last executing test programs: 5m52.697665004s ago: executing program 4 (id=83): r0 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x20000000000009) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet(0x2, 0x2, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="1802000030000100000000000000000007020080bed41f3936d9dadd4a801abadd65ef653ccb2a21fd31bdc628213366f5581394083c012494d7c98ccbed0123c86c8918ecce36b652c415386d79e51f378af4ab1255df3384e3e4c044be27efa58432cbd1c7e7f5c9176ca8802f18441f1002c99eaa71940431942d629586c6bbcbfc09e15c8af28b7a0f1423384ff3f4c882b3d79936af1313b327d58d3c77d70764bc35b00d58989e01c2a751569e3b97b25975f4853313fc95d8dcdb67b00ed1252fca8f32e58f071ad3706e891fa8a8c73af64ab0c811fd70a9f4ccfe850b149d5587eb59397051024045490038800800c600", @ANYRES32=r1, @ANYBLOB="0b00a600292d2e262f25000008000500", @ANYRES32, @ANYBLOB="e03ba660a2edf3cd725a2f46ecdca2fb0373e32e8ece762a79fe1ddaec4202e5a8c4e2b7889a48968200000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64"], 0x218}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m47.324559793s ago: executing program 4 (id=96): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) r4 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5m43.265233911s ago: executing program 4 (id=102): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x0, 0x29, 0x1, @local, @mcast2}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44051}, 0x4004044) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_hsr\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x43cc, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0xc80c0, 0x130, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x145981) ioctl$BLKDISCARD(r7, 0x1277, &(0x7f0000000140)=0x6) futex$unlock_wake_list32(&(0x7f0000003580)=0x9, 0x68a, 0x10, 0x0, 0x0, 0xffffffff) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0}, 0x40) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x90, 0x41, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@generic="646339e8ffec7989fa66b69491a6a105e0c809a143d1da59512c20c0146105403aaa108bbe3016e88fdc369b02d959df6491089e1b75c3ef0e4fbd7595122aa1fca3f7c79a21e2a3a4c55d1245eaf301f89f24a0024422b12d3156996513475a90034923d23685ab38", @typed={0xc, 0x64, 0x0, 0x0, @u64=0xffff}, @nested={0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x40815}, 0xc800) 5m36.565125488s ago: executing program 4 (id=107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) r0 = socket(0x2, 0xa, 0x4000) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc14000000478803", 0xd, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0x7, 0x80, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x256}}], 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x40000) 5m33.445879139s ago: executing program 4 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r0, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) r6 = syz_open_procfs(0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) capset(0x0, &(0x7f0000000380)={0x1, 0xd, 0x4, 0x3, 0x8}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) 5m31.963710156s ago: executing program 4 (id=112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0xfffffffffffffff7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = gettid() tkill(r3, 0x11) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000200)=0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setresuid(0xee00, 0xee00, 0x0) setuid(0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 5m16.892175904s ago: executing program 32 (id=112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0xfffffffffffffff7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = gettid() tkill(r3, 0x11) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000200)=0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setresuid(0xee00, 0xee00, 0x0) setuid(0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 2.764701385s ago: executing program 1 (id=1386): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x40, 0x0, 0x5, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="fcffcc361d211de22844b3"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30048047}, 0x240008c4) syz_emit_ethernet(0xa0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10120}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, 0x0, 0x4a0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '}{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c010}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.254435171s ago: executing program 5 (id=1396): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x4}, 0x38) 2.03012792s ago: executing program 2 (id=1399): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000008340)={0x2020}, 0x2020) 2.02047828s ago: executing program 5 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000ee060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.878881171s ago: executing program 5 (id=1402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.742438721s ago: executing program 1 (id=1404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.731450739s ago: executing program 2 (id=1405): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2d, 0xff, 0x2c, 0x1a}, {0x41000, 0x2, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0x9, 0x5, 0x3, 0x7, 0xfa, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x5d, 0x2, 0x43, 0x0, 0xfa, 0x80, 0x4, 0x12, 0x4}, {0xdddd0000, 0x26000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0xc000, 0x8000000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x7, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xeeee8000, 0xfec00000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2e}, {0x10000, 0x3ff}, 0x80000031, 0x0, 0x6000, 0x42124, 0x6, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000002000)) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x4e, 0x12, &(0x7f00000001c0)="72bd324769ed36ca10593bbff6bb84a3850c7f814a022fca9178f58ad83ed05d7b3ab43d44876141ee1757589bcdf4ced491ef34fbfa2c256ffa259da47a1f23ae361bdd41b84a8070947d60d5fc", &(0x7f0000000240)=""/18, 0x4, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000400)="4f3f70b78fa7ad37a284972a41dfd986a6d2bb25471701b325fff270d98855f2", 0x7, 0x0, 0x4}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x20940, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = gettid() sched_setscheduler(r8, 0x1, &(0x7f00000004c0)=0x7) ppoll(&(0x7f0000000180)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) 1.593113293s ago: executing program 5 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a656, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.500684186s ago: executing program 1 (id=1409): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.354256788s ago: executing program 5 (id=1412): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") ioctl(r0, 0x8914, &(0x7f0000000080)='veth0:0') 1.159817899s ago: executing program 5 (id=1416): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90", 0x1}, {&(0x7f00000002c0)="d6a5a8", 0x3}], 0x2) 987.786545ms ago: executing program 0 (id=1419): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x100009, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) 968.460845ms ago: executing program 3 (id=1420): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x20f, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 851.098915ms ago: executing program 0 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="2d1c980b27ac7d9930315b88cd0299", 0xf) 848.003784ms ago: executing program 3 (id=1422): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 830.34453ms ago: executing program 0 (id=1423): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 737.317398ms ago: executing program 2 (id=1424): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x2, 0x4) 701.540443ms ago: executing program 3 (id=1425): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2002, @remote}}}, 0x108) 689.481539ms ago: executing program 0 (id=1426): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0xd) 684.00725ms ago: executing program 2 (id=1427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000e80)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x70bd26, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0xfe0f, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x80) 502.636372ms ago: executing program 0 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 429.342198ms ago: executing program 1 (id=1429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 428.757215ms ago: executing program 3 (id=1430): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x67, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x1, 0x0, 0x1, 0x100}, "fb167879d2c27e362a1d423f"}}}}}}, 0x0) 292.955735ms ago: executing program 0 (id=1431): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x40, r1, 0x5, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="fcffcc361d211de22844b3"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30048047}, 0x240008c4) syz_emit_ethernet(0xa0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10120}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, 0x0, 0x4a0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '}{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c010}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 281.100185ms ago: executing program 2 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x21, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x400) 249.755018ms ago: executing program 1 (id=1433): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000240)={0x0}) 192.628881ms ago: executing program 3 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0xc880}, 0x4c040) 73.014161ms ago: executing program 2 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x38, r1, 0x911, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000d5}, 0x4c040) 37.558333ms ago: executing program 3 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) 0s ago: executing program 1 (id=1437): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='fi', 0x2) kernel console output (not intermixed with test programs): 6984 comm="syz.3.223" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.875229][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 284.074293][ T31] audit: type=1400 audit(1787929010.320:812): avc: denied { write } for pid=6958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.724622][ T7005] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 284.756011][ T7005] CIFS: Attempting to mount //127.0.0.1/share [ 284.933074][ T7005] CIFS: VFS: Error connecting to socket. Aborting operation. [ 284.933586][ T7005] CIFS: VFS: cifs_mount failed w/return code = -111 [ 284.983205][ T31] audit: type=1400 audit(1787929011.120:813): avc: denied { read write } for pid=6995 comm="syz.5.236" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 284.983300][ T31] audit: type=1400 audit(1787929011.120:814): avc: denied { open } for pid=6995 comm="syz.5.236" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 285.760453][ T31] audit: type=1400 audit(1787929011.940:815): avc: denied { write } for pid=7001 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.990287][ T7011] netlink: 68 bytes leftover after parsing attributes in process `syz.3.238'. [ 286.159585][ T31] audit: type=1400 audit(1787929012.400:816): avc: denied { mount } for pid=7012 comm="syz.1.239" name="/" dev="hugetlbfs" ino=17764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 286.861980][ T7011] SELinux: ebitmap: truncated map [ 286.862141][ T7011] SELinux: invalid class [ 287.501990][ T7011] SELinux: failed to load policy [ 289.941749][ T31] audit: type=1400 audit(1787929016.180:817): avc: denied { write } for pid=7017 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 289.970807][ T31] audit: type=1400 audit(1787929016.210:818): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 290.027178][ T7020] lo speed is unknown, defaulting to 1000 [ 290.027294][ T7020] lo speed is unknown, defaulting to 1000 [ 290.101394][ T31] audit: type=1400 audit(1787929016.340:819): avc: denied { connect } for pid=7017 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.499724][ T7020] lo speed is unknown, defaulting to 1000 [ 290.501039][ T7020] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 290.501098][ T7020] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 290.501134][ T7020] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 290.688470][ T7020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 290.912499][ T7020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 292.058437][ T31] audit: type=1400 audit(1787929017.990:820): avc: denied { write } for pid=7035 comm="syz.3.243" path="socket:[17814]" dev="sockfs" ino=17814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.783690][ T7020] lo speed is unknown, defaulting to 1000 [ 292.785888][ T7020] lo speed is unknown, defaulting to 1000 [ 292.787668][ T7020] lo speed is unknown, defaulting to 1000 [ 292.788696][ T7020] lo speed is unknown, defaulting to 1000 [ 292.789661][ T7020] lo speed is unknown, defaulting to 1000 [ 292.958329][ T31] audit: type=1400 audit(1787929019.180:821): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.001514][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.128360][ T31] audit: type=1400 audit(1787929019.370:822): avc: denied { write } for pid=7057 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.151521][ T5809] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 293.328218][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.328557][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.736529][ T31] audit: type=1400 audit(1787929019.980:823): avc: denied { shutdown } for pid=7072 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.101047][ T31] audit: type=1400 audit(1787929022.340:824): avc: denied { write } for pid=7098 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.157553][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.167585][ T5809] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 296.182992][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 296.183078][ T5809] usb 4-1: can't read configurations, error -71 [ 296.554712][ T7101] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 296.554748][ T7101] netlink: 224 bytes leftover after parsing attributes in process `syz.1.251'. [ 296.691856][ T31] audit: type=1400 audit(1787929022.930:825): avc: denied { write } for pid=7069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.032236][ T12] nvmet: connect request for invalid subsystem tes! [ 297.082653][ T7110] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 297.140263][ T31] audit: type=1400 audit(1787929023.380:826): avc: denied { write } for pid=7125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.282942][ T5809] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 297.453019][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 297.459657][ T5809] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 297.477484][ T5809] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 297.477552][ T5809] usb 4-1: config 0 has no interface number 0 [ 297.477625][ T5809] usb 4-1: config 0 interface 12 has no altsetting 0 [ 297.510745][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.510781][ T5809] usb 4-1: Product: syz [ 297.510815][ T5809] usb 4-1: Manufacturer: syz [ 297.510846][ T5809] usb 4-1: SerialNumber: syz [ 297.557817][ T7124] ip6gre1: entered allmulticast mode [ 297.561403][ T7131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.575804][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.602570][ T5809] usb 4-1: config 0 descriptor?? [ 297.643305][ T4933] lo speed is unknown, defaulting to 1000 [ 298.045672][ T31] audit: type=1400 audit(1787929024.290:827): avc: denied { remount } for pid=7107 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.076616][ T7108] option changes via remount are deprecated (pid=7107 comm=syz.3.255) [ 298.336526][ T31] audit: type=1400 audit(1787929024.570:828): avc: denied { node_bind } for pid=7142 comm="syz.0.259" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 298.635143][ T7108] kAFS: No cell specified [ 298.647301][ T31] audit: type=1400 audit(1787929024.880:829): avc: denied { mounton } for pid=7107 comm="syz.3.255" path="/57/file0" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 299.097090][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 299.131042][ T5809] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 299.131155][ T5809] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 299.131215][ T5809] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 299.131340][ T5809] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 299.181343][ T5809] usb 4-1: USB disconnect, device number 7 [ 299.206891][ T31] audit: type=1400 audit(1787929025.450:830): avc: denied { audit_read } for pid=7152 comm="syz.2.262" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.252225][ T31] audit: type=1400 audit(1787929025.490:831): avc: denied { write } for pid=7135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.284582][ T25] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 299.295395][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.305720][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 299.315794][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.333829][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 299.343156][ T25] usb 6-1: Product: syz [ 299.348122][ T25] usb 6-1: Manufacturer: syz [ 299.405871][ T31] audit: type=1400 audit(1787929025.640:832): avc: denied { create } for pid=7154 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 299.432676][ T7158] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 299.444675][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 299.467079][ T31] audit: type=1400 audit(1787929025.670:833): avc: denied { write } for pid=7154 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 299.490558][ T7151] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 299.526269][ T25] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 299.939477][ T25] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 300.900968][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.901371][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.139652][ T5809] usb 6-1: USB disconnect, device number 3 [ 301.161500][ T5809] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 301.162235][ T5809] garmin_gps 6-1:1.0: device disconnected [ 301.513151][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.362443][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 302.362487][ T31] audit: type=1400 audit(1787929028.600:839): avc: denied { write } for pid=7170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.541493][ T31] audit: type=1400 audit(1787929028.720:840): avc: denied { write } for pid=7171 comm="syz.1.265" name="dlm" dev="configfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.541558][ T31] audit: type=1400 audit(1787929028.730:841): avc: denied { read } for pid=7171 comm="syz.1.265" name="cluster_name" dev="configfs" ino=18200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 302.541594][ T31] audit: type=1800 audit(1787929028.730:842): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.265" name="cluster_name" dev="configfs" ino=18200 res=0 errno=0 [ 302.541626][ T31] audit: type=1400 audit(1787929028.730:843): avc: denied { write } for pid=7171 comm="syz.1.265" name="comms" dev="configfs" ino=18199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.541660][ T31] audit: type=1800 audit(1787929028.730:844): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.265" name="local" dev="configfs" ino=18202 res=0 errno=0 [ 304.653634][ T31] audit: type=1400 audit(1787929030.300:845): avc: denied { bind } for pid=7193 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 304.681434][ T1215] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 304.832928][ T1215] usb 6-1: Using ep0 maxpacket: 32 [ 304.838624][ T1215] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.849002][ T1215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.849057][ T1215] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.849097][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.889753][ T1215] usb 6-1: config 0 descriptor?? [ 304.914453][ T1215] hub 6-1:0.0: bad descriptor, ignoring hub [ 304.922981][ T1215] hub 6-1:0.0: probe with driver hub failed with error -5 [ 304.935781][ T1215] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 305.109569][ T7203] ip6gre2: entered allmulticast mode [ 305.128021][ T147] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.361775][ T31] audit: type=1400 audit(1787929031.600:846): avc: denied { write } for pid=7186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.406260][ T5753] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 305.586396][ T5753] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 305.597942][ T5753] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 305.676227][ T5753] usb 4-1: config 0 has no interface number 0 [ 305.676273][ T5753] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 305.676300][ T5753] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.712037][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 305.712076][ T5753] usb 4-1: Manufacturer: syz [ 305.712102][ T5753] usb 4-1: SerialNumber: syz [ 305.738952][ T5753] usb 4-1: config 0 descriptor?? [ 305.964546][ T5753] usbtouchscreen 4-1:0.214: Failed to read FW rev: 0 [ 305.964757][ T5753] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 306.122850][ T31] audit: type=1400 audit(1787929032.310:847): avc: denied { ioctl } for pid=7188 comm="syz.5.268" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 306.884852][ T31] audit: type=1400 audit(1787929033.130:848): avc: denied { write } for pid=7218 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.163169][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 308.163270][ T31] audit: type=1400 audit(1787929034.370:850): avc: denied { search } for pid=7234 comm="syz.0.272" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 308.163529][ T31] audit: type=1400 audit(1787929034.370:851): avc: denied { write } for pid=7234 comm="syz.0.272" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 308.163787][ T31] audit: type=1400 audit(1787929034.380:852): avc: denied { open } for pid=7234 comm="syz.0.272" path="/53/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 308.500385][ T31] audit: type=1400 audit(1787929034.680:853): avc: denied { execute } for pid=7238 comm="syz.1.266" path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dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 308.794592][ T7244] syz.1.266 (7244) used greatest stack depth: 19312 bytes left [ 308.843015][ T31] audit: type=1400 audit(1787929034.790:854): avc: denied { firmware_load } for pid=7238 comm="syz.1.266" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 309.112948][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.672931][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.759610][ T5636] usb 4-1: USB disconnect, device number 8 [ 309.813141][ T5809] usb 6-1: USB disconnect, device number 4 [ 309.894121][ T31] audit: type=1400 audit(1787929036.140:855): avc: denied { write } for pid=7225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.917310][ T25] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 310.018546][ T31] audit: type=1400 audit(1787929036.260:856): avc: denied { write } for pid=7256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.073440][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 310.083684][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 310.083718][ T25] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 310.083772][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 310.293059][ T7255] futex_wake_op: syz.3.279 tries to shift op by 144; fix this program [ 310.309886][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.309924][ T25] usb 1-1: Product: syz [ 310.309947][ T25] usb 1-1: Manufacturer: syz [ 310.309963][ T25] usb 1-1: SerialNumber: syz [ 310.464392][ T7264] nvme_fcloop: unknown parameter or missing value '00000000000000000000002 00000000000000000000177 00000000000000000000007' [ 310.509635][ T31] audit: type=1400 audit(1787929036.750:857): avc: denied { sqpoll } for pid=7253 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 310.610959][ T31] audit: type=1400 audit(1787929036.850:858): avc: denied { connect } for pid=7247 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.821163][ T7268] process 'syz.5.280' launched './file1' with NULL argv: empty string added [ 310.834380][ T31] audit: type=1400 audit(1787929037.070:859): avc: denied { execute_no_trans } for pid=7267 comm="syz.5.280" path="/15/file1" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.976746][ T7269] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 310.988123][ T7269] qnx6: wrong signature (magic) in superblock #1. [ 310.995859][ T7269] qnx6: unable to read the first superblock [ 311.065327][ T7248] 9p: p9: multiple sources not supported [ 311.594929][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.681501][ T7278] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 311.682679][ T7278] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 311.712903][ T7278] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 311.837809][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.850664][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 311.872404][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.884861][ T25] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 311.900335][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.373010][ T5753] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 312.532940][ T5753] usb 6-1: Using ep0 maxpacket: 8 [ 312.539079][ T5753] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.569087][ T5753] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.569149][ T5753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.590026][ T5753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 312.590096][ T5753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 312.602303][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.769058][ T5753] hub 6-1:1.0: bad descriptor, ignoring hub [ 312.769164][ T5753] hub 6-1:1.0: probe with driver hub failed with error -5 [ 312.861495][ T5753] cdc_wdm 6-1:1.0: skipping garbage [ 312.861556][ T5753] cdc_wdm 6-1:1.0: skipping garbage [ 313.090886][ T5753] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 313.090957][ T5753] cdc_wdm 6-1:1.0: Unknown control protocol [ 313.274853][ T4933] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 313.489558][ T4933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.489718][ T4933] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 313.513390][ T4933] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.573275][ T4933] usb 4-1: string descriptor 0 read error: -22 [ 313.580282][ T4933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.528929][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 