last executing test programs: 20.238914062s ago: executing program 0 (id=1805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 19.275874572s ago: executing program 4 (id=1808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_open_dev$loop(0x0, 0x75f, 0xc002) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001700)={@local, 0x9, 0x1, 0xff, 0x4, 0x8001, 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003d80)=[{0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, {0x3, 0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/211, 0xd3}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], &(0x7f0000000380)=[0x1000]}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x2, 0x1, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/197, 0xc5}, {&(0x7f0000001940)=""/235, 0xeb}], 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[0x5, 0xb7, 0x9, 0x2, 0x6, 0x10]}, {0x2, 0xa22cd57451d02614, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/123, 0x7b}], 0x0}, {0x4, 0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002240)=""/15, 0xf}, {0x0}, {&(0x7f0000002680)=""/183, 0xb7}, {&(0x7f0000002740)=""/4096, 0x1000}], &(0x7f0000003800)=[0x4, 0x4, 0x8001, 0x1, 0x10, 0x1000, 0x8]}, {0x0, 0x1, 0x0, &(0x7f0000003cc0), &(0x7f0000003d40)=[0x3, 0x3, 0x3, 0xffffffff, 0x9, 0x1]}], 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001cc0)={0x4, 0x5, 0xf, 0x61a2, 0xd, "eac9b7e16a9b5b08"}) 17.475873468s ago: executing program 4 (id=1814): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 16.017459795s ago: executing program 0 (id=1816): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x64) 14.414032546s ago: executing program 0 (id=1818): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 14.413313054s ago: executing program 2 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r5}) 12.948149444s ago: executing program 2 (id=1821): syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) eventfd2(0xff, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mkdir(0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) 12.624458409s ago: executing program 0 (id=1822): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11.924261863s ago: executing program 2 (id=1825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 9.195405591s ago: executing program 4 (id=1828): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 8.330874403s ago: executing program 1 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 8.010659061s ago: executing program 3 (id=1830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 7.337446278s ago: executing program 4 (id=1831): socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x80000, 0x1) keyctl$setperm(0x5, 0x0, 0x52b242d) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x2f126000) cachestat(r3, 0x0, 0x0, 0x0) 6.841079788s ago: executing program 3 (id=1832): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x100000, 0x10100, 0x11fffffc, 0x40000001}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}) io_uring_enter(r0, 0x1a27, 0x0, 0x0, 0x0, 0x0) 6.808328436s ago: executing program 1 (id=1833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) utime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) lseek(r5, 0x101, 0x1) 5.89493007s ago: executing program 4 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x80011f, 0x0, 0x0, 0x724f, 0x0, 0x55a}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x8, 0x80000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="f16a1bd26759bbca23b7d526cfd3e3fa52deadccb5ce6be81028c5088484365e66c0dce1ce", 0x25, 0xfffffffffffffffc) 5.887768034s ago: executing program 3 (id=1844): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 5.796743555s ago: executing program 1 (id=1835): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x400c895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0xfb2) 5.073292436s ago: executing program 2 (id=1836): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.410937938s ago: executing program 1 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 4.105026503s ago: executing program 3 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 3.013700895s ago: executing program 1 (id=1839): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_clone(0x2001100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.986952885s ago: executing program 0 (id=1840): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x1, 0x1000}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) 2.805854486s ago: executing program 2 (id=1841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002"], 0x48}}, 0x0) 2.802143208s ago: executing program 3 (id=1842): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 621.22488ms ago: executing program 1 (id=1843): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c", 0x7}], 0x1}}], 0x1, 0x20008000) 619.450815ms ago: executing program 2 (id=1845): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) 618.510484ms ago: executing program 3 (id=1846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 482.254563ms ago: executing program 0 (id=1847): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) 0s ago: executing program 4 (id=1848): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) close(0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x3, 0x11) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) kernel console output (not intermixed with test programs): invalid bInterval 0, changing to 7 [ 279.492947][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.526019][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 279.545132][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.554615][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.572957][ T10] usb 1-1: Product: syz [ 279.604071][ T10] usb 1-1: Manufacturer: syz [ 279.623042][ T10] usb 1-1: SerialNumber: syz [ 279.854792][ T10] usb 1-1: config 0 descriptor?? [ 279.874825][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.896185][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.941967][ T6671] mdc800 5-1:7.132: probe fails -> wrong Interface [ 279.965178][ T6671] usb 5-1: USB disconnect, device number 5 [ 280.077076][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 280.102404][ T8384] xt_connbytes: Forcing CT accounting to be enabled [ 280.114343][ T30] audit: type=1400 audit(1751392477.841:434): avc: denied { remount } for pid=8380 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 280.148897][ T8383] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.162548][ T8384] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.226808][ T5894] usb 1-1: USB disconnect, device number 9 [ 280.239559][ T5894] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 280.286889][ T10] IPVS: starting estimator thread 0... [ 280.594244][ T8388] IPVS: using max 34 ests per chain, 81600 per kthread [ 281.022835][ T6671] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 281.488133][ T6671] usb 5-1: config 0 has no interfaces? [ 281.639065][ T30] audit: type=1400 audit(1751392479.381:435): avc: denied { setopt } for pid=8402 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.673459][ T6671] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.682538][ T6671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.694445][ T6671] usb 5-1: SerialNumber: syz [ 281.759746][ T6671] usb 5-1: config 0 descriptor?? [ 281.787188][ T30] audit: type=1400 audit(1751392479.521:436): avc: denied { write } for pid=8402 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.977239][ T30] audit: type=1400 audit(1751392479.531:437): avc: denied { read } for pid=8402 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.742239][ T6671] usb 5-1: USB disconnect, device number 6 [ 282.780447][ T30] audit: type=1400 audit(1751392480.521:438): avc: denied { name_bind 0x1000000 } for pid=8414 comm="syz.0.757" path="socket:[18056]" dev="sockfs" ino=18056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 283.225819][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 283.327658][ T8414] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 283.439137][ T8424] kvm: pic: non byte read [ 283.454304][ T8424] kvm: pic: non byte read [ 283.459390][ T8424] kvm: pic: non byte read [ 283.464554][ T8424] kvm: pic: non byte read [ 283.470901][ T8424] kvm: pic: non byte read [ 283.482949][ T8424] kvm: pic: non byte read [ 283.491118][ T8424] kvm: pic: non byte read [ 283.505040][ T8424] kvm: pic: non byte read [ 283.520583][ T8424] kvm: pic: non byte read [ 283.557119][ T8424] kvm: pic: non byte read [ 283.583145][ T8424] pic_ioport_write: 13 callbacks suppressed [ 283.583166][ T8424] kvm: pic: level sensitive irq not supported [ 283.607565][ T8424] kvm: pic: level sensitive irq not supported [ 284.520709][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.615949][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.659564][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.778857][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 285.844256][ T30] audit: type=1400 audit(1751392483.581:439): avc: denied { firmware_load } for pid=8447 comm="syz.0.768" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 285.962179][ T30] audit: type=1400 audit(1751392483.621:440): avc: denied { read } for pid=5894 comm="kworker/1:4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17148 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.012826][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 286.067314][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.097324][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.119841][ T8451] syz.0.768 (8451) used greatest stack depth: 17480 bytes left [ 286.123249][ T5880] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 286.184542][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.213003][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.232967][ T10] usb 3-1: Product: syz [ 286.237273][ T10] usb 3-1: Manufacturer: syz [ 286.272964][ T10] usb 3-1: SerialNumber: syz [ 286.345774][ T5880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.362784][ T5880] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.382867][ T5880] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.392005][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.445935][ T8458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 287.867309][ T10] usb 3-1: 0:2 : does not exist [ 288.222167][ T5880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.230597][ T10] usb 3-1: USB disconnect, device number 8 [ 289.267951][ T5880] usb 2-1: USB disconnect, device number 11 [ 291.272992][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 291.582784][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 291.589716][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 291.613063][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 291.642844][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 291.742446][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 291.927666][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.047529][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 292.135483][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 292.340518][ T10] usb 5-1: Product: syz [ 292.344813][ T10] usb 5-1: Manufacturer: syz [ 292.349432][ T10] usb 5-1: SerialNumber: syz [ 292.356782][ T10] usb 5-1: config 0 descriptor?? [ 292.377322][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 292.478128][ T30] audit: type=1400 audit(1751392490.191:441): avc: denied { open } for pid=8522 comm="syz.3.790" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 292.754596][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.824827][ T30] audit: type=1400 audit(1751392490.221:442): avc: denied { ioctl } for pid=8522 comm="syz.3.790" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 292.995583][ T10] usb 5-1: USB disconnect, device number 7 [ 293.013901][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 293.021815][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 293.759459][ T30] audit: type=1400 audit(1751392491.501:443): avc: denied { create } for pid=8535 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.970652][ T30] audit: type=1400 audit(1751392491.501:444): avc: denied { bind } for pid=8535 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 294.302777][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.531372][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 294.545134][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.566258][ T10] usb 5-1: config 0 has no interface number 0 [ 294.598265][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.152314][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.192821][ T30] audit: type=1400 audit(1751392492.891:445): avc: denied { mount } for pid=8555 comm="syz.1.800" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 295.313050][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 295.356074][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.381638][ T10] usb 5-1: config 0 descriptor?? [ 295.658364][ T30] audit: type=1400 audit(1751392493.401:446): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 297.247608][ T30] audit: type=1400 audit(1751392494.991:447): avc: denied { read write } for pid=8574 comm="syz.1.805" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.311379][ T30] audit: type=1400 audit(1751392494.991:448): avc: denied { open } for pid=8574 comm="syz.1.805" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.397084][ T30] audit: type=1400 