 3-1: config 0 descriptor?? [ 110.729247][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 110.759742][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.770086][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.779155][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.788910][ T10] usb 6-1: config 0 descriptor?? [ 110.797847][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 110.868182][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.020780][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 111.031248][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.039300][ T24] usb 2-1: Product: syz [ 111.043482][ T24] usb 2-1: Manufacturer: syz [ 111.060453][ T24] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 111.136211][ T30] audit: type=1400 audit(1785916884.438:388): avc: denied { execute } for pid=6570 comm="syz.2.182" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 111.154602][ T29] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 111.174725][ T29] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 111.186246][ T29] usb 3-1: USB disconnect, device number 6 [ 111.203150][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.210624][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.217569][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 111.225303][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 111.241757][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 111.250235][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 111.262122][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 111.285174][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 111.334080][ T6582] futex_wake_op: syz.3.187 tries to shift op by 144; fix this program [ 111.343820][ T6582] futex_wake_op: syz.3.187 tries to shift op by 144; fix this program [ 111.356247][ T30] audit: type=1400 audit(1785916884.638:389): avc: denied { mmap_zero } for pid=6581 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 111.501198][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 111.509535][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 111.516305][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 111.523382][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 111.531598][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 111.538974][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.548488][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.562389][ T10] pwc: Registered as video103. [ 111.570090][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 112.071141][ T30] audit: type=1400 audit(1785916885.378:390): avc: denied { create } for pid=6600 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.095228][ T30] audit: type=1400 audit(1785916885.398:391): avc: denied { bind } for pid=6600 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.132984][ T30] audit: type=1400 audit(1785916885.398:392): avc: denied { setopt } for pid=6600 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.199174][ T10] usb 6-1: USB disconnect, device number 3 [ 112.205257][ T24] videodev: could not get a free minor [ 112.216898][ T30] audit: type=1400 audit(1785916885.408:393): avc: denied { bind } for pid=6599 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.236830][ T24] sur40 2-1:1.0: Unable to register video subdevice. [ 112.245894][ T24] sur40 2-1:1.0: probe with driver sur40 failed with error -23 [ 112.254104][ T30] audit: type=1400 audit(1785916885.418:394): avc: denied { write } for pid=6599 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.299505][ T24] usb 2-1: USB disconnect, device number 9 [ 