314.972244][ T25] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 314.992586][ T25] usb 1-1: USB disconnect, device number 8 [ 315.081385][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.133841][ T5722] usb 6-1: USB disconnect, device number 5 [ 315.212508][ T4933] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 315.346292][ T4933] usb 4-1: USB disconnect, device number 9 [ 315.357057][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 315.357083][ T31] audit: type=1400 audit(1787929041.600:865): avc: denied { name_connect } for pid=7303 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 315.407759][ T31] audit: type=1400 audit(1787929041.650:866): avc: denied { listen } for pid=7303 comm="syz.5.287" lport=49998 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.463316][ T31] audit: type=1400 audit(1787929041.700:867): avc: denied { setopt } for pid=7303 comm="syz.5.287" lport=49998 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 315.531476][ T52] Bluetooth: hci2: unexpected event for opcode 0x0031 [ 315.553792][ T31] audit: type=1400 audit(1787929041.790:868): avc: denied { unlink } for pid=7303 comm="syz.5.287" name="#7" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.690456][ T31] audit: type=1400 audit(1787929041.930:869): avc: denied { connect } for pid=7310 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.892716][ T7314] kvm: pic: non byte write [ 316.692479][ T7329] capability: warning: `syz.2.292' uses deprecated v2 capabilities in a way that may be insecure [ 317.352953][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.654488][ T7337] loop9: detected capacity change from 0 to 2640 [ 317.679860][ T5624] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.696227][ T5624] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.697556][ T5624] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.697900][ T5624] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.702456][ T5624] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721022][ T7337] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721060][ T7337] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721085][ T7337] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721112][ T7337] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721137][ T7337] Buffer I/O error on dev loop9, logical block 0, async page read [ 317.721219][ T7337] ldm_validate_partition_table(): Disk read failed. [ 317.721282][ T7337] Dev loop9: unable to read RDB block 0 [ 317.721432][ T7337] loop9: unable to read partition table [ 317.804948][ T7337] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 318.789564][ T7343] nbd0: detected capacity change from 0 to 63 [ 320.933110][ T4933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.152490][ T52] block nbd0: Receive control failed (result -104) [ 321.170948][ T4969] ldm_validate_partition_table(): Disk read failed. [ 321.184952][ T4969] Dev loop9: unable to read RDB block 0 [ 321.191787][ T4969] loop9: unable to read partition table [ 321.230780][ T7386] netlink: 100 bytes leftover after parsing attributes in process `syz.5.301'. [ 321.237725][ T7386] netlink: 48 bytes leftover after parsing attributes in process `syz.5.301'. [ 321.394982][ T31] audit: type=1400 audit(1787929047.480:870): avc: denied { setopt } for pid=7379 comm="syz.5.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.831967][ T4933] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.847290][ T4933] usb 1-1: config index 0 descriptor too short (expected 65059, got 72) [ 321.850764][ T4933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.850786][ T4933] usb 1-1: Product: syz [ 321.850797][ T4933] usb 1-1: Manufacturer: syz [ 321.850810][ T4933] usb 1-1: SerialNumber: syz [ 321.900169][ T7387] pim6reg: entered allmulticast mode [ 322.100295][ T7390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.303'. [ 322.351794][ T5753] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 323.422338][ T7405] futex_wake_op: syz.3.308 tries to shift op by 144; fix this program [ 323.432948][ T5753] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 323.456752][ T5753] ath9k_htc: Failed to initialize the device [ 323.729344][ T7408] tmpfs: Bad value for 'huge' [ 323.955414][ T5753] usb 1-1: ath9k_htc: USB layer deinitialized [ 324.073064][ T7416] fuse: fd is not a fuse device [ 324.086585][ T31] audit: type=1400 audit(1787929050.310:871): avc: denied { mounton } for pid=7413 comm="syz.2.309" path="/74/file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 325.021681][ T4933] usb 1-1: USB disconnect, device number 9 [ 325.672969][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.329938][ T7423] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 326.340354][ T7423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 326.353505][ T7423] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 326.363230][ T7423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 326.542895][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 327.638484][ T31] audit: type=1400 audit(1787929053.870:872): avc: denied { unmount } for pid=6399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 327.858089][ T52] Bluetooth: hci3: unexpected event for opcode 0x080d [ 329.168602][ T31] audit: type=1400 audit(1787929055.410:873): avc: denied { write } for pid=7417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.154794][ T5753] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 331.331388][ T31] audit: type=1400 audit(1787929057.570:874): avc: denied { write } for pid=7454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.373439][ T5753] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 331.681024][ T5753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.681071][ T5753] usb 1-1: config 0 has no interfaces? [ 331.681111][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.744647][ T5753] usb 1-1: config 0 descriptor?? [ 331.915203][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 331.925415][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 331.927371][ T52] Bluetooth: hci3: hardware error 0x00 [ 332.276593][ T5809] usb 1-1: USB disconnect, device number 10 [ 332.712990][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 333.018603][ T31] audit: type=1400 audit(1787929059.260:875): avc: denied { listen } for pid=7472 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.073397][ T31] audit: type=1400 audit(1787929059.320:876): avc: denied { write } for pid=7472 comm="syz.3.321" name="current_tracer" dev="tracefs" ino=1444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 333.144464][ T31] audit: type=1400 audit(1787929059.390:877): avc: denied { getopt } for pid=7474 comm="syz.5.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.167960][ T31] audit: type=1400 audit(1787929059.410:878): avc: denied { read } for pid=7474 comm="syz.5.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 333.189411][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'. [ 333.210938][ T31] audit: type=1400 audit(1787929059.450:879): avc: denied { read } for pid=7472 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.295967][ T31] audit: type=1400 audit(1787929059.540:880): avc: denied { write } for pid=7476 comm="syz.3.322" name="functions" dev="configfs" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.442873][ T5753] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 333.906023][ T5753] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 333.980368][ T5753] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.980431][ T5753] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 333.980473][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.018986][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 334.078348][ T31] audit: type=1400 audit(1787929060.280:881): avc: denied { write } for pid=7476 comm="syz.3.322" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 334.078443][ T31] audit: type=1400 audit(1787929060.280:882): avc: denied { write } for pid=7476 comm="syz.3.322" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 334.389860][ T7478] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 334.427286][ T7478] udc dummy_udc.0: failed to start g1: -19 [ 334.439242][ T7478] UDC core: g1: couldn't find an available UDC or it's busy [ 335.153949][ T5753] cxacru 6-1:1.0: invalid response length to cm 0x90: 0 [ 335.154023][ T5753] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 335.154418][ T5753] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 335.314634][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 335.630427][ T7495] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.328'. [ 336.254523][ T7496] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 336.263512][ T7496] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 336.263612][ T7496] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 336.814031][ T5816] usb 6-1: USB disconnect, device number 6 [ 336.965304][ T31] audit: type=1400 audit(1787929063.210:883): avc: denied { ioctl } for pid=7501 comm="syz.2.326" path="socket:[19941]" dev="sockfs" ino=19941 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.110987][ T7505] LUN: removable file: (no medium) [ 337.118447][ T7505] LUN: removable file: (no medium) [ 339.146960][ T7512] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 339.306146][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 339.306186][ T31] audit: type=1400 audit(1787929065.550:887): avc: denied { read } for pid=7515 comm="syz.0.331" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 339.335101][ T31] audit: type=1400 audit(1787929065.550:888): avc: denied { open } for pid=7515 comm="syz.0.331" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 340.807466][ T31] audit: type=1400 audit(1787929067.050:889): avc: denied { read write } for pid=7508 comm="syz.3.330" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.846738][ T31] audit: type=1400 audit(1787929067.080:890): avc: denied { open } for pid=7508 comm="syz.3.330" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.902483][ T31] audit: type=1400 audit(1787929067.140:891): avc: denied { ioctl } for pid=7508 comm="syz.3.330" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.930224][ T7514] autofs4:pid:7514:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 340.930254][ T7514] autofs4:pid:7514:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 341.046998][ T7514] misc userio: No port type given on /dev/userio [ 342.810986][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 342.820098][ T7535] vlan2: left allmulticast mode [ 342.825514][ T7535] geneve0: left allmulticast mode [ 342.832610][ T7535] vlan2: left promiscuous mode [ 342.832628][ T7535] geneve0: left promiscuous mode [ 342.835220][ T7535] bridge0: port 3(vlan2) entered disabled state [ 342.888699][ T7535] bridge_slave_1: left allmulticast mode [ 342.894725][ T7535] bridge_slave_1: left promiscuous mode [ 342.900917][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.930084][ T7535] bridge_slave_0: left allmulticast mode [ 342.937567][ T7535] bridge_slave_0: left promiscuous mode [ 342.943406][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.118955][ T7539] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 343.119019][ T7539] Error validating options; rc = [-22] [ 343.373153][ T31] audit: type=1400 audit(1787929069.610:892): avc: denied { shutdown } for pid=7541 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.408022][ T7546] dummy0: entered promiscuous mode [ 343.409464][ T7546] dummy0: entered allmulticast mode [ 343.534378][ T5809] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 344.632238][ T5809] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 344.651084][ T5816] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 344.663619][ T5816] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 344.846016][ T7539] ceph: No mds server is up or the cluster is laggy [ 344.865473][ T7549] ceph: No mds server is up or the cluster is laggy [ 344.923923][ T5816] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 345.181185][ T7559] gadgetfs: bound to dummy_udc driver [ 345.222106][ T31] audit: type=1400 audit(1787929071.460:893): avc: denied { call } for pid=7555 comm="syz.5.