audit(1751392495.031:449): avc: denied { map } for pid=8574 comm="syz.1.805" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.722240][ T30] audit: type=1400 audit(1751392495.461:450): avc: denied { associate } for pid=8579 comm="syz.2.807" name="memory.numa_stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 298.051188][ T10] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0003/input/input12 [ 298.196552][ T10] uclogic 0003:28BD:0094.0003: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 298.237759][ T8583] binder: BINDER_SET_CONTEXT_MGR already set [ 298.252799][ T8583] binder: 8582:8583 ioctl 4018620d 200000000040 returned -16 [ 298.257538][ T10] usb 5-1: USB disconnect, device number 8 [ 298.309268][ T8583] binder: 8582:8583 ioctl c0306201 200000000240 returned -11 [ 298.390805][ T8584] fido_id[8584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 299.716423][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 300.773139][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 301.412811][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 301.424942][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.453297][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.495399][ T30] audit: type=1400 audit(1751392499.241:451): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 301.506272][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 301.572859][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.630864][ T5880] usb 4-1: config 0 descriptor?? [ 301.662443][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 303.101989][ T30] audit: type=1400 audit(1751392500.841:452): avc: denied { read } for pid=8606 comm="syz.3.814" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 303.166991][ T30] audit: type=1400 audit(1751392500.851:453): avc: denied { open } for pid=8606 comm="syz.3.814" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 303.168321][ T5169] bcm5974 4-1:0.0: could not read from device [ 303.317693][ T8608] bcm5974 4-1:0.0: could not read from device [ 303.355985][ T5880] usb 4-1: USB disconnect, device number 12 [ 303.396058][ T5169] bcm5974 4-1:0.0: could not read from device [ 303.415243][ T5836] bcm5974 4-1:0.0: could not read from device [ 303.688974][ T8634] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 303.865926][ T8634] netlink: 'syz.1.820': attribute type 6 has an invalid length. [ 303.977581][ T8634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'. [ 304.257309][ T30] audit: type=1400 audit(1751392502.001:454): avc: denied { execmem } for pid=8639 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 304.604429][ T30] audit: type=1400 audit(1751392502.331:455): avc: denied { map } for pid=8643 comm="syz.3.822" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.093900][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 308.431913][ T8688] binder_alloc: 8684: binder_alloc_buf, no vma [ 310.019987][ T8700] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.840'. [ 310.286733][ T30] audit: type=1400 audit(1751392508.031:456): avc: denied { read write } for pid=8701 comm="syz.3.841" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.367037][ T8702] netfs: Couldn't get user pages (rc=-14) [ 310.377666][ T30] audit: type=1400 audit(1751392508.051:457): avc: denied { open } for pid=8701 comm="syz.3.841" path="/165/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.513653][ T30] audit: type=1400 audit(1751392508.061:458): avc: denied { map } for pid=8701 comm="syz.3.841" path="/165/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 310.975908][ T6667] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 312.032919][ T6667] usb 4-1: Using ep0 maxpacket: 16 [ 312.143599][ T6667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.750400][ T6667] usb 4-1: config 0 has no interfaces? [ 312.775391][ T6667] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 312.797011][ T6667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.836781][ T6667] usb 4-1: config 0 descriptor?? [ 313.006964][ T30] audit: type=1400 audit(1751392510.741:459): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.040564][ T30] audit: type=1400 audit(1751392510.741:460): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.063609][ T30] audit: type=1400 audit(1751392510.741:461): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.086530][ T30] audit: type=1400 audit(1751392510.741:462): avc: denied { read } for pid=5479 comm="dhcpcd" name="n102" dev="tmpfs" ino=4754 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.111269][ T30] audit: type=1400 audit(1751392510.741:463): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4754 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.139695][ T30] audit: type=1400 audit(1751392510.741:464): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4754 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.288146][ T8723] binder: BINDER_SET_CONTEXT_MGR already set [ 313.294265][ T8723] binder: 8722:8723 ioctl 4018620d 200000000040 returned -16 [ 314.262523][ T30] audit: type=1400 audit(1751392511.881:465): avc: denied { read open } for pid=8736 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.096578][ T6667] usb 4-1: USB disconnect, device number 13 [ 316.157214][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 316.157229][ T30] audit: type=1400 audit(1751392513.901:467): avc: denied { create } for pid=8753 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.904722][ T30] audit: type=1400 audit(1751392514.191:468): avc: denied { write } for pid=8753 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.075685][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082038][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.087557][ T30] audit: type=1400 audit(1751392514.191:469): avc: denied { nlmsg_write } for pid=8753 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.727578][ T30] audit: type=1400 audit(1751392515.471:470): avc: denied { add_name } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.328297][ T30] audit: type=1400 audit(1751392515.491:471): avc: denied { create } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.371573][ T30] audit: type=1400 audit(1751392515.491:472): avc: denied { write } for pid=8730 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=4787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.565512][ T30] audit: type=1400 audit(1751392515.491:473): avc: denied { append } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=4787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 318.730775][ T30] audit: type=1400 audit(1751392516.111:474): avc: denied { listen } for pid=8770 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.782778][ T30] audit: type=1400 audit(1751392516.111:475): avc: denied { accept } for pid=8770 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 319.313597][ T30] audit: type=1400 audit(1751392517.051:476): avc: denied { remove_name } for pid=8779 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=4787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.807701][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 323.807717][ T30] audit: type=1400 audit(1751392521.551:479): avc: denied { read } for pid=8806 comm="syz.2.868" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 323.933035][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 324.060724][ T30] audit: type=1400 audit(1751392521.551:480): avc: denied { map } for pid=8806 comm="syz.2.868" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 324.263014][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.276167][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.653212][ T30] audit: type=1400 audit(1751392521.551:481): avc: denied { write execute } for pid=8806 comm="syz.2.868" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 324.692801][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.723069][ T30] audit: type=1400 audit(1751392522.021:482): avc: denied { create } for pid=8814 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.746680][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 324.782893][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 324.791026][ T10] usb 5-1: Product: syz [ 324.821941][ T10] usb 5-1: Manufacturer: syz [ 324.843603][ T10] usb 5-1: SerialNumber: syz [ 324.925240][ T8835] binder_alloc: 8827: pid 8827 spamming oneway? 1 buffers allocated for a total size of 4096 [ 325.094365][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 325.322581][ T8809] netlink: 47 bytes leftover after parsing attributes in process `syz.4.867'. [ 325.421795][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 325.732850][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 325.740091][ T5894] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 325.760162][ T5894] usb 4-1: config 0 has no interface number 0 [ 325.785449][ T5894] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 325.811780][ T5894] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 325.841539][ T5894] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 325.925752][ T5894] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 325.937524][ T5894] usb 4-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 325.951767][ T5894] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 325.961568][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.095214][ T5894] usb 4-1: config 0 descriptor?? [ 326.149063][ T5894] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.425565][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.465082][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.504498][ T5894] snd-usb-audio 4-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 326.642468][ T5972] usb 5-1: USB disconnect, device number 9 [ 326.670052][ T5972] usblp0: removed [ 326.787496][ T8870] netlink: 'syz.0.877': attribute type 39 has an invalid length. [ 327.582493][ T5972] usb 4-1: USB disconnect, device number 14 [ 329.426849][ T8910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 330.126318][ T8910] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 330.204401][ T8910] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 334.273823][ T8954] lo speed is unknown, defaulting to 1000 [ 334.375786][ T8957] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 338.699722][ T9011] binder: 9006:9011 ioctl 4018620d 0 returned -22 [ 339.262199][ T30] audit: type=1400 audit(1751392537.001:483): avc: denied { getopt } for pid=9012 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.928356][ T9017] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 341.002136][ T9021] bond3: (slave gretap1): making interface the new active one [ 341.064036][ T9021] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 341.190308][ T9022] vlan3: entered allmulticast mode [ 341.216284][ T9022] bond3: entered allmulticast mode [ 341.231870][ T9022] gretap1: entered allmulticast mode [ 342.177721][ T9022] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 342.510566][ T30] audit: type=1400 audit(1751392540.241:484): avc: denied { read write } for pid=9040 comm="syz.0.920" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 342.655360][ T30] audit: type=1400 audit(1751392540.251:485): avc: denied { open } for pid=9040 comm="syz.0.920" path="/198/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 342.771332][ T9049] syz_tun: entered allmulticast mode [ 342.907687][ T9042] syz_tun: left allmulticast mode [ 344.749024][ T9058] xt_CT: No such helper "pptp" [ 344.946622][ T6671] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 345.132853][ T6671] usb 5-1: Using ep0 maxpacket: 16 [ 345.155191][ T6671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.297795][ T6671] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.334564][ T6671] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.357547][ T6671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.048998][ T6671] usb 5-1: Product: syz [ 346.076813][ T6671] usb 5-1: Manufacturer: syz [ 346.081457][ T6671] usb 5-1: SerialNumber: syz [ 346.946358][ T6671] usb 5-1: 0:2 : does not exist [ 347.394295][ T6671] usb 5-1: USB disconnect, device number 10 [ 347.694104][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.689325][ T30] audit: type=1326 audit(2000000004.089:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9117 comm="syz.2.