112.324712][ T4978] ================================================================== [ 112.332796][ T4978] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 112.339711][ T4978] Read of size 1 at addr ffff88802cc4ac0a by task udevd/4978 [ 112.347061][ T4978] [ 112.349358][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 112.349372][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.349378][ T4978] Call Trace: [ 112.349382][ T4978] [ 112.349386][ T4978] dump_stack_lvl+0x100/0x190 [ 112.349403][ T4978] print_report+0x13d/0x4b0 [ 112.349418][ T4978] ? __virt_addr_valid+0x239/0x430 [ 112.349432][ T4978] ? string+0x471/0x4d0 [ 112.349443][ T4978] kasan_report+0xdf/0x1c0 [ 112.349457][ T4978] ? string+0x471/0x4d0 [ 112.349468][ T4978] string+0x471/0x4d0 [ 112.349479][ T4978] ? __pfx_string+0x10/0x10 [ 112.349491][ T4978] vsnprintf+0x422/0x1300 [ 112.349505][ T4978] ? __pfx_vsnprintf+0x10/0x10 [ 112.349516][ T4978] ? uevent_show+0x166/0x3a0 [ 112.349528][ T4978] ? sysfs_kf_seq_show+0x217/0x3f0 [ 112.349544][ T4978] ? seq_read_iter+0x32f/0x1270 [ 112.349554][ T4978] ? kernfs_fop_read_iter+0x46c/0x610 [ 112.349568][ T4978] ? vfs_read+0x82e/0xb40 [ 112.349583][ T4978] ? ksys_read+0x12a/0x250 [ 112.349601][ T4978] ? do_syscall_64+0x115/0x870 [ 112.349615][ T4978] add_uevent_var+0x183/0x3a0 [ 112.349625][ T4978] ? __pfx_add_uevent_var+0x10/0x10 [ 112.349637][ T4978] ? input_dev_uevent+0x16d/0x910 [ 112.349650][ T4978] ? __pfx_input_dev_uevent+0x10/0x10 [ 112.349663][ T4978] input_dev_uevent+0x1bf/0x910 [ 112.349675][ T4978] ? __pfx_input_dev_uevent+0x10/0x10 [ 112.349688][ T4978] dev_uevent+0x2f1/0x870 [ 112.349703][ T4978] ? __pfx_dev_uevent+0x10/0x10 [ 112.349718][ T4978] ? kasan_save_track+0x14/0x30 [ 112.349731][ T4978] ? __kasan_kmalloc+0xaa/0xb0 [ 112.349743][ T4978] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 112.349761][ T4978] ? uevent_show+0x166/0x3a0 [ 112.349773][ T4978] ? __pfx_uevent_show+0x10/0x10 [ 112.349784][ T4978] uevent_show+0x1ca/0x3a0 [ 112.349796][ T4978] ? __pfx_uevent_show+0x10/0x10 [ 112.349807][ T4978] dev_attr_show+0x52/0xa0 [ 112.349823][ T4978] ? __pfx_dev_attr_show+0x10/0x10 [ 112.349838][ T4978] sysfs_kf_seq_show+0x217/0x3f0 [ 112.349855][ T4978] seq_read_iter+0x32f/0x1270 [ 112.349865][ T4978] ? cp_new_stat+0x484/0x5c0 [ 112.349878][ T4978] kernfs_fop_read_iter+0x46c/0x610 [ 112.349892][ T4978] ? rw_verify_area+0xce/0x6d0 [ 112.349906][ T4978] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 112.349921][ T4978] vfs_read+0x82e/0xb40 [ 112.349937][ T4978] ? __pfx_vfs_read+0x10/0x10 [ 112.349953][ T4978] ? __pfx___do_sys_newfstat+0x10/0x10 [ 112.349968][ T4978] ksys_read+0x12a/0x250 [ 112.349984][ T4978] ? __pfx_ksys_read+0x10/0x10 [ 112.350001][ T4978] do_syscall_64+0x115/0x870 [ 112.350013][ T4978] ? clear_bhb_loop+0x40/0x90 [ 112.350025][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.350035][ T4978] RIP: 0033:0x7f02ff8a7407 [ 112.350044][ T4978] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.350054][ T4978] RSP: 002b:00007ffde1141660 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 112.350065][ T4978] RAX: ffffffffffffffda RBX: 00007f0300013880 RCX: 00007f02ff8a7407 [ 112.350072][ T4978] RDX: 0000000000001000 RSI: 0000556087ac0400 RDI: 000000000000000c [ 112.350078][ T4978] RBP: 00007f02ff9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 112.350084][ T4978] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 112.350090][ T4978] R13: 00007f02ff9efea0 R14: 0000000000000000 R15: 0000556087a631f0 [ 112.350099][ T4978] [ 112.350103][ T4978] [ 112.680084][ T4978] Allocated by task 