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 345.389266][ T31] audit: type=1400 audit(1787929071.630:894): avc: denied { write } for pid=7560 comm="syz.0.341" name="functions" dev="configfs" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 345.451215][ T7566] file system registered [ 345.799415][ T31] audit: type=1400 audit(1787929072.040:895): avc: denied { mount } for pid=7560 comm="syz.0.341" name="/" dev="functionfs" ino=20120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 347.509022][ T31] audit: type=1400 audit(1787929073.750:896): avc: denied { bind } for pid=7572 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.539432][ T31] audit: type=1400 audit(1787929073.780:897): avc: denied { shutdown } for pid=7572 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.623034][ T31] audit: type=1400 audit(1787929073.870:898): avc: denied { ioctl } for pid=7572 comm="syz.2.342" path="socket:[20198]" dev="sockfs" ino=20198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.718777][ T31] audit: type=1400 audit(1787929073.960:899): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 347.743295][ T5622] ffs_data_put(): freeing [ 347.995071][ T31] audit: type=1400 audit(1787929074.240:900): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 348.171915][ T31] audit: type=1400 audit(1787929074.410:901): avc: denied { write } for pid=7590 comm="syz.1.346" name="usb_gadget" dev="configfs" ino=3430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 348.204188][ T31] audit: type=1400 audit(1787929074.450:902): avc: denied { write } for pid=7590 comm="syz.1.346" name="functions" dev="configfs" ino=20245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 348.432965][ T4933] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 348.713460][ T4933] usb 1-1: Using ep0 maxpacket: 32 [ 348.720833][ T4933] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 348.731281][ T4933] usb 1-1: config 245 has an invalid interface number: 214 but max is 0 [ 348.731318][ T4933] usb 1-1: config 245 has no interface number 0 [ 348.731352][ T4933] usb 1-1: config 245 interface 214 has no altsetting 0 [ 348.787905][ T4933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.787943][ T4933] usb 1-1: Product: syz [ 348.787969][ T4933] usb 1-1: Manufacturer: syz [ 348.787985][ T4933] usb 1-1: SerialNumber: syz [ 348.910390][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 349.196149][ T7605] netlink: 'syz.2.348': attribute type 7 has an invalid length. [ 349.284805][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 349.360452][ T4933] f81534a_ctrl 1-1:245.214: probe with driver f81534a_ctrl failed with error -121 [ 349.523303][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 351.230059][ T7619] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 351.802543][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 351.811162][ T31] audit: type=1400 audit(1787929078.040:909): avc: denied { bind } for pid=7621 comm="syz.5.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.878695][ T5623] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 351.950567][ T2097] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 30 seconds [ 353.892431][ T31] audit: type=1400 audit(1787929080.130:910): avc: denied { write } for pid=7609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.987229][ T31] audit: type=1400 audit(1787929080.230:911): avc: denied { write } for pid=7636 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.085568][ T5636] usb 1-1: USB disconnect, device number 11 [ 354.483680][ T7627] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 354.483743][ T7627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 354.483778][ T7627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.925181][ T5623] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 355.939573][ T5623] Bluetooth: hci5: Injecting HCI hardware error event [ 355.943394][ T52] Bluetooth: hci5: hardware error 0x00 [ 356.392949][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.078655][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 359.107479][ T31] audit: type=1400 audit(1787929085.350:912): avc: denied { write } for pid=7641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.559596][ T31] audit: type=1400 audit(1787929085.610:913): avc: denied { write } for pid=7667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.559654][ T31] audit: type=1400 audit(1787929086.770:914): avc: denied { watch } for pid=7668 comm="syz.5.356" path="/30/bus" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.559708][ T31] audit: type=1400 audit(1787929086.770:915): avc: denied { watch_sb watch_reads } for pid=7668 comm="syz.5.356" path="/30/bus" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 360.559746][ T31] audit: type=1400 audit(1787929086.780:916): avc: denied { getopt } for pid=7668 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.545731][ T7687] binder: 7671:7687 ioctl c00864bf 2000000001c0 returned -22 [ 361.872123][ T5809] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 362.051775][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 362.122384][ T31] audit: type=1400 audit(1787929088.360:917): avc: denied { write } for pid=7678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.314351][ T5809] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.411048][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.411076][ T5809] usb 4-1: Product: syz [ 362.411086][ T5809] usb 4-1: Manufacturer: syz [ 362.411104][ T5809] usb 4-1: SerialNumber: syz [ 362.486220][ T5636] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.795440][ T31] audit: type=1400 audit(1787929089.040:918): avc: denied { write } for pid=7701 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.196070][ T31] audit: type=1400 audit(1787929089.440:919): avc: denied { write } for pid=7703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.293125][ T31] audit: type=1400 audit(1787929089.540:920): avc: denied { write } for pid=7718 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.432954][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.601568][ T31] audit: type=1400 audit(1787929089.840:921): avc: denied { write } for pid=7720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.889456][ T5636] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 363.889769][ T5636] ath9k_htc: Failed to initialize the device [ 363.917235][ T5636] usb 4-1: ath9k_htc: USB layer deinitialized [ 364.604717][ T5753] usb 4-1: USB disconnect, device number 10 [ 365.495597][ T7746] xt_hashlimit: max too large, truncated to 1048576 [ 365.648814][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 365.648843][ T31] audit: type=1800 audit(1787929091.890:923): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.364" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 366.623705][ T5816] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 366.704551][ T7758] Illegal XDP return value 1609579953 on prog (id 43) dev syz_tun, expect packet loss! [ 366.784396][ T5816] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 366.795381][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.806322][ T5816] usb 4-1: config 0 descriptor?? [ 366.816728][ T5816] cp210x 4-1:0.0: cp210x converter detected [ 366.896078][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.360'. [ 367.263119][ T7769] SET target dimension over the limit! [ 371.601561][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 371.661447][ T31] audit: type=1400 audit(1787929097.900:924): avc: denied { setopt } for pid=7782 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 371.705769][ T31] audit: type=1400 audit(1787929097.950:925): avc: denied { write } for pid=7782 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 371.839292][ T5816] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 371.847098][ T5816] cp210x 4-1:0.0: querying part number failed [ 373.080507][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.464628][ T5816] usb 4-1: cp210x converter now attached to ttyUSB0 [ 374.247456][ T7747] syz.3.363 (7747): drop_caches: 2 [ 374.360326][ T5636] usb 4-1: USB disconnect, device number 11 [ 374.400784][ T7803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.455562][ T5636] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 374.456239][ T5636] cp210x 4-1:0.0: device disconnected [ 374.639772][ T31] audit: type=1400 audit(1787929100.880:926): avc: denied { mounton } for pid=7806 comm="syz.3.377" path="/79/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 374.645670][ T7809] UBIFS error (pid: 7809): cannot open "ubi0:testvol", error -19 [ 374.748095][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 375.235381][ T25] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 375.502162][ T25] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 375.502203][ T25] usb 6-1: config 0 has no interface number 0 [ 375.502250][ T25] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 375.502295][ T25] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 376.035845][ T25] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 376.035887][ T25] usb 6-1: Manufacturer: syz [ 376.035915][ T25] usb 6-1: SerialNumber: syz [ 376.060413][ T25] usb 6-1: config 0 descriptor?? [ 376.151031][ T7816] input: syz0 as /devices/virtual/input/input11 [ 377.014747][ T31] audit: type=1326 audit(1787929102.610:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144719e159 code=0x7fc00000 [ 377.014812][ T31] audit: type=1326 audit(1787929102.620:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f144719e159 code=0x7fc00000 [ 377.036246][ T25] usbtouchscreen 6-1:0.214: Failed to read FW rev: 0 [ 377.036443][ T25] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 378.153571][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.479190][ T5636] usb 6-1: USB disconnect, device number 7 [ 379.844129][ T31] audit: type=1400 audit(1787929106.090:929): avc: denied { write } for pid=7833 comm="syz.5.385" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.939241][ T7839] all: renamed from bridge_slave_0 (while UP) [ 380.450999][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.831296][ T31] audit: type=1400 audit(1787929108.070:930): avc: denied { getopt } for pid=7844 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.993169][ T2097] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 60 seconds [ 382.066126][ T7847] netlink: 6 bytes leftover after parsing attributes in process `syz.5.388'. [ 382.075362][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.062878][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 383.532830][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 383.615767][ T5816] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 383.678646][ T5816] usb 6-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 383.678688][ T5816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.704450][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.704503][ T5816] usb 6-1: Product: syz [ 383.704529][ T5816] usb 6-1: Manufacturer: syz [ 383.704545][ T5816] usb 6-1: SerialNumber: syz [ 383.731195][ T5816] usb 6-1: 0:2 : does not exist [ 384.101236][ T7852] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 384.101288][ T7852] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 384.101328][ T7852] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 384.204147][ T7852] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 384.402451][ T7859] fuse: fd is not a fuse device [ 384.410174][ T5753] usb 6-1: USB disconnect, device number 8 [ 386.035451][ T31] audit: type=1400 audit(1787929112.280:931): avc: denied { write } for pid=7868 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.101358][ T7877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.116751][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 386.171394][ T7878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.454335][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.477180][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.727932][ T7878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.155478][ T31] audit: type=1400 audit(1787929114.400:932): avc: denied { getopt } for pid=7890 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.188328][ T31] audit: type=1400 audit(1787929114.430:933): avc: denied { kexec_image_load } for pid=7890 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 388.647246][ T31] audit: type=1800 audit(1787929114.890:934): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.402" name="iface_name" dev="configfs" ino=22053 res=0 errno=0 [ 388.702185][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 389.135308][ T31] audit: type=1400 audit(1787929115.380:935): avc: denied { read } for pid=7908 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.143333][ T31] audit: type=1400 audit(1787929115.380:936): avc: denied { bind } for pid=7908 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 389.153723][ T7909] netlink: 92 bytes leftover after parsing attributes in process `syz.2.406'. [ 389.707577][ T7913] fuse: fd is not a fuse device [ 389.727109][ T31] audit: type=1400 audit(1787929115.970:937): avc: denied { write } for pid=7914 comm="syz.0.407" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 389.728581][ T31] audit: type=1400 audit(1787929115.970:938): avc: denied { open } for pid=7914 comm="syz.0.407" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 389.728741][ T7917] random: crng reseeded on system resumption [ 389.800682][ T31] audit: type=1326 audit(1787929116.040:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7915 comm="syz.1.409" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f176799e159 code=0x0 [ 390.099439][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 390.472902][ T4933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 392.416713][ T31] audit: type=1400 audit(1787929118.660:940): avc: denied { read } for pid=7933 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.781619][ T7926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7926 comm=syz.5.410 [ 392.925964][ T7942] vlan3: entered allmulticast mode [ 392.926029][ T7942] veth0_to_bond: entered allmulticast mode [ 392.968721][ T7940] zram0: detected capacity change from 0 to 24 [ 393.022098][ T7934] FAULT_INJECTION: forcing a failure. [ 393.022098][ T7934] name fail_futex, interval 1, probability 0, space 0, times 1 [ 393.022167][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.3.