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x0 [ 350.646410][ T30] audit: type=1400 audit(2000000006.049:487): avc: denied { ioctl } for pid=9144 comm="syz.3.950" path="socket:[20627]" dev="sockfs" ino=20627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.710587][ T30] audit: type=1400 audit(2000000008.109:488): avc: denied { mounton } for pid=9170 comm="syz.1.956" path=2F3138382FE91F7189591E9233614B dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 352.884710][ T9177] tipc: Enabled bearer , priority 0 [ 353.003834][ T9177] syzkaller0: entered promiscuous mode [ 353.320280][ T9177] syzkaller0: entered allmulticast mode [ 353.433552][ T9179] tipc: Resetting bearer [ 353.526281][ T30] audit: type=1400 audit(2000000008.929:489): avc: denied { create } for pid=9180 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 353.666131][ T9176] tipc: Resetting bearer [ 353.945477][ T9180] delete_channel: no stack [ 354.020906][ T9176] tipc: Disabling bearer [ 355.935019][ T30] audit: type=1326 audit(2000000011.329:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.2.965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a78f8e929 code=0x0 [ 359.036046][ T9246] xt_policy: too many policy elements [ 360.884812][ T9263] netlink: 277 bytes leftover after parsing attributes in process `syz.1.981'. [ 361.142108][ T9278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.988'. [ 361.708062][ T9286] Illegal XDP return value 4294967262 on prog (id 225) dev N/A, expect packet loss! [ 364.270850][ T9322] trusted_key: encrypted_key: hex blob is missing [ 364.863072][ T5894] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 365.013373][ T9335] io-wq is not configured for unbound workers [ 365.036429][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.056050][ T5894] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 365.069329][ T5894] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 365.081710][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.090539][ T5894] usb 1-1: Product: syz [ 365.102001][ T5894] usb 1-1: Manufacturer: syz [ 365.107873][ T5894] usb 1-1: SerialNumber: syz [ 365.120223][ T5894] usb 1-1: config 0 descriptor?? [ 365.133958][ T5894] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 365.162811][ T6667] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 365.313096][ T6667] usb 4-1: Using ep0 maxpacket: 8 [ 365.325617][ T6667] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 365.348389][ T6667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.358003][ T9324] ipvlan1: entered promiscuous mode [ 365.363735][ T9324] ipvlan1: entered allmulticast mode [ 365.377367][ T9324] bridge0: entered allmulticast mode [ 365.386730][ T6667] pvrusb2: Hardware description: Terratec Grabster AV400 [ 365.395550][ T9324] batman_adv: batadv0: Adding interface: ipvlan1 [ 365.401351][ T6667] pvrusb2: ********** [ 365.406261][ T6667] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 365.412202][ T9324] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.442448][ T6667] pvrusb2: Important functionality might not be entirely working. [ 365.455502][ T6667] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 365.467614][ T6667] pvrusb2: ********** [ 365.479853][ T9324] batman_adv: batadv0: Interface activated: ipvlan1 [ 365.513382][ T5894] usb 1-1: USB disconnect, device number 10 [ 365.572035][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.583142][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.596322][ T2335] pvrusb2: Invalid write control endpoint [ 365.710791][ T2335] pvrusb2: Invalid write control endpoint [ 365.829459][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 365.841578][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 365.850216][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 365.863246][ T2335] pvrusb2: Device being rendered inoperable [ 365.879034][ T9332] pvrusb2: Attempted to execute control transfer when device not ok [ 366.448497][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 366.498135][ T5972] usb 4-1: USB disconnect, device number 15 [ 366.580319][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 366.849373][ T2335] pvrusb2: Attached sub-driver cx25840 [ 366.866484][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 366.932851][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 366.993491][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 367.132062][ T9355] netlink: 'syz.1.1010': attribute type 7 has an invalid length. [ 367.482955][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 367.579791][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 367.642951][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 367.652384][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.665944][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.676332][ T5894] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 367.685751][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.802043][ T5894] usb 3-1: config 0 descriptor?? [ 367.998815][ T5972] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 368.632799][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 368.808397][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.032643][ T5972] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 369.041355][ T5972] usb 2-1: config 0 has no interface number 0 [ 369.048699][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.088733][ T5972] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.227739][ T5972] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.254072][ T5972] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 369.272869][ T5894] aquacomputer_d5next 0003:0C70:F00A.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0 [ 369.293141][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 369.301263][ T5972] usb 2-1: Product: syz [ 369.764724][ T5972] usb 2-1: SerialNumber: syz [ 369.789545][ T5972] usb 2-1: config 0 descriptor?? [ 369.812357][ T5972] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 369.839565][ T5894] usb 3-1: USB disconnect, device number 9 [ 369.873830][ T5972] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input14 [ 370.057193][ T9381] fido_id[9381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 370.102111][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.114420][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.127547][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 370.346919][ T9364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.945903][ T30] audit: type=1400 audit(2000000026.349:491): avc: denied { read } for pid=9395 comm="syz.0.1023" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 371.011037][ T30] audit: type=1400 audit(2000000026.379:492): avc: denied { open } for pid=9395 comm="syz.0.1023" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 371.038908][ T30] audit: type=1400 audit(2000000026.379:493): avc: denied { firmware_load } for pid=8852 comm="kworker/u8:33" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 371.073384][ T6666] usb 2-1: USB disconnect, device number 12 [ 371.130367][ T6666] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 372.291468][ T9396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.302813][ T9396] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 372.485617][ T9396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.491586][ T9396] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.626470][ T9396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.678621][ T9396] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 373.282869][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 373.636935][ T30] audit: type=1400 audit(2000000028.909:494): avc: denied { ioctl } for pid=9413 comm="syz.0.1028" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.002831][ T30] audit: type=1400 audit(2000000029.399:495): avc: denied { mount } for pid=9417 comm="syz.1.1029" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.493950][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 374.652747][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 374.819158][ T30] audit: type=1400 audit(2000000030.219:496): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.911518][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 375.347172][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 376.334269][ T30] audit: type=1400 audit(2000000031.729:497): avc: denied { append } for pid=9434 comm="syz.0.1035" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 376.452795][ T6666] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 376.575062][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 376.741862][ T6666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.747258][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 376.752358][ T6666] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.814963][ T6666] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.872015][ T6666] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 376.891191][ T6666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.924033][ T6666] usb 4-1: SerialNumber: syz [ 376.948616][ T6666] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 376.973219][ T6666] usb-storage 4-1:1.0: USB Mass Storage device detected [ 377.121254][ T6666] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 377.239675][ T6666] usb 4-1: USB disconnect, device number 16 [ 378.497884][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.507497][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.913009][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 380.616040][ T9404] syz.4.1025 (9404): drop_caches: 1 [ 382.036293][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 382.432783][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 382.449983][ T10] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 382.472435][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.629141][ T10] usb 1-1: Product: syz [ 382.659714][ T10] usb 1-1: Manufacturer: syz [ 382.754986][ T10] usb 1-1: SerialNumber: syz [ 383.147650][ T10] usb 1-1: config 0 descriptor?? [ 383.330337][ T10] usb 1-1: selecting invalid altsetting 3 [ 383.337411][ T10] comedi comedi0: could not set alternate setting 3 in high speed [ 383.347535][ T10] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 383.784772][ T10] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 383.805695][ T30] audit: type=1400 audit(2000000552.214:498): avc: denied { read write } for pid=9502 comm="syz.1.1054" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 383.912591][ T30] audit: type=1400 audit(2000000552.254:499): avc: denied { open } for pid=9502 comm="syz.1.1054" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 384.378694][ T9480] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 384.486015][ T10] usb 1-1: USB disconnect, device number 11 [ 384.694038][ T9514] trusted_key: encrypted_key: insufficient parameters specified [ 385.513447][ T9509] lo speed is unknown, defaulting to 1000 [ 386.035846][ T9532] cgroup: Unknown subsys name 'cpuset' [ 389.218472][ T30] audit: type=1326 audit(2000000557.624:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x0 [ 389.554286][ T30] audit: type=1400 audit(2000000557.704:501): avc: denied { write } for pid=9553 comm="syz.1.1068" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 389.821842][ T9563] binder: 9562:9563 ioctl c0306201 0 returned -14 [ 390.404713][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 390.457052][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 390.468580][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 390.598725][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 390.608703][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 391.169978][ T9576] lo speed is unknown, defaulting to 1000 [ 392.135789][ T9586] : entered promiscuous mode [ 392.982026][ T9595] xt_CT: No such helper "pptp" [ 393.279694][ T9599] lo speed is unknown, defaulting to 1000 [ 397.005956][ T9666] smc: net device bond0 applied user defined pnetid SYZ2 [ 398.613344][ T9668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.622491][ T9668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.639508][ T9668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.655644][ T9668] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 399.158776][ T9680] lo speed is unknown, defaulting to 1000 [ 399.514956][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1096'. [ 400.040889][ T30] audit: type=1326 audit(2000000568.434:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.522750][ T30] audit: type=1326 audit(2000000568.444:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.590733][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 400.603041][ T30] audit: type=1326 audit(2000000568.444:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.637068][ T30] audit: type=1326 audit(2000000568.444:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.663981][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 400.671202][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 400.678631][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 400.696373][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 400.765430][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 400.776136][ T30] audit: type=1326 audit(2000000568.454:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.820521][ T30] audit: type=1326 audit(2000000568.454:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.837104][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 400.846717][ T30] audit: type=1326 audit(2000000568.454:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.884388][ T30] audit: type=1326 audit(2000000568.454:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 400.908224][ T30] audit: type=1326 audit(2000000568.454:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 401.326064][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 401.358207][ T30] audit: type=1326 audit(2000000568.454:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a78f8e929 code=0x7ffc0000 [ 402.124213][ T9723] JFS: discard option not supported on device [ 402.134788][ T9723] Mount JFS Failure: -22 [ 402.139112][ T9723] jfs_mount failed w/return code = -22 [ 403.546131][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 403.780033][ T9733] unsupported nlmsg_type 40 [ 405.876225][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 408.765594][ T9788] binder: BINDER_SET_CONTEXT_MGR already set [ 408.771628][ T9788] binder: 9787:9788 ioctl 4018620d 200000000040 returned -16 [ 409.632938][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 409.632954][ T30] audit: type=1400 audit(2000000577.994:524): avc: denied { watch } for pid=9791 comm="syz.0.1117" path="/236/file1" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.785368][ T30] audit: type=1400 audit(2000000577.994:525): avc: denied { watch_sb } for pid=9791 comm="syz.0.1117" path="/236/file1" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 410.643828][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 410.708887][ T9814] lo speed is unknown, defaulting to 1000 [ 410.944532][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 410.980098][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.991894][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.473194][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 411.488085][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 411.500804][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 411.510231][ T10] usb 3-1: Manufacturer: syz [ 411.933669][ T10] usb 3-1: config 0 descriptor?? [ 412.454590][ T10] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 412.486408][ T10] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 413.403103][ T5894] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 414.478627][ T5894] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 414.488451][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.497018][ T5894] usb 5-1: Product: syz [ 414.503775][ T5894] usb 5-1: Manufacturer: syz [ 414.508970][ T5894] usb 5-1: SerialNumber: syz [ 414.724279][ T5894] usb 5-1: config 0 descriptor?? [ 415.692564][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 415.728339][ T5894] usb 5-1: setting power ON [ 416.009961][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 416.018929][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 416.214426][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 416.250992][ T5894] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 416.363646][ T5894] usb 5-1: USB disconnect, device number 11 [ 416.663247][ T9877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1136'. [ 416.703226][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1136'. [ 416.898264][ T5887] usb 3-1: USB disconnect, device number 10 [ 417.513098][ T30] audit: type=1400 audit(2000000585.434:526): avc: denied { map } for pid=9872 comm="syz.1.1137" path="socket:[23687]" dev="sockfs" ino=23687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 417.959800][ T30] audit: type=1326 audit(2000000586.364:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.098271][ T30] audit: type=1326 audit(2000000586.364:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.228414][ T30] audit: type=1326 audit(2000000586.364:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.329221][ T30] audit: type=1326 audit(2000000586.364:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.390752][ T30] audit: type=1326 audit(2000000586.364:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.416539][ T30] audit: type=1326 audit(2000000586.364:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.442480][ T30] audit: type=1326 audit(2000000586.364:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.469447][ T30] audit: type=1326 audit(2000000586.364:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 418.493471][ T30] audit: type=1326 audit(2000000586.364:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9888 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x7ffc0000 [ 419.651584][ T9921] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.474050][ T8830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.045833][ T8830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.399606][ T9958] lo speed is unknown, defaulting to 1000 [ 423.799621][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 423.983789][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 424.083765][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.286074][ T5887] usb 1-1: config 0 descriptor?? [ 424.402234][ T5887] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 424.919199][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 424.919249][ T30] audit: type=1400 audit(2000000593.194:549): avc: denied { connect } for pid=9993 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 425.324761][ T30] audit: type=1400 audit(2000000593.204:550): avc: denied { bind } for pid=9993 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 425.842898][ T30] audit: type=1400 audit(2000000594.164:551): avc: denied { bind } for pid=10000 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 426.758914][ T5887] usb 1-1: USB disconnect, device number 12 [ 431.929079][T10057] lo speed is unknown, defaulting to 1000 [ 436.468553][ T30] audit: type=1400 audit(2000000604.874:552): avc: denied { setopt } for pid=10099 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.638488][ T30] audit: type=1804 audit(2000000605.044:553): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1202" name="/newroot/243/file1" dev="fuse" ino=1 res=1 errno=0 [ 438.168066][ T30] audit: type=1326 audit(2000000606.574:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.205829][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 438.215551][ T30] audit: type=1326 audit(2000000606.594:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.240483][ T30] audit: type=1326 audit(2000000606.604:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.263797][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.271861][ T30] audit: type=1326 audit(2000000606.604:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.296700][ T30] audit: type=1326 audit(2000000606.604:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.364174][ T30] audit: type=1326 audit(2000000606.604:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.410324][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.432068][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.442719][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 438.451891][ T30] audit: type=1326 audit(2000000606.604:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.638818][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.876225][ T30] audit: type=1326 audit(2000000606.604:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816b18e929 code=0x7ffc0000 [ 438.899623][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.912334][ T10] usb 4-1: config 0 descriptor?? [ 439.652580][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 439.654595][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.661885][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 439.676644][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.706430][ T10] usb 4-1: USB disconnect, device number 17 [ 439.866142][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.872670][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.465165][T10151] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.739404][ T6667] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 443.894778][ T6667] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.147371][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 444.153792][ T30] audit: type=1400 audit(2000000612.554:583): avc: denied { bind } for pid=10189 comm="syz.0.1227" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 444.886706][ T6667] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 444.903980][ T6667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 444.922974][ T6667] usb 4-1: Product: syz [ 444.930246][ T6667] usb 4-1: Manufacturer: syz [ 444.940619][ T6667] usb 4-1: SerialNumber: syz [ 444.948455][ T30] audit: type=1400 audit(2000000612.554:584): avc: denied { name_bind } for pid=10189 comm="syz.0.1227" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 445.022348][ T30] audit: type=1400 audit(2000000612.554:585): avc: denied { node_bind } for pid=10189 comm="syz.0.1227" saddr=172.20.20.12 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 445.172153][ T6667] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 445.666472][T10208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.157633][ T10] usb 4-1: USB disconnect, device number 18 [ 447.917593][ T10] usblp0: removed [ 447.982756][ T6667] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 448.763710][T10234] veth0: entered promiscuous mode [ 448.773542][ T6667] usb 1-1: Using ep0 maxpacket: 16 [ 448.814530][ T6667] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 448.839631][ T6667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.862448][ T6667] usb 1-1: config 0 has no interface number 0 [ 448.878743][T10232] could not allocate digest TFM handle sha256-ce [ 448.881860][ T6667] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 448.912577][ T6667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.112211][T10231] veth0: left promiscuous mode [ 449.117406][ T6667] usb 1-1: Product: syz [ 449.132855][ T6667] usb 1-1: Manufacturer: syz [ 449.897057][ T6667] usb 1-1: SerialNumber: syz [ 450.148509][ T6667] usb 1-1: config 0 descriptor?? [ 450.154997][ T6667] usb 1-1: can't set config #0, error -71 [ 450.171874][ T6667] usb 1-1: USB disconnect, device number 13 [ 450.900131][ T30] audit: type=1326 audit(2000000619.304:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.3.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e238e929 code=0x0 [ 450.929884][ T10] IPVS: starting estimator thread 0... [ 451.213737][T10272] IPVS: using max 38 ests per chain, 91200 per kthread [ 451.718125][ T30] audit: type=1400 audit(2000000620.124:587): avc: denied { name_connect } for pid=10283 comm="syz.2.1252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 452.054001][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 453.028493][T10311] netfs: Couldn't get user pages (rc=-14) [ 468.390302][T10457] Invalid source name [ 468.394404][T10457] UBIFS error (pid: 10457): cannot open "./file0", error -22 [ 468.807704][T10458] ======================================================= [ 468.807704][T10458] WARNING: The mand mount option has been deprecated and [ 468.807704][T10458] and is ignored by this kernel. Remove the mand [ 468.807704][T10458] option from the mount to silence this warning. [ 468.807704][T10458] ======================================================= [ 468.862405][ T30] audit: type=1400 audit(2000000636.794:588): avc: denied { mounton } for pid=10451 comm="syz.1.1296" path="/263/file0" dev="tmpfs" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 470.142871][T10471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.414097][ T51] Bluetooth: hci1: unexpected event for opcode 0x200d [ 472.589408][T10493] overlayfs: failed to clone upperpath [ 472.806948][T10500] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1308'. [ 473.133318][T10499] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1309'. [ 473.911482][ T30] audit: type=1400 audit(2000000642.314:589): avc: denied { ioctl } for pid=10513 comm="syz.3.1314" path="socket:[25692]" dev="sockfs" ino=25692 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 474.375057][T10520] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 475.208021][T10520] lo speed is unknown, defaulting to 1000 [ 482.651065][ T30] audit: type=1400 audit(2000000651.024:590): avc: denied { create } for pid=10681 comm="syz.2.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 482.671118][ T30] audit: type=1400 audit(2000000651.024:591): avc: denied { setopt } for pid=10681 comm="syz.2.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.512879][ T6666] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 485.072731][ T6666] usb 2-1: Using ep0 maxpacket: 8 [ 485.174938][ T6666] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.233162][ T6666] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.270110][ T6666] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.341157][ T6666] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 485.351966][ T6666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.380726][ T6666] usb 2-1: config 0 descriptor?? [ 485.808396][ T6666] steelseries 0003:1038:1410.0006: unknown main item tag 0x0 [ 485.816609][ T6666] steelseries 0003:1038:1410.0006: unknown main item tag 0x0 [ 485.824980][ T6666] steelseries 0003:1038:1410.0006: unknown main item tag 0x0 [ 485.832505][ T6666] steelseries 0003:1038:1410.0006: unknown main item tag 0x0 [ 486.309928][ T6666] steelseries 0003:1038:1410.0006: unknown main item tag 0x0 [ 486.337387][ T6666] steelseries 0003:1038:1410.0006: missing HID_OUTPUT_REPORT 0 [ 487.347232][ T10] usb 2-1: USB disconnect, device number 13 [ 491.836511][ T5972] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 492.555500][T10761] syz.1.1356 (10761): drop_caches: 2 [ 492.574432][T10761] syz.1.1356 (10761): drop_caches: 2 [ 493.042428][ T5972] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.089932][ T5972] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 493.391034][ T5972] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 493.475622][ T5972] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.508075][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.529001][ T30] audit: type=1400 audit(2000000661.874:592): avc: denied { accept } for pid=10765 comm="syz.2.