24: [ 112.684207][ T4978] kasan_save_stack+0x30/0x50 [ 112.688857][ T4978] kasan_save_track+0x14/0x30 [ 112.693503][ T4978] __kasan_kmalloc+0xaa/0xb0 [ 112.698072][ T4978] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 112.703433][ T4978] sur40_probe+0x1a8/0x1580 [ 112.707914][ T4978] usb_probe_interface+0x303/0x8f0 [ 112.712997][ T4978] really_probe+0x241/0xa60 [ 112.717471][ T4978] __driver_probe_device+0x20e/0x450 [ 112.722725][ T4978] driver_probe_device+0x4a/0x140 [ 112.727720][ T4978] __device_attach_driver+0x1df/0x320 [ 112.733061][ T4978] bus_for_each_drv+0x159/0x1e0 [ 112.737881][ T4978] __device_attach+0x1e4/0x4d0 [ 112.742614][ T4978] device_initial_probe+0xaf/0xd0 [ 112.747612][ T4978] bus_probe_device+0x64/0x160 [ 112.752352][ T4978] device_add+0x121d/0x1970 [ 112.756830][ T4978] usb_set_configuration+0xd97/0x1c60 [ 112.762171][ T4978] usb_generic_driver_probe+0xa1/0xe0 [ 112.767512][ T4978] usb_probe_device+0xef/0x400 [ 112.772247][ T4978] really_probe+0x241/0xa60 [ 112.776724][ T4978] __driver_probe_device+0x20e/0x450 [ 112.781978][ T4978] driver_probe_device+0x4a/0x140 [ 112.786974][ T4978] __device_attach_driver+0x1df/0x320 [ 112.792324][ T4978] bus_for_each_drv+0x159/0x1e0 [ 112.797150][ T4978] __device_attach+0x1e4/0x4d0 [ 112.801883][ T4978] device_initial_probe+0xaf/0xd0 [ 112.806878][ T4978] bus_probe_device+0x64/0x160 [ 112.811621][ T4978] device_add+0x121d/0x1970 [ 112.816103][ T4978] usb_new_device.cold+0x685/0x115c [ 112.821272][ T4978] hub_event+0x30a3/0x4a60 [ 112.825669][ T4978] process_one_work+0xa23/0x1940 [ 112.830577][ T4978] worker_thread+0x5ef/0xe50 [ 112.835148][ T4978] kthread+0x370/0x450 [ 112.839184][ T4978] ret_from_fork+0x72b/0xd50 [ 112.843747][ T4978] ret_from_fork_asm+0x1a/0x30 [ 112.848484][ T4978] [ 112.850777][ T4978] Freed by task 24: [ 112.854568][ T4978] kasan_save_stack+0x30/0x50 [ 112.859229][ T4978] kasan_save_track+0x14/0x30 [ 112.863886][ T4978] kasan_save_free_info+0x3b/0x70 [ 112.868884][ T4978] __kasan_slab_free+0x5f/0x80 [ 112.873623][ T4978] kfree+0x22b/0x6c0 [ 112.877516][ T4978] sur40_probe+0xc36/0x1580 [ 112.881989][ T4978] usb_probe_interface+0x303/0x8f0 [ 112.887075][ T4978] really_probe+0x241/0xa60 [ 112.891549][ T4978] __driver_probe_device+0x20e/0x450 [ 112.896812][ T4978] driver_probe_device+0x4a/0x140 [ 112.901818][ T4978] __device_attach_driver+0x1df/0x320 [ 112.907164][ T4978] bus_for_each_drv+0x159/0x1e0 [ 112.911982][ T4978] __device_attach+0x1e4/0x4d0 [ 112.916717][ T4978] device_initial_probe+0xaf/0xd0 [ 112.921723][ T4978] bus_probe_device+0x64/0x160 [ 112.926455][ T4978] device_add+0x121d/0x1970 [ 112.930942][ T4978] usb_set_configuration+0xd97/0x1c60 [ 112.936297][ T4978] usb_generic_driver_probe+0xa1/0xe0 [ 112.941651][ T4978] usb_probe_device+0xef/0x400 [ 112.946401][ T4978] really_probe+0x241/0xa60 [ 112.950875][ T4978] __driver_probe_device+0x20e/0x450 [ 112.956139][ T4978] driver_probe_device+0x4a/0x140 [ 112.961136][ T4978] __device_attach_driver+0x1df/0x320 [ 112.966478][ T4978] bus_for_each_drv+0x159/0x1e0 [ 112.971295][ T4978] __device_attach+0x1e4/0x4d0 [ 112.976036][ T4978] device_initial_probe+0xaf/0xd0 [ 112.981050][ T4978] bus_probe_device+0x64/0x160 [ 112.985784][ T4978] device_add+0x121d/0x1970 [ 112.990261][ T4978] usb_new_device.cold+0x685/0x115c [ 112.995429][ T4978] hub_event+0x30a3/0x4a60 [ 112.999816][ T4978] process_one_work+0xa23/0x1940 [ 113.004724][ T4978] worker_thread+0x5ef/0xe50 [ 113.009289][ T4978] kthread+0x370/0x450 [ 113.013337][ T4978] ret_from_fork+0x72b/0xd50 [ 113.017915][ T4978] ret_from_fork_asm+0x1a/0x30 [ 113.022666][ T4978] [ 113.024976][ T4978] The buggy address belongs to the object at ffff88802cc4a000 [ 113.024976][ T4978] which belongs to the cache kmalloc-4k of size 4096 [ 113.039019][ T4978] The buggy address is located 3082 bytes inside of [ 113.039019][ T4978] freed 4096-byte region [ffff88802cc4a000, ffff88802cc4b000) [ 113.052970][ T4978] [ 113.055275][ T4978] The buggy address belongs to the physical page: [ 113.061655][ T4978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc48 [ 113.070383][ T4978] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.078851][ T4978] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.086366][ T4978] page_type: f5(slab) [ 113.090337][ T4978] raw: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 113.098888][ T4978] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 113.107453][ T4978] head: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 113.116103][ T4978] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 113.124761][ T4978] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 113.133452][ T4978] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 113.142105][ T4978] page dumped because: kasan: bad access detected [ 113.148499][ T4978] page_owner tracks the page as allocated [ 113.154206][ T4978] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4983, tgid 4983 (udevd), ts 26628972454, free_ts 26458940382 [ 113.174153][ T4978] post_alloc_hook+0xfd/0x120 [ 113.178832][ T4978] get_page_from_freelist+0xf48/0x3530 [ 113.184284][ T4978] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 113.190160][ T4978] new_slab+0xa2/0x640 [ 113.194214][ T4978] refill_objects+0xe3/0x410 [ 113.198775][ T4978] __pcs_replace_empty_main+0x376/0x680 [ 113.204298][ T4978] __kmalloc_noprof+0x66d/0x820 [ 113.209137][ T4978] tomoyo_realpath_from_path+0xb6/0x690 [ 113.214658][ T4978] tomoyo_check_open_permission+0x2af/0x3c0 [ 113.220530][ T4978] tomoyo_file_open+0x6b/0x90 [ 113.225179][ T4978] security_file_open+0xb5/0x1e0 [ 113.230086][ T4978] do_dentry_open+0x588/0x14d0 [ 113.234823][ T4978] vfs_open+0x82/0x3f0 [ 113.238862][ T4978] path_openat+0x2873/0x4280 [ 113.243420][ T4978] do_file_open+0x20e/0x430 [ 113.247892][ T4978] do_sys_openat2+0x10f/0x1e0 [ 113.252539][ T4978] page last free pid 4983 tgid 4983 stack trace: [ 113.258829][ T4978] __free_frozen_pages+0x79f/0x1090 [ 113.264006][ T4978] qlist_free_all+0x47/0xf0 [ 113.268476][ T4978] kasan_quarantine_reduce+0x1a0/0x1f0 [ 113.273905][ T4978] __kasan_slab_alloc+0x69/0x90 [ 113.278725][ T4978] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 113.284156][ T4978] do_getname+0x35/0x390 [ 113.288390][ T4978] do_sys_openat2+0xc7/0x1e0 [ 113.292951][ T4978] __x64_sys_openat+0x12d/0x210 [ 113.297781][ T4978] do_syscall_64+0x115/0x870 [ 113.302352][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.308214][ T4978] [ 113.310517][ T4978] Memory state around the buggy address: [ 113.316112][ T4978] ffff88802cc4ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.324141][ T4978] ffff88802cc4ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.332178][ T4978] >ffff88802cc4ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.340213][ T4978] ^ [ 113.344511][ T4978] ffff88802cc4ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.352537][ T4978] ffff88802cc4ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.360564][ T4978] ================================================================== [ 113.466599][ T4978] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.473849][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 113.482697][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.492751][ T4978] Call Trace: [ 113.496015][ T4978] [ 113.498924][ T4978] dump_stack_lvl+0x100/0x190 [ 113.503585][ T4978] vpanic+0x552/0x970 [ 113.507564][ T4978] ? __pfx_vpanic+0x10/0x10 [ 113.512050][ T4978] ? string+0x471/0x4d0 [ 113.516183][ T4978] panic+0xd1/0xe0 [ 113.519882][ T4978] ? __pfx_panic+0x10/0x10 [ 113.524275][ T4978] ? string+0x471/0x4d0 [ 113.528409][ T4978] ? preempt_schedule_common+0x42/0xc0 [ 113.533859][ T4978] ? check_panic_on_warn+0x1f/0x90 [ 113.538958][ T4978] check_panic_on_warn.cold+0x19/0x34 [ 113.544321][ T4978] end_report.part.0+0x3a/0x90 [ 113.549067][ T4978] kasan_report.cold+0xe/0x18 [ 113.553729][ T4978] ? string+0x471/0x4d0 [ 113.557864][ T4978] string+0x471/0x4d0 [ 113.561825][ T4978] ? __pfx_string+0x10/0x10 [ 113.566307][ T4978] vsnprintf+0x422/0x1300 [ 113.570616][ T4978] ? __pfx_vsnprintf+0x10/0x10 [ 113.575357][ T4978] ? uevent_show+0x166/0x3a0 [ 113.579928][ T4978] ? sysfs_kf_seq_show+0x217/0x3f0 [ 113.585024][ T4978] ? seq_read_iter+0x32f/0x1270 [ 113.589853][ T4978] ? kernfs_fop_read_iter+0x46c/0x610 [ 113.595216][ T4978] ? vfs_read+0x82e/0xb40 [ 113.599529][ T4978] ? ksys_read+0x12a/0x250 [ 113.603927][ T4978] ? do_syscall_64+0x115/0x870 [ 113.608672][ T4978] add_uevent_var+0x183/0x3a0 [ 113.613340][ T4978] ? __pfx_add_uevent_var+0x10/0x10 [ 113.618527][ T4978] ? input_dev_uevent+0x16d/0x910 [ 113.623530][ T4978] ? __pfx_input_dev_uevent+0x10/0x10 [ 113.628879][ T4978] input_dev_uevent+0x1bf/0x910 [ 113.633713][ T4978] ? __pfx_input_dev_uevent+0x10/0x10 [ 113.639063][ T4978] dev_uevent+0x2f1/0x870 [ 113.643377][ T4978] ? __pfx_dev_uevent+0x10/0x10 [ 113.648212][ T4978] ? kasan_save_track+0x14/0x30 [ 113.653043][ T4978] ? __kasan_kmalloc+0xaa/0xb0 [ 113.657785][ T4978] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 113.663315][ T4978] ? uevent_show+0x166/0x3a0 [ 113.667885][ T4978] ? __pfx_uevent_show+0x10/0x10 [ 113.672799][ T4978] uevent_show+0x1ca/0x3a0 [ 113.677196][ T4978] ? __pfx_uevent_show+0x10/0x10 [ 113.682110][ T4978] dev_attr_show+0x52/0xa0 [ 113.686523][ T4978] ? __pfx_dev_attr_show+0x10/0x10 [ 113.691616][ T4978] sysfs_kf_seq_show+0x217/0x3f0 [ 113.696551][ T4978] seq_read_iter+0x32f/0x1270 [ 113.701209][ T4978] ? cp_new_stat+0x484/0x5c0 [ 113.705782][ T4978] kernfs_fop_read_iter+0x46c/0x610 [ 113.710966][ T4978] ? rw_verify_area+0xce/0x6d0 [ 113.715724][ T4978] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 113.721425][ T4978] vfs_read+0x82e/0xb40 [ 113.725565][ T4978] ? __pfx_vfs_read+0x10/0x10 [ 113.730228][ T4978] ? __pfx___do_sys_newfstat+0x10/0x10 [ 113.735671][ T4978] ksys_read+0x12a/0x250 [ 113.739897][ T4978] ? __pfx_ksys_read+0x10/0x10 [ 113.744655][ T4978] do_syscall_64+0x115/0x870 [ 113.749237][ T4978] ? clear_bhb_loop+0x40/0x90 [ 113.753897][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.759767][ T4978] RIP: 0033:0x7f02ff8a7407 [ 113.764158][ T4978] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 113.783743][ T4978] RSP: 002b:00007ffde1141660 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 113.792135][ T4978] RAX: ffffffffffffffda RBX: 00007f0300013880 RCX: 00007f02ff8a7407 [ 113.800084][ T4978] RDX: 0000000000001000 RSI: 0000556087ac0400 RDI: 000000000000000c [ 113.808034][ T4978] RBP: 00007f02ff9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 113.815982][ T4978] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 113.823928][ T4978] R13: 00007f02ff9efea0 R14: 0000000000000000 R15: 0000556087a631f0 [ 113.831886][ T4978] [ 113.835074][ T4978] Kernel Offset: disabled [ 113.839371][ T4978] Rebooting in 86400 seconds..