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.022196][ T7934] Tainted: [L]=SOFTLOCKUP [ 393.022202][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 393.022212][ T7934] Call Trace: [ 393.022218][ T7934] [ 393.022225][ T7934] dump_stack_lvl+0x100/0x190 [ 393.022253][ T7934] should_fail_ex.cold+0x5/0xa [ 393.022277][ T7934] get_futex_key+0x1d0/0x14f0 [ 393.022303][ T7934] ? __pfx_get_futex_key+0x10/0x10 [ 393.022324][ T7934] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 393.022349][ T7934] futex_wait_setup+0x91/0x540 [ 393.022380][ T7934] __futex_wait+0x19f/0x300 [ 393.022406][ T7934] ? __pfx___futex_wait+0x10/0x10 [ 393.022428][ T7934] ? __pfx_try_to_wake_up+0x10/0x10 [ 393.022446][ T7934] ? futex_hash+0x311/0x400 [ 393.022467][ T7934] ? __pfx_futex_wake_mark+0x10/0x10 [ 393.022494][ T7934] ? find_held_lock+0x2b/0x80 [ 393.022515][ T7934] ? futex_wake+0x4ea/0x5e0 [ 393.022544][ T7934] futex_wait+0xe6/0x370 [ 393.022569][ T7934] ? __pfx_futex_wait+0x10/0x10 [ 393.022599][ T7934] ? taprio_dequeue+0x166/0x5f0 [ 393.022627][ T7934] do_futex+0x265/0x440 [ 393.022649][ T7934] ? __pfx_do_futex+0x10/0x10 [ 393.022675][ T7934] __x64_sys_futex+0x34f/0x4d0 [ 393.022700][ T7934] ? __pfx___x64_sys_futex+0x10/0x10 [ 393.022730][ T7934] do_syscall_64+0x123/0x790 [ 393.022750][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.022769][ T7934] RIP: 0033:0x7f6478b9e159 [ 393.022783][ T7934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.022800][ T7934] RSP: 002b:00007f6479a040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.022817][ T7934] RAX: ffffffffffffffda RBX: 00007f6478e25fa8 RCX: 00007f6478b9e159 [ 393.022828][ T7934] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6478e25fa8 [ 393.022838][ T7934] RBP: 00007f6478e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 393.022848][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.022858][ T7934] R13: 00007f6478e26038 R14: 00007ffcc91a1020 R15: 00007ffcc91a1108 [ 393.022880][ T7934] [ 393.587590][ T7949] ip6gre1: entered allmulticast mode [ 393.622598][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.626308][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.815343][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.370478][ T31] audit: type=1400 audit(1787929120.610:941): avc: denied { map } for pid=7976 comm="syz.3.418" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 394.408734][ T31] audit: type=1400 audit(1787929120.640:942): avc: denied { write } for pid=7982 comm="syz.0.419" name="functions" dev="configfs" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.543559][ T31] audit: type=1400 audit(1787929120.780:943): avc: denied { write } for pid=7982 comm="syz.0.419" name="header" dev="configfs" ino=22323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.609303][ T31] audit: type=1400 audit(1787929120.850:944): avc: denied { write } for pid=7982 comm="syz.0.419" name="fs" dev="configfs" ino=22330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.609391][ T31] audit: type=1400 audit(1787929120.850:945): avc: denied { write } for pid=7982 comm="syz.0.419" name="fs" dev="configfs" ino=22330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.644340][ T31] audit: type=1400 audit(1787929120.880:946): avc: denied { write } for pid=7982 comm="syz.0.419" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.644419][ T31] audit: type=1400 audit(1787929120.880:947): avc: denied { write } for pid=7982 comm="syz.0.419" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.708332][ T7981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.783917][ T7997] kAFS: No cell specified [ 394.793062][ T31] audit: type=1400 audit(1787929121.030:948): avc: denied { cmd } for pid=7994 comm="syz.2.421" path="socket:[22334]" dev="sockfs" ino=22334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.974684][ T8002] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 395.026473][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.422'. [ 395.026513][ T8006] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 395.517795][ T31] audit: type=1326 audit(1787929121.760:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.3.423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6478b9e159 code=0x7fc00000 [ 396.072978][ C1] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 396.844016][ T8037] random: crng reseeded on system resumption [ 397.887052][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 397.887109][ T31] audit: type=1400 audit(1787929124.130:951): avc: denied { create } for pid=8033 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 397.975394][ T31] audit: type=1400 audit(1787929124.220:952): avc: denied { ioctl } for pid=8033 comm="syz.5.427" path="socket:[22404]" dev="sockfs" ino=22404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 398.005953][ T8038] device-mapper: ioctl: Invalid target message parameters. [ 398.034722][ T4933] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 398.072945][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.159754][ T191] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 398.644854][ T4933] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 398.811631][ T4933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.811679][ T4933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.811724][ T4933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.303450][ T4933] usb 1-1: config 0 descriptor?? [ 400.125878][ T4933] usbhid 1-1:0.0: can't add hid device: -71 [ 400.125975][ T4933] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 400.128455][ T4933] usb 1-1: USB disconnect, device number 13 [ 400.871123][ T31] audit: type=1400 audit(1787929126.740:953): avc: denied { write } for pid=8052 comm="syz.0.430" name="instances" dev="tracefs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 400.871251][ T31] audit: type=1400 audit(1787929126.740:954): avc: denied { add_name } for pid=8052 comm="syz.0.430" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 400.914888][ T31] audit: type=1400 audit(1787929126.750:955): avc: denied { create } for pid=8052 comm="syz.0.430" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 402.697424][ T8061] netlink: 168 bytes leftover after parsing attributes in process `syz.5.432'. [ 403.345812][ T31] audit: type=1400 audit(1787929129.590:956): avc: denied { write } for pid=8063 comm="syz.1.433" name="nullb" dev="configfs" ino=3415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.681596][ T31] audit: type=1400 audit(1787929132.370:957): avc: denied { write } for pid=8074 comm="syz.0.436" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.681923][ T31] audit: type=1400 audit(1787929132.550:958): avc: denied { write } for pid=8074 comm="syz.0.436" name="c.1" dev="configfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.911408][ T31] audit: type=1800 audit(1787929133.150:959): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.436" name="idVendor" dev="configfs" ino=23586 res=0 errno=0 [ 406.963094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.987102][ T31] audit: type=1800 audit(1787929133.160:960): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.436" name="idProduct" dev="configfs" ino=23587 res=0 errno=0 [ 407.436660][ T31] audit: type=1800 audit(1787929133.680:961): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.436" name="max_speed" dev="configfs" ino=22654 res=0 errno=0 [ 407.460949][ T31] audit: type=1800 audit(1787929133.710:962): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.436" name="UDC" dev="configfs" ino=23594 res=0 errno=0 [ 412.046307][ T8098] netlink: 80 bytes leftover after parsing attributes in process `syz.1.439'. [ 412.078682][ T2097] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 90 seconds [ 412.359206][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.359543][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.364361][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.364846][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.504306][ T31] audit: type=1400 audit(1787929141.750:963): avc: denied { append } for pid=8100 comm="syz.0.441" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.748828][ T8101] loop5: detected capacity change from 0 to 7 [ 415.797686][ T8101] Dev loop5: unable to read RDB block 7 [ 415.818084][ T8101] loop5: unable to read partition table [ 415.818266][ T8101] loop5: partition table beyond EOD, truncated [ 415.818296][ T8101] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.861542][ T4969] Dev loop5: unable to read RDB block 7 [ 415.861606][ T4969] loop5: unable to read partition table [ 415.861770][ T4969] loop5: partition table beyond EOD, truncated [ 416.361393][ T31] audit: type=1400 audit(1787929142.600:964): avc: denied { append } for pid=8113 comm="syz.5.444" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 418.774220][ T31] audit: type=1326 audit(1787929145.010:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.774279][ T31] audit: type=1326 audit(1787929145.020:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.818735][ T31] audit: type=1400 audit(1787929145.060:967): avc: denied { read } for pid=8125 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.820342][ T31] audit: type=1326 audit(1787929145.060:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.820509][ T31] audit: type=1326 audit(1787929145.060:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.820674][ T31] audit: type=1326 audit(1787929145.060:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.842269][ T31] audit: type=1326 audit(1787929145.080:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 418.842650][ T31] audit: type=1326 audit(1787929145.080:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.0.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74d39e159 code=0x7ffc0000 [ 419.113059][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.817709][ T8149] netlink: 'syz.5.451': attribute type 7 has an invalid length. [ 419.869444][ T8138] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 419.917099][ T8152] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 419.917589][ T8152] udc dummy_udc.0: failed to start g1: -19 [ 419.918105][ T8152] UDC core: g1: couldn't find an available UDC or it's busy [ 421.126007][ T8147] retu-mfd 0-0001: could not read Retu revision: -5 [ 421.173346][ T8147] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 421.193840][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 421.331390][ T8147] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 421.342644][ T8153] i2c i2c-0: new_device: Missing parameters [ 421.493583][ T5816] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 421.514278][ T8155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 421.656661][ T5816] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 421.685094][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.706618][ T5816] usb 6-1: config 0 descriptor?? [ 422.173370][ T52] Bluetooth: hci2: unexpected event for opcode 0x200d [ 424.242976][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.872930][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.468201][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 426.886772][ T5816] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 426.894871][ T5816] [drm:udl_init] *ERROR* Selecting channel failed [ 427.128223][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.462'. [ 427.128259][ T8183] openvswitch: netlink: Flow actions attr not present in new flow. [ 427.202595][ T8183] netlink: 128 bytes leftover after parsing attributes in process `syz.5.462'. [ 427.218737][ T8183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.245056][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 427.245088][ T31] audit: type=1400 audit(1787929153.490:1029): avc: denied { read } for pid=8180 comm="syz.5.