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 493.723007][ T6671] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 493.870872][T10756] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.880660][ T5972] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.072011][ T6671] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 494.090162][ T6671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.211416][ T6671] usb 2-1: config 0 descriptor?? [ 494.440310][ T6671] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 494.644530][ T6666] usb 2-1: USB disconnect, device number 14 [ 495.824980][T10787] vivid-001: kernel_thread() failed [ 496.961292][T10799] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 496.961767][T10798] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 496.974847][T10799] Error validating options; rc = [-22] [ 496.988637][T10798] netlink: 'syz.3.1363': attribute type 2 has an invalid length. [ 496.996903][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 497.609696][ T6671] usb 1-1: USB disconnect, device number 14 [ 497.696363][ T6667] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 498.412793][ T6667] usb 4-1: Using ep0 maxpacket: 16 [ 498.666686][ T6667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.002790][ T6667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.034740][ T6667] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 499.056374][ T6667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.197218][ T6667] usb 4-1: config 0 descriptor?? [ 501.312442][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.366454][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.616344][ T6667] usbhid 4-1:0.0: can't add hid device: -71 [ 503.622383][ T6667] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 503.681366][T10835] netlink: 'syz.0.1374': attribute type 4 has an invalid length. [ 503.718004][ T6667] usb 4-1: USB disconnect, device number 19 [ 503.834240][ T30] audit: type=1800 audit(2000000672.234:593): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1375" name="bus" dev="overlay" ino=1555 res=0 errno=0 [ 505.243820][T10848] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 506.790415][T10853] loop9: detected capacity change from 0 to 8 [ 506.799874][T10853] Dev loop9: unable to read RDB block 8 [ 506.805483][T10853] loop9: unable to read partition table [ 506.811229][T10853] loop9: partition table beyond EOD, truncated [ 506.817532][T10853] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 507.063822][T10869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.652794][ T6666] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 509.826392][ T6666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.393905][ T6666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.416515][ T6666] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.500887][ T6666] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 510.536417][ T6666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.627887][ T6666] usb 3-1: config 0 descriptor?? [ 511.400117][T10910] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 511.427070][T10910] CIFS: Unable to determine destination address [ 511.954622][T10917] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 512.107117][T10917] netlink: 'syz.4.1397': attribute type 2 has an invalid length. [ 512.888821][ T30] audit: type=1400 audit(2000000681.294:594): avc: denied { listen } for pid=10918 comm="syz.3.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.276985][ T6666] usbhid 3-1:0.0: can't add hid device: -71 [ 513.300964][ T6666] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 513.356241][ T6666] usb 3-1: USB disconnect, device number 11 [ 513.905102][ T30] audit: type=1400 audit(2000000682.314:595): avc: denied { getopt } for pid=10930 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 518.420158][ T30] audit: type=1400 audit(2000000686.504:596): avc: denied { read } for pid=10961 comm="syz.3.1408" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 518.961580][ T30] audit: type=1400 audit(2000000686.514:597): avc: denied { open } for pid=10961 comm="syz.3.1408" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 518.961624][ T30] audit: type=1400 audit(2000000686.514:598): avc: denied { ioctl } for pid=10961 comm="syz.3.1408" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 519.006181][T10974] binder: 10973:10974 ioctl 40046210 0 returned -14 [ 519.025074][ T30] audit: type=1400 audit(2000000687.424:599): avc: denied { listen } for pid=10968 comm="syz.2.1410" lport=32871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.105117][ T30] audit: type=1400 audit(2000000687.514:600): avc: denied { accept } for pid=10968 comm="syz.2.1410" lport=32871 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.343971][T10972] sctp: failed to load transform for md5: -2 [ 519.345374][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 521.178213][ T30] audit: type=1400 audit(2000000689.584:601): avc: denied { create } for pid=10993 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 522.250158][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.333744][T11003] vlan2: entered promiscuous mode [ 522.338888][T11003] vlan2: entered allmulticast mode [ 522.344687][T11003] hsr_slave_1: entered allmulticast mode [ 522.413597][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 523.225490][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 523.252422][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 524.120377][T11027] CIFS mount error: No usable UNC path provided in device string! [ 524.120377][T11027] [ 524.130871][T11027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.502388][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 526.858244][ T30] audit: type=1400 audit(2000000695.264:602): avc: denied { name_bind } for pid=11052 comm="syz.0.1433" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 526.931493][ T30] audit: type=1400 audit(2000000695.264:603): avc: denied { node_bind } for pid=11052 comm="syz.0.1433" saddr=172.20.20.170 src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 527.089020][T11061] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 527.682955][T11061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.835463][T11065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.846773][T11065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.857097][T11065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.011111][T11065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.671193][T11065] bond1: (slave geneve2): making interface the new active one [ 528.680153][T11065] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 528.914043][T11061] veth5: entered promiscuous mode [ 529.454014][T11061] bond1: (slave veth5): Enslaving as an active interface with a down link [ 529.664275][T11083] block device autoloading is deprecated and will be removed. [ 529.678604][T11083] syz.3.1439: attempt to access beyond end of device [ 529.678604][T11083] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 529.768175][T11065] vlan3: entered allmulticast mode [ 529.952222][T11065] bond1: entered allmulticast mode [ 530.480771][T11065] geneve2: entered allmulticast mode [ 530.567286][T11065] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 533.236664][T11113] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 533.583795][T11113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.897350][T11117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.937655][T11117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.955261][T11117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.966562][T11117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.981930][T11125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.208854][T11117] bond2: (slave geneve2): making interface the new active one [ 534.256520][T11117] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 534.541744][T11113] bond2: entered promiscuous mode [ 534.546988][T11113] geneve2: entered promiscuous mode [ 534.643889][T11126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.672206][T11126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.692513][T11126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.091652][ T5880] IPVS: starting estimator thread 0... [ 535.186178][ T8822] Bluetooth: Error in BCSP hdr checksum [ 535.200441][T11137] IPVS: using max 61 ests per chain, 146400 per kthread [ 535.253060][ T6671] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 535.402713][ T6671] usb 3-1: Using ep0 maxpacket: 32 [ 535.515640][ T8822] Bluetooth: Error in BCSP hdr checksum [ 535.524208][ T6671] usb 3-1: unable to get BOS descriptor or descriptor too short [ 535.539244][ T6671] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 535.547560][ T6671] usb 3-1: config 0 has no interface number 0 [ 535.580263][ T6671] usb 3-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 535.592309][ T6671] usb 3-1: config 0 interface 143 has no altsetting 0 [ 535.607267][ T6671] usb 3-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 535.619564][ T6671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.630216][ T6671] usb 3-1: Product: syz [ 535.639210][ T6671] usb 3-1: Manufacturer: syz [ 535.644110][ T6671] usb 3-1: SerialNumber: syz [ 535.659464][ T6671] r8152-cfgselector 3-1: Unknown version 0x0000 [ 535.669558][ T6671] r8152-cfgselector 3-1: config 0 descriptor?? [ 535.680903][ T6671] r8152 3-1:0.143: Expected endpoints are not found [ 535.774569][ T8840] Bluetooth: Error in BCSP hdr checksum [ 535.950776][ T6671] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 536.733113][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 536.740166][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 536.759612][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 537.360238][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 537.380716][T11147] Bluetooth: hci5: command 0x1003 tx timeout [ 538.211113][T11155] lo: entered allmulticast mode [ 538.223311][T11155] pimreg: entered allmulticast mode [ 538.487162][ T30] audit: type=1400 audit(2000000706.894:604): avc: denied { execute } for pid=11158 comm="syz.3.1460" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.174843][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 540.183875][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 540.550156][T11180] wireguard0: entered promiscuous mode [ 540.559240][T11180] wireguard0: entered allmulticast mode [ 541.483369][ T6671] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 541.542961][T11201] misc userio: No port type given on /dev/userio [ 541.557144][T11199] delete_channel: no stack [ 541.654241][T11202] lo speed is unknown, defaulting to 1000 [ 541.655775][ T6671] usb 1-1: Using ep0 maxpacket: 32 [ 541.722797][ T5972] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 541.845370][ T6671] usb 1-1: unable to get BOS descriptor or descriptor too short [ 541.860437][ T6671] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 541.876803][ T6671] usb 1-1: can't read configurations, error -71 [ 541.892735][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 541.901964][ T5972] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 541.910329][ T5972] usb 4-1: config 0 has no interface number 0 [ 541.921809][ T5972] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 541.941978][ T5972] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 541.961036][ T5972] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 541.984895][ T5972] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 541.994092][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 542.009278][ T5972] usb 4-1: Product: syz [ 542.016868][ T5972] usb 4-1: SerialNumber: syz [ 542.035647][ T5972] usb 4-1: config 0 descriptor?? [ 542.051657][ T5972] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 542.068828][ T5972] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 542.899392][T11198] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 542.931101][T11198] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 542.964337][T11196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.981752][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 542.991046][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 542.998878][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.006737][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.014189][ T6671] usb 4-1: USB disconnect, device number 20 [ 543.020194][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.020228][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 543.157293][ T6671] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 546.760905][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 553.235693][ T30] audit: type=1400 audit(2000000721.394:605): avc: denied { create } for pid=11283 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 553.353706][ T30] audit: type=1400 audit(2000000721.394:606): avc: denied { write } for pid=11283 comm="syz.3.1494" path="socket:[27675]" dev="sockfs" ino=27675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 553.647063][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 555.399180][ T30] audit: type=1400 audit(2000000723.784:607): avc: denied { create } for pid=11309 comm="syz.3.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 556.265806][T11323] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1502'. [ 558.505733][ T30] audit: type=1400 audit(2000000726.914:608): avc: denied { ioctl } for pid=11339 comm="syz.2.1508" path="socket:[27193]" dev="sockfs" ino=27193 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 559.609284][ T30] audit: type=1400 audit(2000000727.354:609): avc: denied { name_bind } for pid=11340 comm="syz.4.1509" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 560.630981][ T30] audit: type=1400 audit(2000000728.154:610): avc: denied { cmd } for pid=11355 comm="syz.0.1513" path="socket:[27214]" dev="sockfs" ino=27214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 561.587034][ T30] audit: type=1400 audit(2000000729.994:611): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.639334][T11360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.661129][T11360] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 561.855323][ T30] audit: type=1400 audit(2000000729.994:612): avc: denied { open } for pid=11345 comm="syz.3.1510" path="/310/file0" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.186186][ T30] audit: type=1400 audit(2000000729.994:613): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.215766][T11360] audit: backlog limit exceeded [ 562.220718][ T30] audit: type=1400 audit(2000000729.994:614): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 563.013171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.019611][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.554675][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 563.554692][ T30] audit: type=1400 audit(2000000731.964:728): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 563.721778][ T30] audit: type=1400 audit(2000000731.994:729): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 563.755122][ T30] audit: type=1400 audit(2000000731.994:730): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 563.768712][T11360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.602803][ T30] audit: type=1400 audit(2000000731.994:731): avc: denied { read } for pid=11345 comm="syz.3.1510" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 564.683019][T11360] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 564.690702][T11360] audit: backlog limit exceeded [ 564.696647][T11360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.703409][T11360] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 564.711049][T11360] audit: backlog limit exceeded [ 567.831250][T11426] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 570.380243][T11436] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 571.160591][T11436] picdev_read: 1 callbacks suppressed [ 571.160608][T11436] kvm: pic: non byte read [ 571.224246][T11436] kvm: pic: level sensitive irq not supported [ 571.243098][T11436] kvm: pic: non byte read [ 571.542579][T11436] kvm: pic: level sensitive irq not supported [ 571.562857][T11436] kvm: pic: non byte read [ 571.661131][T11458] sctp: failed to load transform for md5: -2 [ 572.487713][ T5894] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 573.144546][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.154783][ T5894] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 573.182004][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.197358][ T5894] usb 3-1: config 0 descriptor?? [ 573.207469][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 573.435952][ T5894] pwc: send_video_command error -71 [ 573.444884][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 573.452514][ T5894] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 573.502087][ T5894] usb 3-1: USB disconnect, device number 13 [ 574.090703][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 574.356117][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 574.357374][ T30] audit: type=1400 audit(2000000742.764:797): avc: denied { accept } for pid=11484 comm="syz.3.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.032707][ T5894] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 575.909342][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 576.053250][ T5894] usb 3-1: device descriptor read/64, error -32 [ 579.840527][T11536] vivid-000: ================= START STATUS ================= [ 579.849920][T11536] vivid-000: Radio HW Seek Mode: Bounded [ 579.856439][T11536] vivid-000: Radio Programmable HW Seek: false [ 579.864694][T11536] vivid-000: RDS Rx I/O Mode: Block I/O [ 579.870572][T11536] vivid-000: Generate RBDS Instead of RDS: false [ 579.877763][T11536] vivid-000: RDS Reception: true [ 579.883365][T11536] vivid-000: RDS Program Type: 0 inactive [ 579.891578][T11536] vivid-000: RDS PS Name: inactive [ 579.897373][T11536] vivid-000: RDS Radio Text: inactive [ 579.903308][T11536] vivid-000: RDS Traffic Announcement: false inactive [ 579.910304][T11536] vivid-000: RDS Traffic Program: false inactive [ 579.917077][T11536] vivid-000: RDS Music: false inactive [ 579.923215][T11536] vivid-000: ================== END STATUS ================== [ 583.653880][T11583] lo speed is unknown, defaulting to 1000 [ 585.052821][ T5894] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 586.222674][ T5894] usb 4-1: device descriptor read/64, error -71 [ 586.492769][ T5894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 586.653512][ T5894] usb 4-1: device descriptor read/64, error -71 [ 586.774803][ T5894] usb usb4-port1: attempt power cycle [ 587.232799][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 587.776859][ T5894] usb 4-1: device descriptor read/8, error -71 [ 587.855342][ T30] audit: type=1400 audit(2000000756.264:798): avc: denied { create } for pid=11611 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 588.092890][ T30] audit: type=1400 audit(2000000756.474:799): avc: denied { write } for pid=11611 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 590.146951][ T30] audit: type=1400 audit(2000000758.524:800): avc: denied { accept } for pid=11625 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 590.409645][ T30] audit: type=1400 audit(2000000758.584:801): avc: denied { listen } for pid=11625 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 591.704034][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 591.844697][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 592.728238][T11667] delete_channel: no stack [ 595.479717][T11690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 595.528391][ T30] audit: type=1400 audit(2000000763.894:802): avc: denied { bind } for pid=11682 comm="syz.1.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 598.802077][T11718] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1602'. [ 599.873294][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 600.169118][T11732] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 600.202794][ T6671] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 600.235629][T11732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.366945][ T6671] usb 4-1: Using ep0 maxpacket: 8 [ 600.376793][ T30] audit: type=1400 audit(2000000768.784:803): avc: denied { write } for pid=11731 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 600.399089][ T6671] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.422167][T11732] bond3: (slave gretap1): making interface the new active one [ 600.447560][T11732] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 600.602767][ T6671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.610923][ T6671] usb 4-1: Product: syz [ 600.646753][ T6671] usb 4-1: Manufacturer: syz [ 600.651406][ T6671] usb 4-1: SerialNumber: syz [ 600.993607][ T6671] usb 4-1: config 0 descriptor?? [ 601.901572][ T6671] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.825916][T11775] lo speed is unknown, defaulting to 1000 [ 603.889081][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 604.034169][ T6671] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 604.064476][ T6671] usb 4-1: USB disconnect, device number 25 [ 607.053172][ T30] audit: type=1400 audit(2000000775.454:804): avc: denied { read } for pid=11803 comm="syz.0.1625" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 607.097165][T11804] md2: using deprecated bitmap file support [ 607.146092][ T30] audit: type=1400 audit(2000000775.454:805): avc: denied { open } for pid=11803 comm="syz.0.1625" path="/323/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 607.190414][ T30] audit: type=1400 audit(2000000775.464:806): avc: denied { ioctl } for pid=11803 comm="syz.0.1625" path="/323/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 608.322794][ T5972] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 608.816400][T11824] misc userio: No port type given on /dev/userio [ 608.835968][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 609.381906][ T30] audit: type=1400 audit(2000000777.254:807): avc: denied { read } for pid=11819 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 610.001995][T11825] overlayfs: failed to clone upperpath [ 610.027915][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.042973][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 610.080494][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.230618][ T5972] usb 3-1: config 0 descriptor?? [ 610.279923][ T5972] usb 3-1: can't set config #0, error -71 [ 610.384375][ T5972] usb 3-1: USB disconnect, device number 16 [ 610.722847][ T30] audit: type=1400 audit(2000000778.734:808): avc: denied { setopt } for pid=11826 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 611.792993][T11835] input: syz1 as /devices/virtual/input/input18 [ 617.198159][T11862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 617.226227][T11862] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 617.471463][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 617.668293][T11862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 617.683512][T11862] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 617.685198][T11862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 617.816082][T11862] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 621.453120][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.462093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.633333][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.787871][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.796733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.809499][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.818101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.866659][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.874871][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.883015][T11926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.104597][ T30] audit: type=1400 audit(2000000791.114:809): avc: denied { map } for pid=11939 comm="syz.3.1659" path="socket:[29895]" dev="sockfs" ino=29895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 623.378988][T11936] kvm: kvm [11933]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 623.412950][T11936] kvm: kvm [11933]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x80 [ 624.558000][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.852734][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.382934][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 625.556335][T11978] bridge3: port 1(veth0_to_bond) entered blocking state [ 625.595050][T11978] bridge3: port 1(veth0_to_bond) entered disabled state [ 625.647869][T11978] veth0_to_bond: entered allmulticast mode [ 625.664198][T11978] veth0_to_bond: entered promiscuous mode [ 625.689471][T11973] vlan3: entered allmulticast mode [ 626.024590][ T30] audit: type=1400 audit(2000000794.334:810): avc: denied { setattr } for pid=11979 comm="syz.0.1668" name="NETLINK" dev="sockfs" ino=29928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 626.060297][T11973] bridge3: port 2(vlan3) entered blocking state [ 626.178640][T11973] bridge3: port 2(vlan3) entered disabled state [ 626.203778][T11973] vlan3: entered promiscuous mode [ 626.209049][T11973] veth1: entered promiscuous mode [ 628.452407][T12017] lo speed is unknown, defaulting to 1000 [ 629.438321][ T30] audit: type=1400 audit(2000000797.654:811): avc: denied { ioctl } for pid=12019 comm="syz.0.1679" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 629.463432][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.085389][T12030] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 630.720355][ T30] audit: type=1400 audit(2000000798.744:812): avc: denied { connect } for pid=12031 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 630.886223][T12030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 631.397641][ T30] audit: type=1400 audit(2000000799.774:813): avc: denied { write } for pid=12041 comm="syz.0.1683" path="socket:[29263]" dev="sockfs" ino=29263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 632.150437][ T30] audit: type=1400 audit(2000000799.974:814): avc: denied { mount } for pid=12039 comm="syz.4.1682" name="/" dev="rpc_pipefs" ino=29271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 632.263983][T12030] bond4: (slave gretap2): making interface the new active one [ 632.268189][T12030] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 632.413380][T12054] net_ratelimit: 7 callbacks suppressed [ 632.413400][T12054] netlink: zone id is out of range [ 632.455583][T12054] netlink: zone id is out of range [ 632.461865][T12054] netlink: del zone limit has 4 unknown bytes [ 633.726455][T12069] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 633.806368][T12069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.378664][T12069] ipvlan2: entered allmulticast mode [ 634.384269][T12069] bond2: entered allmulticast mode [ 634.455755][T12069] bond2: (slave gretap1): making interface the new active one [ 634.477955][T12069] gretap1: entered allmulticast mode [ 635.141512][T12069] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 636.128546][ T30] audit: type=1400 audit(2000000804.144:815): avc: denied { setopt } for pid=12094 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 636.842766][ T5894] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 637.434645][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 637.446720][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.505881][ T5894] usb 4-1: config 0 descriptor?? [ 637.528707][ T5894] lan78xx 4-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 637.549701][ T5894] lan78xx 4-1:0.0: probe with driver lan78xx failed with error -5 [ 638.769032][ T5894] usb 4-1: USB disconnect, device number 26 [ 639.450675][T12128] sp0: Synchronizing with TNC [ 640.142726][T12137] hfsplus: unable to find HFS+ superblock [ 641.201453][T12126] [U] è [ 642.409035][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 643.967757][ T30] audit: type=1400 audit(2000000812.054:816): avc: denied { ioctl } for pid=12151 comm="syz.4.1716" path="socket:[29461]" dev="sockfs" ino=29461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 646.277655][T12185] Invalid source name [ 646.281849][T12185] UBIFS error (pid: 12185): cannot open "/dev/sg0", error -22 [ 646.302814][ T5972] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 646.482771][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 646.493046][ T5972] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 646.512643][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.525281][ T5972] usb 4-1: Product: syz [ 646.607792][ T5972] usb 4-1: Manufacturer: syz [ 646.636188][ T5972] usb 4-1: SerialNumber: syz [ 646.817099][ T5972] usb 4-1: config 0 descriptor?? [ 647.106168][ T30] audit: type=1400 audit(2000000815.504:817): avc: denied { create } for pid=12187 comm="syz.4.