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 427.274770][ T5816] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 427.282709][ T5816] [drm] Initialized udl on minor 1 [ 427.305562][ T5816] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.323706][ T5816] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 427.342477][ T5816] usb 6-1: USB disconnect, device number 9 [ 427.591434][ T31] audit: type=1400 audit(1787929153.830:1030): avc: denied { read } for pid=8180 comm="syz.5.462" path="socket:[23085]" dev="sockfs" ino=23085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.322959][ T5753] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 430.432549][ T31] audit: type=1400 audit(1787929156.670:1031): avc: denied { name_bind } for pid=8197 comm="syz.2.467" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 430.503496][ T5753] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 430.514174][ T5753] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.514214][ T5753] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 430.514248][ T5753] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.514278][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.776073][ T5753] usb 6-1: config 0 descriptor?? [ 430.981005][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 433.509014][ T8213] netlink: 200 bytes leftover after parsing attributes in process `syz.3.469'. [ 434.225736][ T8217] EXT4-fs: Conflicting test_dummy_encryption options [ 434.507779][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.566084][ T5753] usb 6-1: string descriptor 0 read error: -71 [ 434.579623][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 434.599471][ T5753] usbhid 6-1:0.0: can't add hid device: -71 [ 434.599567][ T5753] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 434.627212][ T5753] usb 6-1: USB disconnect, device number 10 [ 437.370252][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370514][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370606][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370673][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370768][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370837][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.370932][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.371002][ T191] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 437.451805][ T191] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 437.513639][ T8233] fido_id[8233]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 438.532827][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 438.688695][ T8243] overlayfs: missing 'workdir' [ 438.695866][ T25] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 438.699117][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.699141][ T25] usb 4-1: Product: syz [ 438.699153][ T25] usb 4-1: Manufacturer: syz [ 438.699166][ T25] usb 4-1: SerialNumber: syz [ 438.701233][ T25] usb 4-1: config 0 descriptor?? [ 438.704665][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 438.704685][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 438.820553][ T31] audit: type=1400 audit(1787929165.060:1032): avc: denied { mounton } for pid=8240 comm="syz.0.477" path="/90/bus/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 438.887429][ T8243] lo speed is unknown, defaulting to 1000 [ 438.937254][ T25] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 439.016003][ T8239] bond0: entered promiscuous mode [ 439.016044][ T8239] bond_slave_0: entered promiscuous mode [ 439.018190][ T8239] bond_slave_1: entered promiscuous mode [ 439.026528][ T8239] batadv0: entered promiscuous mode [ 439.045492][ T8239] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 439.046660][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8251 comm=syz.3.475 [ 439.095435][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 439.099450][ T25] dib0700: firmware download failed at 7 with -22 [ 439.302131][ T31] audit: type=1400 audit(1787929165.540:1033): avc: denied { listen } for pid=8247 comm="syz.5.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.353473][ T25] usb 4-1: USB disconnect, device number 13 [ 439.595646][ T8262] jffs2: notice: (8262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.977163][ T8266] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 439.977226][ T8266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 440.859013][ T8272] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 441.680041][ T31] audit: type=1400 audit(1787929167.920:1034): avc: denied { write } for pid=8277 comm="syz.5.485" name="h" dev="configfs" ino=22336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.157047][ T2097] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 120 seconds [ 443.353114][ T52] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 444.770740][ T8290] serio: Serial port ttynull [ 444.776576][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 444.803537][ T8297] netlink: 75 bytes leftover after parsing attributes in process `syz.1.489'. [ 445.121510][ T52] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 445.305356][ T9] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 445.305480][ T9] lpc_ich 0000:00:00.0: No MFD cells added [ 445.872772][ T31] audit: type=1400 audit(1787929172.110:1035): avc: denied { mount } for pid=8298 comm="syz.2.490" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 446.137521][ T191] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 446.137651][ T191] lpc_ich 0000:00:05.0: No MFD cells added [ 446.152240][ T191] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 446.152535][ T191] lpc_ich 0000:00:01.0: No MFD cells added [ 446.448651][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.533843][ T8321] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 446.758843][ T8325] CUSE: info not properly terminated [ 447.013537][ T31] audit: type=1400 audit(1787929173.260:1036): avc: denied { getopt } for pid=8323 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.732099][ T31] audit: type=1400 audit(1787929174.970:1037): avc: denied { getopt } for pid=8342 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 449.036711][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 449.206554][ T31] audit: type=1400 audit(1787929175.440:1038): avc: denied { accept } for pid=8354 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 449.314894][ T31] audit: type=1400 audit(1787929175.550:1039): avc: denied { watch_mount watch_reads } for pid=8348 comm="syz.5.498" path="/56" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 449.700499][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.712107][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.798626][ T8358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.501'. [ 449.812361][ T8358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.850142][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.868474][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.920759][ T31] audit: type=1400 audit(1787929176.160:1040): avc: denied { sys_admin } for pid=8362 comm="syz.2.502" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 450.531966][ T8376] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 450.630119][ T8382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.507'. [ 450.694450][ T31] audit: type=1400 audit(1787929176.940:1041): avc: denied { map } for pid=8381 comm="syz.5.508" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.728129][ T31] audit: type=1400 audit(1787929176.970:1042): avc: denied { execute } for pid=8381 comm="syz.5.508" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.991834][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 453.138684][ T31] audit: type=1400 audit(1787929179.380:1043): avc: denied { write } for pid=8396 comm="syz.0.514" dev="sockfs" ino=23821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 453.337564][ T8400] jffs2: notice: (8400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 454.124471][ T8408] Lens A: ================= START STATUS ================= [ 454.134095][ T8408] Lens A: Focus, Absolute: 0 [ 454.134150][ T8408] Lens A: ================== END STATUS ================== [ 454.287803][ T31] audit: type=1400 audit(1787929180.530:1044): avc: denied { ioctl } for pid=8407 comm="syz.0.516" path="socket:[24976]" dev="sockfs" ino=24976 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.271479][ T8420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.375062][ T5753] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 457.636244][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 457.641877][ T5753] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 457.652527][ T5753] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 457.652571][ T5753] usb 4-1: config 0 has no interface number 0 [ 457.652656][ T5753] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 457.652685][ T5753] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 457.705262][ T5753] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 457.705300][ T5753] usb 4-1: Product: syz [ 457.705354][ T5753] usb 4-1: Manufacturer: syz [ 457.705371][ T5753] usb 4-1: SerialNumber: syz [ 457.730855][ T5753] usb 4-1: config 0 descriptor?? [ 457.746892][ T5753] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 457.756863][ T5753] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 457.778890][ T5753] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 457.793734][ T5753] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 457.803844][ T5753] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 457.816109][ T5753] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 457.825838][ T5753] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 457.835899][ T5753] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 457.845676][ T5753] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 457.855959][ T5753] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 458.482955][ T5753] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 458.754259][ T5753] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 458.787316][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 458.803986][ T5753] usb 6-1: Product: syz [ 458.804111][ T5753] usb 6-1: SerialNumber: syz [ 458.836573][ T5753] usb 6-1: config 0 descriptor?? [ 459.021000][ T5722] usb 4-1: USB disconnect, device number 14 [ 459.074735][ T5722] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 459.128702][ T5722] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 459.143634][ T5722] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 459.168198][ T5722] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 459.180945][ T5722] keyspan 4-1:0.107: device disconnected [ 459.296482][ T31] audit: type=1400 audit(1787929185.540:1045): avc: denied { write } for pid=8442 comm="syz.5.527" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 459.434045][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.674723][ T5753] usb 6-1: USB disconnect, device number 11 [ 459.745598][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.745948][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.802370][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.802696][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.888080][ T8454] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 460.337656][ T8471] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 460.368154][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.379150][ T8471] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 460.684315][ T31] audit: type=1400 audit(1787929186.930:1046): avc: denied { append } for pid=8477 comm="syz.1.540" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.096911][ T31] audit: type=1400 audit(1787929187.340:1047): avc: denied { bind } for pid=8487 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.182356][ T8474] /dev/nullb0: Can't open blockdev [ 461.230696][ T31] audit: type=1400 audit(1787929187.470:1048): avc: denied { getopt } for pid=8486 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.344228][ T8478] macsec1: entered promiscuous mode [ 461.350286][ T8478] dummy0: entered promiscuous mode [ 461.363915][ T8478] macsec1: entered allmulticast mode [ 461.370758][ T8478] dummy0: entered allmulticast mode [ 461.399028][ T8478] dummy0: left allmulticast mode [ 461.511158][ T31] audit: type=1400 audit(1787929187.750:1049): avc: denied { write } for pid=8486 comm="syz.5.543" name="/" dev="ocfs2_dlmfs" ino=23889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.515913][ T5636] dummy0: left promiscuous mode [ 461.539292][ T31] audit: type=1400 audit(1787929187.750:1050): avc: denied { add_name } for pid=8486 comm="syz.5.543" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.571146][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 461.630798][ T31] audit: type=1400 audit(1787929187.860:1051): avc: denied { create } for pid=8486 comm="syz.5.543" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 461.699813][ T31] audit: type=1400 audit(1787929187.940:1052): avc: denied { associate } for pid=8486 comm="syz.5.543" name="mydev" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 461.700760][ T8489] o2cb: This node has not been configured. [ 461.700792][ T8489] o2cb: Cluster check failed. Fix errors before retrying. [ 461.700855][ T8489] (syz.5.543,8489,0):user_dlm_register:674 ERROR: status = -22 [ 461.700922][ T8489] (syz.5.543,8489,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydev" [ 462.568572][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.557'. [ 463.189351][ T8537] netlink: 664 bytes leftover after parsing attributes in process `syz.0.562'. [ 463.320012][ T31] audit: type=1400 audit(1787929189.560:1053): avc: denied { create } for pid=8540 comm="syz.2.564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 463.354866][ T31] audit: type=1400 audit(1787929189.600:1054): avc: denied { write } for pid=8540 comm="syz.2.564" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 463.636028][ T8541] MTD: Couldn't look up './dev/mtdblock0': -2 [ 463.980451][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.996768][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.147759][ T8557] syz.1.572 (8557): drop_caches: 4 [ 464.221961][ T8567] netlink: 'syz.3.575': attribute type 2 has an invalid length. [ 464.328084][ T8562] ip6gre3: entered allmulticast mode [ 464.343797][ T79] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 464.723479][ T5753] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 464.882512][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 464.882545][ T31] audit: type=1400 audit(1787929191.120:1058): avc: denied { execute } for pid=8584 comm="syz.1.584" path="/dev/video2" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.915861][ T5753] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 464.933882][ T5753] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 464.933959][ T5753] usb 4-1: config 1 has no interface number 0 [ 464.934001][ T5753] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 464.934026][ T5753] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 464.934051][ T5753] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.991541][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.999826][ T5753] usb 4-1: Product: syz [ 464.999848][ T5753] usb 4-1: Manufacturer: syz [ 464.999861][ T5753] usb 