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 647.186904][ T5972] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 647.241332][ T5972] usb 4-1: setting power ON [ 647.246046][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 647.374810][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.907381][ T5972] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 648.907447][ T5972] usb 4-1: media controller created [ 648.922032][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.946889][ T5972] usb 4-1: selecting invalid altsetting 6 [ 648.946929][ T5972] usb 4-1: digital interface selection failed (-22) [ 648.946938][ T5972] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 648.961663][ T5972] usb 4-1: setting power OFF [ 648.961724][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 648.961749][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 648.961762][ T5972] (NULL device *): no alternate interface [ 649.948778][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 651.743454][ T6667] usb 4-1: USB disconnect, device number 27 [ 651.778210][T12210] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 651.784777][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.805636][T12210] vhci_hcd vhci_hcd.0: Device attached [ 651.819010][T12210] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 651.825550][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 651.850409][T12210] vhci_hcd vhci_hcd.0: Device attached [ 651.870112][T12210] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 651.876829][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 651.928123][T12210] vhci_hcd vhci_hcd.0: Device attached [ 652.060976][T12222] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 652.062829][ T5972] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 652.067602][T12222] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 652.095683][T12222] vhci_hcd vhci_hcd.0: Device attached [ 652.671870][T12210] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 652.678499][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 652.772003][T12210] vhci_hcd vhci_hcd.0: Device attached [ 652.999887][T12224] vhci_hcd: connection closed [ 653.000029][T12215] vhci_hcd: connection closed [ 653.000193][ T8830] vhci_hcd: stop threads [ 653.005996][T12225] vhci_hcd: connection closed [ 653.014788][T12220] vhci_hcd: connection closed [ 653.022695][T12211] vhci_hcd: connection reset by peer [ 653.288374][ T8830] vhci_hcd: release socket [ 653.474556][ T8830] vhci_hcd: disconnect device [ 653.674982][ T8830] vhci_hcd: stop threads [ 653.700046][ T8830] vhci_hcd: release socket [ 653.705897][ T8830] vhci_hcd: disconnect device [ 654.055150][ T8830] vhci_hcd: stop threads [ 654.060839][ T8830] vhci_hcd: release socket [ 654.197654][ T8830] vhci_hcd: disconnect device [ 654.460159][ T8830] vhci_hcd: stop threads [ 654.483506][ T8830] vhci_hcd: release socket [ 654.512722][ T8830] vhci_hcd: disconnect device [ 654.527992][ T8830] vhci_hcd: stop threads [ 654.532290][ T8830] vhci_hcd: release socket [ 654.552673][ T8830] vhci_hcd: disconnect device [ 655.252138][ T30] audit: type=1400 audit(2000000823.344:818): avc: denied { mount } for pid=12251 comm="syz.4.1738" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 655.746209][T12250] delete_channel: no stack [ 656.207974][T12271] /dev/nullb0: Can't open blockdev [ 657.392806][ T5972] vhci_hcd: vhci_device speed not set [ 657.568504][T12281] syz_tun: left allmulticast mode [ 661.539044][T12314] trusted_key: encrypted_key: key user:syz not found [ 662.146416][T12315] usb usb8: usbfs: process 12315 (syz.0.1755) did not claim interface 0 before use [ 662.453872][T12326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.117125][T12328] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1756'. [ 664.611841][T12340] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1764'. [ 665.912903][ T30] audit: type=1400 audit(2000000833.914:819): avc: denied { create } for pid=12342 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 666.547287][ T30] audit: type=1400 audit(2000000833.924:820): avc: denied { write } for pid=12342 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 666.567433][ T30] audit: type=1400 audit(2000000834.344:821): avc: denied { prog_load } for pid=12350 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.591456][ T30] audit: type=1400 audit(2000000834.344:822): avc: denied { bpf } for pid=12350 comm="syz.4.1766" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.674771][ T30] audit: type=1400 audit(2000000834.344:823): avc: denied { perfmon } for pid=12350 comm="syz.4.1766" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.739022][ T30] audit: type=1400 audit(2000000834.344:824): avc: denied { prog_run } for pid=12347 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.765618][ T30] audit: type=1400 audit(2000000834.444:825): avc: denied { execmem } for pid=12350 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 666.889314][ T30] audit: type=1400 audit(2000000834.604:826): avc: denied { create } for pid=12347 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 666.942084][ T30] audit: type=1400 audit(2000000834.614:827): avc: denied { bind } for pid=12347 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 666.972948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.002478][ T30] audit: type=1400 audit(2000000834.834:828): avc: denied { create } for pid=12350 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 670.627516][T12387] overlayfs: failed to clone upperpath [ 672.335492][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 672.335527][ T30] audit: type=1400 audit(2000000840.504:860): avc: denied { read } for pid=12392 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 672.605283][ T30] audit: type=1400 audit(2000000840.534:861): avc: denied { firmware_load } for pid=12392 comm="syz.2.1778" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 673.396306][ T30] audit: type=1400 audit(2000000841.404:862): avc: denied { node_bind } for pid=12396 comm="syz.3.1780" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 673.446574][ T30] audit: type=1400 audit(2000000841.774:863): avc: denied { map_create } for pid=12398 comm="syz.0.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.864112][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 673.912732][ T30] audit: type=1400 audit(2000000841.784:864): avc: denied { map_read map_write } for pid=12398 comm="syz.0.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 674.084282][ T30] audit: type=1400 audit(2000000842.274:865): avc: denied { create } for pid=12400 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 674.209694][ T30] audit: type=1400 audit(2000000842.274:866): avc: denied { write } for pid=12400 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 674.491680][T12420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 674.533836][ T30] audit: type=1400 audit(2000000842.344:867): avc: denied { read } for pid=12403 comm="syz.1.1782" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 675.275139][ T30] audit: type=1400 audit(2000000842.344:868): avc: denied { open } for pid=12403 comm="syz.1.1782" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 675.299362][ T30] audit: type=1400 audit(2000000842.454:869): avc: denied { read } for pid=12403 comm="syz.1.1782" dev="nsfs" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 676.411122][T12432] IPVS: Error connecting to the multicast addr [ 678.912959][T12443] usb usb8: usbfs: process 12443 (syz.1.1790) did not claim interface 0 before use [ 678.931626][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 678.931661][ T30] audit: type=1400 audit(2000000847.304:881): avc: denied { write } for pid=12440 comm="syz.1.1790" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 679.622160][T12449] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 679.630431][T12449] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 679.639870][T12449] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 679.647737][T12449] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 679.984453][ T30] audit: type=1400 audit(2000000848.014:882): avc: denied { create } for pid=12444 comm="syz.4.1792" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 680.287643][ T30] audit: type=1400 audit(2000000848.684:883): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 680.627522][ T30] audit: type=1400 audit(2000000849.014:884): avc: denied { read write } for pid=12451 comm="syz.1.1793" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 680.716318][T12456] use of bytesused == 0 is deprecated and will be removed in the future, [ 680.725369][T12456] use the actual size instead. [ 681.612853][ T30] audit: type=1400 audit(2000000849.014:885): avc: denied { open } for pid=12451 comm="syz.1.1793" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 681.820909][ T30] audit: type=1400 audit(2000000849.024:886): avc: denied { ioctl } for pid=12451 comm="syz.1.1793" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 682.802457][ T30] audit: type=1400 audit(2000000849.944:887): avc: denied { create } for pid=12453 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 683.572669][ T30] audit: type=1400 audit(2000000849.994:888): avc: denied { wake_alarm } for pid=12453 comm="syz.4.1794" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.620771][ T30] audit: type=1400 audit(2000000849.994:889): avc: denied { getopt } for pid=12453 comm="syz.4.1794" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 684.373434][ T30] audit: type=1400 audit(2000000850.434:890): avc: denied { ioctl } for pid=12459 comm="syz.4.1797" path="socket:[30639]" dev="sockfs" ino=30639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.552175][ T30] audit: type=1400 audit(2000000850.434:891): avc: denied { setopt } for pid=12459 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.576552][ T30] audit: type=1400 audit(2000000850.434:892): avc: denied { write } for pid=12459 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 685.555291][ T30] audit: type=1400 audit(2000000851.974:893): avc: denied { read write } for pid=12465 comm="syz.3.1798" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 685.579348][ T30] audit: type=1400 audit(2000000851.974:894): avc: denied { open } for pid=12465 comm="syz.3.1798" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 685.619135][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.628871][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.240822][ T30] audit: type=1400 audit(2000000854.384:895): avc: denied { mount } for pid=12477 comm="syz.2.1800" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 686.654368][ T30] audit: type=1400 audit(2000000855.064:896): avc: denied { write } for pid=12482 comm="syz.4.1802" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 686.800785][ T30] audit: type=1400 audit(2000000855.204:897): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 686.948965][ T30] audit: type=1400 audit(2000000855.274:898): avc: denied { create } for pid=12488 comm="syz.0.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 687.050256][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 687.294265][ T30] audit: type=1400 audit(2000000855.704:899): avc: denied { mounton } for pid=12493 comm="syz.2.1804" path="/348/file0" dev="tmpfs" ino=1838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 687.795233][T12503] hub 8-0:1.0: USB hub found [ 687.821134][T12505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1806'. [ 687.886845][T12503] hub 8-0:1.0: 1 port detected [ 690.352126][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 690.352172][ T30] audit: type=1400 audit(2000000858.754:909): avc: denied { map } for pid=12528 comm="syz.2.1812" path="socket:[31784]" dev="sockfs" ino=31784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 690.910135][T12534] syz.1.1811 (12534): drop_caches: 2 [ 690.970909][T12534] syz.1.1811 (12534): drop_caches: 2 [ 691.425891][ T30] audit: type=1400 audit(2000000859.834:910): avc: denied { bind } for pid=12536 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 691.448374][ T30] audit: type=1400 audit(2000000859.854:911): avc: denied { name_bind } for pid=12536 comm="syz.4.1814" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 691.576262][T12531] lo speed is unknown, defaulting to 1000 [ 691.727537][ T30] audit: type=1400 audit(2000000859.854:912): avc: denied { node_bind } for pid=12536 comm="syz.4.1814" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 691.737964][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 691.818502][ T30] audit: type=1400 audit(2000000860.194:913): avc: denied { name_connect } for pid=12536 comm="syz.4.1814" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 692.723360][ T30] audit: type=1400 audit(2000000860.264:914): avc: denied { name_bind } for pid=12543 comm="syz.0.1816" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 692.745424][ T30] audit: type=1400 audit(2000000860.374:915): avc: denied { connect } for pid=12541 comm="syz.2.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 693.092908][ T30] audit: type=1400 audit(2000000861.274:916): avc: denied { create } for pid=12543 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 694.377401][ T30] audit: type=1400 audit(2000000861.934:917): avc: denied { read } for pid=12550 comm="syz.2.1819" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 694.400437][ T30] audit: type=1400 audit(2000000862.504:918): avc: denied { open } for pid=12550 comm="syz.2.1819" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 694.476198][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.472719][ T30] audit: type=1400 audit(2000000863.564:919): avc: denied { write } for pid=12553 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 695.604291][ T30] audit: type=1400 audit(2000000863.954:920): avc: denied { ioctl } for pid=12564 comm="syz.2.1821" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31831 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 696.552689][ T30] audit: type=1400 audit(2000000864.004:921): avc: denied { open } for pid=12569 comm="syz.0.1822" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 700.721077][ T30] audit: type=1400 audit(2000000869.124:922): avc: denied { create } for pid=12607 comm="syz.4.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 700.945333][ T30] audit: type=1400 audit(2000000869.154:923): avc: denied { execute } for pid=12609 comm="syz.3.1832" path="/369/cpu.stat" dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 700.970357][ T30] audit: type=1400 audit(2000000869.184:924): avc: denied { module_request } for pid=12607 comm="syz.4.1831" kmod="net-pf-2-proto-1-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 701.607843][ T30] audit: type=1400 audit(2000000869.454:925): avc: denied { mount } for pid=12611 comm="syz.1.1833" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 701.734981][ T30] audit: type=1400 audit(2000000869.454:926): avc: denied { search } for pid=12611 comm="syz.1.1833" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 701.899493][ T30] audit: type=1400 audit(2000000869.464:927): avc: denied { search } for pid=12611 comm="syz.1.1833" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.415466][ T30] audit: type=1400 audit(2000000869.464:928): avc: denied { read open } for pid=12611 comm="syz.1.1833" path="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.538097][ T30] audit: type=1400 audit(2000000870.394:929): avc: denied { create } for pid=12618 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 702.558981][ T30] audit: type=1400 audit(2000000870.394:930): avc: denied { listen } for pid=12618 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 703.293520][ T30] audit: type=1400 audit(2000000871.024:931): avc: denied { setattr } for pid=12628 comm="syz.2.1836" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 705.699081][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 706.760178][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 706.760197][ T30] audit: type=1400 audit(2000000874.954:936): avc: denied { create } for pid=12653 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.910179][ T30] audit: type=1400 audit(2000000874.964:937): avc: denied { connect } for pid=12653 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 707.171202][ T30] audit: type=1400 audit(2000000874.964:938): avc: denied { write } for pid=12653 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 707.485248][T12672] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 707.516573][ T30] audit: type=1400 audit(2000000875.314:939): avc: denied { create } for pid=12661 comm="syz.1.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.558397][T12672] 8021q: adding VLAN 0 to HW filter on device bond4 [ 707.565790][ T30] audit: type=1400 audit(2000000875.864:940): avc: denied { create } for pid=12671 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 707.635827][T12672] veth3: entered promiscuous mode [ 707.643152][T12672] bond4: (slave veth3): Enslaving as an active interface with a down link [ 708.386352][T12678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.467540][T12673] page: refcount:515 mapcount:0 mapping:ffff88802ae5f4c0 index:0x0 pfn:0x6dc00 [ 708.477996][T12673] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 708.486523][T12673] aops:hugetlbfs_aops ino:7acb dentry name(?):"anon_hugepage" [ 708.494012][T12673] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 708.502195][T12673] page_type: f4(hugetlb) [ 708.506453][T12673] raw: 00fff00000000041 ffffc900037a7d68 ffffc900037a7d68 ffff88802ae5f4c0 [ 708.515147][T12673] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 708.523744][T12673] head: 00fff00000000041 ffffc900037a7d68 ffffc900037a7d68 ffff88802ae5f4c0 [ 708.532417][T12673] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 708.541093][T12673] head: 00fff00000000009 ffffea0001b70001 0000000000000000 0000000000000000 [ 708.549776][T12673] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 708.558567][T12673] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 708.565973][T12673] page_owner tracks the page as allocated [ 708.572795][T12673] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 12668, tgid 12664 (syz.3.1846), ts 707773356090, free_ts 657388744391 [ 708.593592][T12673] post_alloc_hook+0x1c0/0x230 [ 708.598366][T12673] get_page_from_freelist+0x1321/0x3890 [ 708.603915][T12673] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 708.609813][T12673] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 708.615634][T12673] alloc_hugetlb_folio+0xed4/0x1560 [ 708.620841][T12673] hugetlb_fault+0x2005/0x3070 [ 708.625611][T12673] handle_mm_fault+0xbfa/0xd10 [ 708.630384][T12673] do_user_addr_fault+0x7a6/0x1370 [ 708.635512][T12673] exc_page_fault+0x5c/0xb0 [ 708.640109][T12673] asm_exc_page_fault+0x26/0x30 [ 708.644977][T12673] page last free pid 12269 tgid 12260 stack trace: [ 708.651481][T12673] __free_frozen_pages+0x7fe/0x1180 [ 708.656687][T12673] __folio_put+0x329/0x450 [ 708.661124][T12673] hugetlb_free_folio+0xfc/0x140 [ 708.666121][T12673] __update_and_free_hugetlb_folio+0x1e3/0x420 [ 708.672288][T12673] update_and_free_hugetlb_folio+0xce/0x210 [ 708.678186][T12673] free_huge_folio+0x85b/0x1050 [ 708.683039][T12673] __folio_put+0x3be/0x450 [ 708.687457][T12673] folio_putback_hugetlb+0x449/0x550 [ 708.692735][T12673] migrate_pages+0xab8/0x23b0 [ 708.697491][T12673] do_mbind+0x6f0/0xf30 [ 708.701646][T12673] kernel_mbind+0x1e3/0x1f0 [ 708.706149][T12673] do_syscall_64+0xcd/0x4c0 [ 708.710652][T12673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.716711][T12673] ------------[ cut here ]------------ [ 708.722245][T12673] kernel BUG at mm/filemap.c:154! [ 708.727291][T12673] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 708.733726][T12673] CPU: 0 UID: 0 PID: 12673 Comm: syz.3.1846 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 708.745783][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 708.755830][T12673] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 708.761993][T12673] Code: c7 76 c8 ff 89 ee 31 ff 4c 8d 6b 30 e8 fa 71 c8 ff 85 ed 7e 17 e8 b1 76 c8 ff 48 c7 c6 a0 17 b9 8b 48 89 df e8 32 ba 11 00 90 <0f> 0b e8 9a 76 c8 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 708.781617][T12673] RSP: 0018:ffffc900036773d0 EFLAGS: 00010046 [ 708.787682][T12673] RAX: 0000000000080000 RBX: ffffea0001b70000 RCX: ffffc90011305000 [ 708.795647][T12673] RDX: 0000000000080000 RSI: ffffffff81f3a9fe RDI: ffff88803220a884 [ 708.803632][T12673] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 708.811599][T12673] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802ae5f4c0 [ 708.819565][T12673] R13: ffffea0001b70030 R14: 0000000000000510 R15: ffffea0001b70000 [ 708.827531][T12673] FS: 00007fb6e311e6c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 708.836481][T12673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.843059][T12673] CR2: 000020000011a2b0 CR3: 0000000048942000 CR4: 00000000003526f0 [ 708.851125][T12673] Call Trace: [ 708.854400][T12673] [ 708.857345][T12673] filemap_remove_folio+0xf1/0x250 [ 708.862464][T12673] remove_inode_hugepages+0x74a/0xed0 [ 708.867830][T12673] ? __schedule+0x1181/0x5de0 [ 708.872511][T12673] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 708.878442][T12673] ? __pfx___schedule+0x10/0x10 [ 708.883293][T12673] ? __pfx_try_to_wake_up+0x10/0x10 [ 708.888502][T12673] ? up_write+0x209/0x520 [ 708.892827][T12673] hugetlbfs_fallocate+0xf3f/0x12e0 [ 708.898029][T12673] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 708.903928][T12673] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 708.909613][T12673] ? vfs_fallocate+0x60b/0x10c0 [ 708.914477][T12673] vfs_fallocate+0x60b/0x10c0 [ 708.919160][T12673] ? __pfx_vfs_fallocate+0x10/0x10 [ 708.924280][T12673] ? madvise_vma_behavior+0x222c/0x2420 [ 708.929826][T12673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.935714][T12673] madvise_vma_behavior+0x21ca/0x2420 [ 708.941098][T12673] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 708.946823][T12673] ? __pfx_mas_prev+0x10/0x10 [ 708.951506][T12673] ? find_vma_prev+0xda/0x160 [ 708.956174][T12673] ? trace_sched_exit_tp+0xde/0x130 [ 708.961373][T12673] ? __pfx_find_vma_prev+0x10/0x10 [ 708.966525][T12673] ? __schedule+0x1181/0x5de0 [ 708.971223][T12673] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 708.976946][T12673] madvise_walk_vmas+0x1d1/0x2c0 [ 708.981895][T12673] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 708.987357][T12673] madvise_do_behavior+0x15d/0x3f0 [ 708.992468][T12673] ? __pfx_madvise_do_behavior+0x10/0x10 [ 708.998105][T12673] ? do_madvise+0x134/0x230 [ 709.002609][T12673] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 709.008501][T12673] do_madvise+0x161/0x230 [ 709.012832][T12673] ? __pfx_do_madvise+0x10/0x10 [ 709.017684][T12673] ? blkcg_maybe_throttle_current+0x7b/0xf30 [ 709.023663][T12673] ? blkcg_maybe_throttle_current+0x64b/0xf30 [ 709.029727][T12673] ? xfd_validate_state+0x61/0x180 [ 709.034840][T12673] __x64_sys_madvise+0xa9/0x110 [ 709.039721][T12673] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.044937][T12673] do_syscall_64+0xcd/0x4c0 [ 709.049457][T12673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.055341][T12673] RIP: 0033:0x7fb6e238e929 [ 709.059765][T12673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.079464][T12673] RSP: 002b:00007fb6e311e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 709.087874][T12673] RAX: ffffffffffffffda RBX: 00007fb6e25b6240 RCX: 00007fb6e238e929 [ 709.095836][T12673] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 709.103805][T12673] RBP: 00007fb6e2410b39 R08: 0000000000000000 R09: 0000000000000000 [ 709.111772][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.119743][T12673] R13: 0000000000000000 R14: 00007fb6e25b6240 R15: 00007fffd1ded188 [ 709.127717][T12673] [ 709.130721][T12673] Modules linked in: [ 709.134710][T12673] ---[ end trace 0000000000000000 ]--- [ 709.140150][T12673] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 709.146301][T12673] Code: c7 76 c8 ff 89 ee 31 ff 4c 8d 6b 30 e8 fa 71 c8 ff 85 ed 7e 17 e8 b1 76 c8 ff 48 c7 c6 a0 17 b9 8b 48 89 df e8 32 ba 11 00 90 <0f> 0b e8 9a 76 c8 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 709.165930][T12673] RSP: 0018:ffffc900036773d0 EFLAGS: 00010046 [ 709.171996][T12673] RAX: 0000000000080000 RBX: ffffea0001b70000 RCX: ffffc90011305000 [ 709.179958][T12673] RDX: 0000000000080000 RSI: ffffffff81f3a9fe RDI: ffff88803220a884 [ 709.187920][T12673] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 709.195881][T12673] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802ae5f4c0 [ 709.203841][T12673] R13: ffffea0001b70030 R14: 0000000000000510 R15: ffffea0001b70000 [ 709.211805][T12673] FS: 00007fb6e311e6c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 709.220817][T12673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.227395][T12673] CR2: 000020000011a2b0 CR3: 0000000048942000 CR4: 00000000003526f0 [ 709.235450][T12673] Kernel panic - not syncing: Fatal exception [ 709.241740][T12673] Kernel Offset: disabled [ 709.246046][T12673] Rebooting in 86400 seconds..