4-1: SerialNumber: syz [ 465.038788][ T8575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 465.276237][ T5623] Bluetooth: hci4: unexpected event for opcode 0x202f [ 465.287193][ T5753] usb 4-1: Error in usbnet_get_endpoints (-71) [ 465.307680][ T5753] usb 4-1: USB disconnect, device number 15 [ 466.681530][ T31] audit: type=1400 audit(1787929192.920:1059): avc: denied { ioctl } for pid=8609 comm="syz.5.594" path="/dev/sg0" dev="devtmpfs" ino=893 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 466.794767][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 466.942857][ T5816] usb 4-1: device descriptor read/64, error -71 [ 467.070399][ T8617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.597'. [ 467.070436][ T8617] netlink: 148 bytes leftover after parsing attributes in process `syz.1.597'. [ 467.202910][ T5816] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 468.152926][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 468.428542][ T8621] netlink: 5 bytes leftover after parsing attributes in process `syz.5.598'. [ 468.433666][ T5816] usb 4-1: device descriptor read/64, error -71 [ 468.592169][ T5816] usb usb4-port1: attempt power cycle [ 468.723025][ T8621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.422875][ T5816] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 470.277494][ T5816] usb 4-1: device descriptor read/8, error -71 [ 472.373821][ T5882] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 150 seconds [ 473.046800][ T8660] netlink: 'syz.2.615': attribute type 2 has an invalid length. [ 473.102121][ T8662] trusted_key: encrypted_key: insufficient parameters specified [ 475.035359][ T8712] netlink: 'syz.0.637': attribute type 8 has an invalid length. [ 475.404127][ T8728] netlink: 116 bytes leftover after parsing attributes in process `syz.0.645'. [ 475.429402][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 475.429449][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 476.082917][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 476.332934][ T5722] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 476.482878][ T5722] usb 4-1: device descriptor read/64, error -71 [ 476.966252][ T5722] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 477.114264][ T5722] usb 4-1: device descriptor read/64, error -71 [ 477.223127][ T5722] usb usb4-port1: attempt power cycle [ 477.378058][ T8787] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 477.616889][ T5722] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 477.643295][ T5722] usb 4-1: device descriptor read/8, error -71 [ 477.883817][ T5722] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 477.924248][ T5722] usb 4-1: device descriptor read/8, error -71 [ 478.041046][ T5722] usb usb4-port1: unable to enumerate USB device [ 479.366196][ T8845] overlayfs: missing 'lowerdir' [ 481.210891][ T8856] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 481.265754][ T31] audit: type=1400 audit(1787929207.510:1060): avc: denied { ioctl } for pid=8861 comm="syz.0.694" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 481.294591][ T8855] qnx6: unable to read the first superblock [ 481.669964][ T31] audit: type=1400 audit(1787929207.910:1061): avc: denied { read } for pid=8870 comm="syz.1.698" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 481.693903][ T31] audit: type=1400 audit(1787929207.940:1062): avc: denied { open } for pid=8870 comm="syz.1.698" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 482.017420][ T31] audit: type=1400 audit(1787929208.260:1063): avc: denied { getopt } for pid=8878 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.195457][ T8879] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 482.277863][ T31] audit: type=1400 audit(1787929208.520:1064): avc: denied { read } for pid=8886 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.863514][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 485.026020][ T8902] team0: Port device team_slave_0 removed [ 485.480173][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.519270][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.829128][ T31] audit: type=1400 audit(1787929212.070:1065): avc: denied { read } for pid=8938 comm="syz.0.726" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 485.858571][ T31] audit: type=1400 audit(1787929212.070:1066): avc: denied { open } for pid=8938 comm="syz.0.726" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 486.457693][ T31] audit: type=1400 audit(1787929212.700:1067): avc: denied { write } for pid=8970 comm="syz.3.738" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 486.489114][ T31] audit: type=1400 audit(1787929212.730:1068): avc: denied { ioctl } for pid=8970 comm="syz.3.738" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 487.043164][ T31] audit: type=1400 audit(1787929213.280:1069): avc: denied { map } for pid=8991 comm="syz.1.747" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 487.967027][ T9007] /dev/nullb0: Can't lookup blockdev [ 489.973569][ T9026] netlink: 768 bytes leftover after parsing attributes in process `syz.3.762'. [ 490.192590][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.193086][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.528201][ T31] audit: type=1400 audit(1787929216.770:1070): avc: denied { append } for pid=9042 comm="syz.0.769" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 490.528917][ T9043] random: crng reseeded on system resumption [ 491.442870][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 493.106354][ T9083] dlm: no locking on control device [ 493.191572][ T9087] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 493.573001][ T5753] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 493.744121][ T5753] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.756127][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.756161][ T5753] usb 6-1: Product: syz [ 493.756177][ T5753] usb 6-1: Manufacturer: syz [ 493.756193][ T5753] usb 6-1: SerialNumber: syz [ 493.793076][ T5816] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 493.890525][ T5753] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 493.964196][ T5816] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 493.974719][ T5816] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 493.974814][ T5816] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 493.974845][ T5816] usb 4-1: config 220 interface 0 has no altsetting 0 [ 494.008771][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.016977][ T5816] usb 4-1: Product: syz [ 494.016997][ T5816] usb 4-1: Manufacturer: syz [ 494.017011][ T5816] usb 4-1: SerialNumber: syz [ 494.255921][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 494.431552][ T5722] usb 6-1: USB disconnect, device number 12 [ 494.541042][ T9131] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 494.953075][ T5753] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 494.961943][ T5753] ath9k_htc: Failed to initialize the device [ 494.973481][ T5722] usb 6-1: ath9k_htc: USB layer deinitialized [ 495.277367][ T9153] tipc: Can't bind to reserved service type 1 [ 495.403154][ T31] audit: type=1400 audit(1787929221.650:1071): avc: denied { read write } for pid=9155 comm="syz.1.820" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.441955][ T31] audit: type=1400 audit(1787929221.670:1072): avc: denied { open } for pid=9155 comm="syz.1.820" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.537194][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 495.598524][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.609830][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.750481][ T9171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.922489][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.971907][ T9176] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 496.283695][ T9189] netlink: 76 bytes leftover after parsing attributes in process `syz.1.835'. [ 496.468487][ T9197] bridge0: port 3(syz_tun) entered blocking state [ 496.468784][ T9197] bridge0: port 3(syz_tun) entered disabled state [ 496.470589][ T9197] syz_tun: entered allmulticast mode [ 496.629008][ T9197] syz_tun: entered promiscuous mode [ 496.655444][ T9197] bridge0: port 3(syz_tun) entered blocking state [ 496.655570][ T9197] bridge0: port 3(syz_tun) entered forwarding state [ 497.048925][ T9213] __vm_enough_memory: pid: 9213, comm: syz.1.843, bytes: 11727051927552 not enough memory for the allocation [ 497.330982][ T9222] netlink: 'syz.1.848': attribute type 11 has an invalid length. [ 497.346375][ T31] audit: type=1400 audit(1787929223.590:1073): avc: denied { ioctl } for pid=9218 comm="syz.5.847" path="socket:[27962]" dev="sockfs" ino=27962 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.480568][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 497.512058][ T31] audit: type=1400 audit(1787929223.750:1074): avc: denied { ioctl } for pid=9228 comm="syz.1.851" path="socket:[28918]" dev="sockfs" ino=28918 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 497.626992][ T9231] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 497.874059][ T9239] bridge0: port 3(syz_tun) entered blocking state [ 497.882667][ T9239] bridge0: port 3(syz_tun) entered disabled state [ 497.891979][ T9239] syz_tun: entered allmulticast mode [ 497.916015][ T9239] syz_tun: entered promiscuous mode [ 497.916581][ T9239] bridge0: port 3(syz_tun) entered blocking state [ 497.916674][ T9239] bridge0: port 3(syz_tun) entered forwarding state [ 498.082374][ T9248] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 498.732701][ T9271] netlink: 92 bytes leftover after parsing attributes in process `syz.5.869'. [ 499.034933][ T9285] netlink: zone id is out of range [ 499.034960][ T9285] netlink: zone id is out of range [ 499.129285][ T5816] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b03) [ 499.129331][ T5816] uvcvideo 4-1:220.0: No valid video chain found. [ 499.207035][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.207399][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.299951][ T9291] netlink: 76 bytes leftover after parsing attributes in process `syz.5.877'. [ 499.462574][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 499.516863][ T9302] bridge0: port 3(syz_tun) entered blocking state [ 499.516950][ T9302] bridge0: port 3(syz_tun) entered disabled state [ 499.517089][ T9302] syz_tun: entered allmulticast mode [ 499.558018][ T9302] syz_tun: entered promiscuous mode [ 499.578572][ T9302] bridge0: port 3(syz_tun) entered blocking state [ 499.578681][ T9302] bridge0: port 3(syz_tun) entered forwarding state [ 501.123301][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.123670][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.348670][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 502.955707][ T5882] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 180 seconds [ 503.448025][ T9350] openvswitch: netlink: Message has 1 unknown bytes. [ 503.448068][ T9350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.503237][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 503.603323][ T9354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.671520][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 503.682659][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 505.764437][ T31] audit: type=1400 audit(1787929232.010:1075): avc: denied { write } for pid=9392 comm="syz.3.922" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 507.282813][ T9442] ip6gre1: entered allmulticast mode [ 507.300455][ T9447] comedi comedi4: commands at RT priority not supported in this driver [ 507.753215][ T5816] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 508.069736][ T5816] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 508.269981][ T5816] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 508.270030][ T5816] usb 6-1: config 0 has no interface number 0 [ 508.270075][ T5816] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 508.270107][ T5816] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 508.350917][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 508.350943][ T5816] usb 6-1: Manufacturer: syz [ 508.350956][ T5816] usb 6-1: SerialNumber: syz [ 508.921308][ T5816] usb 6-1: config 0 descriptor?? [ 509.396183][ T5816] usbtouchscreen 6-1:0.214: Failed to read FW rev: -32 [ 509.403411][ T5816] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 509.646869][ T9461] openvswitch: netlink: IP tunnel dst address not specified [ 509.666032][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.952'. [ 509.721292][ T31] audit: type=1400 audit(1787929235.960:1076): avc: denied { accept } for pid=9465 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 510.108195][ T9482] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 510.111474][ T9484] overlayfs: unescaped trailing colons in lowerdir mount option. [ 511.991403][ T4933] usb 6-1: USB disconnect, device number 13 [ 512.051099][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 512.631248][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.631612][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.934398][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 513.136938][ T31] audit: type=1400 audit(1787929239.380:1077): avc: denied { ioctl } for pid=9540 comm="syz.0.989" path="socket:[29825]" dev="sockfs" ino=29825 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 513.401314][ T9539] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 514.190230][ T31] audit: type=1400 audit(1787929240.430:1078): avc: denied { connect } for pid=9586 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.225115][ T9591] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 514.234560][ T9591] netlink: 'syz.3.1013': attribute type 2 has an invalid length. [ 514.242443][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 514.267990][ T9593] openvswitch: netlink: IP tunnel dst address not specified [ 514.974508][ T9614] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 515.125451][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 515.183126][ T9626] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 515.348914][ T9632] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1033'. [ 515.720540][ T31] audit: type=1400 audit(1787929241.960:1079): avc: denied { append } for pid=9641 comm="syz.3.1036" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 516.033671][ T9651] netlink: 'syz.5.1042': attribute type 10 has an invalid length. [ 516.033706][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1042'. [ 516.033788][ T9651] team0: entered promiscuous mode [ 516.033807][ T9651] team_slave_0: entered promiscuous mode [ 516.033967][ T9651] team_slave_1: entered promiscuous mode [ 516.034103][ T9651] team0: entered allmulticast mode [ 516.034120][ T9651] team_slave_0: entered allmulticast mode [ 516.034136][ T9651] team_slave_1: entered allmulticast mode [ 516.034778][ T9651] bridge0: port 4(team0) entered blocking state [ 516.034867][ T9651] bridge0: port 4(team0) entered disabled state [ 516.109799][ T9651] bridge0: port 4(team0) entered blocking state [ 516.109898][ T9651] bridge0: port 4(team0) entered forwarding state [ 516.134380][ T31] audit: type=1400 audit(1787929242.370:1080): avc: denied { getopt } for pid=9655 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 516.230153][ T31] audit: type=1400 audit(1787929242.470:1081): avc: denied { append } for pid=9661 comm="syz.0.1047" name="sg0" dev="devtmpfs" ino=893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 516.451203][ T9667] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 516.465179][ T31] audit: type=1400 audit(1787929242.710:1082): avc: denied { getopt } for pid=9669 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 516.627455][ T9675] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 516.845495][ T31] audit: type=1400 audit(1787929243.090:1083): avc: denied { compute_member } for pid=9679 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 517.223133][ T9694] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1060'. [ 517.571829][ T9699] nvme nvme0: rdma connection establishment failed (-104) [ 518.551389][ T9727] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 519.800330][ T31] audit: type=1400 audit(1787929246.040:1084): avc: denied { getopt } for pid=9733 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 519.977804][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 520.232960][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 521.763819][ T9767] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 522.997860][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1108'. [ 523.159723][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1110'. [ 523.774238][ T9844] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1124'. [ 524.279759][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.280462][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.154070][ T5753] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 525.333544][ T5753] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 525.344099][ T5753] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 525.344135][ T5753] usb 6-1: config 0 has no interface number 0 [ 525.344171][ T5753] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 525.344198][ T5753] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 525.387658][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 525.387697][ T5753] usb 6-1: Manufacturer: syz [ 525.387723][ T5753] usb 6-1: SerialNumber: syz [ 525.409338][ T5753] usb 6-1: config 0 descriptor?? [ 525.624584][ T5753] usbtouchscreen 6-1:0.214: Failed to read FW rev: 0 [ 525.624789][ T5753] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 525.845874][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.846218][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.020605][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1159'. [ 526.020652][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1159'. [ 526.148604][ T9920] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.208203][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 526.208266][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 526.559796][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1167'. [ 527.154775][ T9958] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 527.302191][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.302511][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.915877][ T5753] usb 6-1: USB disconnect, device number 14 [ 528.197853][ T9988] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 528.304099][ T31] audit: type=1400 audit(1787929254.540:1085): avc: denied { read } for pid=9995 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 528.458384][T10002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.516362][T10006] 9p: Bad value for 'rfdno' [ 528.618314][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.618651][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.690335][ T31] audit: type=1400 audit(1787929254.930:1086): avc: denied { create } for pid=10015 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 528.695337][ T31] audit: type=1400 audit(1787929254.930:1087): avc: denied { ioctl } for pid=10015 comm="syz.2.1205" path="socket:[32409]" dev="sockfs" ino=32409 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 528.862307][T10014] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 529.556055][T10053] RDS: rds_bind could not find a transport for fe80::a8, load rds_tcp or rds_rdma? [ 529.606394][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.619648][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.646739][T10052] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 529.657807][T10055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.683299][T10058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.721495][T10060] Bluetooth: hci0: unsupported parameter 5135 [ 529.721541][T10060] Bluetooth: hci0: unsupported parameter 8192 [ 529.725567][T10060] Bluetooth: hci0: unsupported parameter 5135 [ 529.725588][T10060] Bluetooth: hci0: unsupported parameter 8192 [ 529.957441][T10068] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 530.385304][ T31] audit: type=1400 audit(1787929256.630:1088): avc: denied { map } for pid=10085 comm="syz.3.1237" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 530.385551][ T31] audit: type=1400 audit(1787929256.630:1089): avc: denied { execute } for pid=10085 comm="syz.3.1237" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 530.490633][T10088] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 530.984042][ T31] audit: type=1400 audit(1787929257.230:1090): avc: denied { listen } for pid=10104 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 531.440962][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1254'. [ 531.482390][T10117] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 531.752869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.796425][T10140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.959518][T10146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.207962][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 532.338088][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.351062][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.368137][ T31] audit: type=1400 audit(1787929258.610:1091): avc: denied { bind } for pid=10156 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 532.386648][ T31] audit: type=1400 audit(1787929258.610:1092): avc: denied { connect } for pid=10163 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 532.575324][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.575456][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594302][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594498][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594603][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594695][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594765][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.594834][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: unknown main item tag 0x0 [ 532.655156][ T5636] hid-generic 0000:FFFFFFFF:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 532.805663][T10175] fido_id[10175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 533.033473][ T5882] block nbd0: Possible stuck request ffff888027a77000: control (read@0,4096B). Runtime 210 seconds [ 533.066637][ T31] audit: type=1400 audit(1787929259.310:1093): avc: denied { write } for pid=10182 comm="syz.1.1283" path="socket:[33255]" dev="sockfs" ino=33255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 533.274718][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.295533][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.966981][T10215] ext4: Unknown parameter 'barrieryÐHÇ ' [ 534.036774][ T31] audit: type=1400 audit(1787929260.280:1094): avc: denied { create } for pid=10223 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 534.048085][ T31] audit: type=1400 audit(1787929260.280:1095): avc: denied { write } for pid=10223 comm="syz.0.1301" path="socket:[33418]" dev="sockfs" ino=33418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 534.391474][T10232] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 534.950051][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0f [ 535.015673][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 535.202793][ T5816] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 535.732878][ T5816] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 535.922858][ T5816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.922904][ T5816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.922949][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.883513][ T31] audit: type=1400 audit(1787929263.130:1096): avc: denied { bind } for pid=10279 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 536.883898][ T31] audit: type=1400 audit(1787929263.130:1097): avc: denied { name_bind } for pid=10279 comm="syz.1.1325" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 536.884152][ T31] audit: type=1400 audit(1787929263.130:1098): avc: denied { node_bind } for pid=10279 comm="syz.1.1325" saddr=100.1.1.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 537.138143][ T5816] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x6 [ 537.138197][ T5816] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 537.159817][T10289] usb usb9: usbfs: process 10289 (syz.3.1330) did not claim interface 4 before use [ 537.213171][ T5816] hid-picolcd 0003:04D8:C002.0005: unsupported KEY_STATE report [ 537.213597][ T5816] hid-picolcd 0003:04D8:C002.0005: probe with driver hid-picolcd failed with error -22 [ 537.258689][T10290] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 537.346236][ T5816] usb 6-1: USB disconnect, device number 15 [ 537.640668][T10305] scsi_nl_rcv_msg: discarding partial skb [ 537.640758][ T31] audit: type=1400 audit(1787929263.880:1099): avc: denied { write } for pid=10304 comm="syz.1.1337" path="socket:[33777]" dev="sockfs" ino=33777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 538.093148][ T31] audit: type=1400 audit(1787929264.340:1100): avc: denied { connect } for pid=10327 comm="syz.2.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.351487][T10338] tipc: Enabling of bearer rejected, media not registered [ 538.535916][T10342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.021491][ T31] audit: type=1326 audit(1787929265.260:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.1.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f176799e159 code=0x0 [ 539.155359][T10376] xt_LOG: level 115 >= 8 [ 539.888054][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'. [ 540.064333][ T5623] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 540.114560][T10416] netlink: 'syz.0.1390': attribute type 14 has an invalid length. [ 540.326530][T10420] xt_hashlimit: size too large, truncated to 1048576 [ 540.343853][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1395'. [ 540.806571][ T31] audit: type=1400 audit(1787929267.050:1102): avc: denied { read } for pid=10436 comm="syz.2.1399" path="socket:[34818]" dev="sockfs" ino=34818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 541.792817][ T5753] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 541.954179][ T5753] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 541.955033][ T5753] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 541.955053][ T5753] usb 6-1: config 0 has no interface number 0 [ 541.955081][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.955099][ T5753] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 541.955169][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 541.955190][ T5753] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 541.955212][ T5753] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 541.955234][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.955266][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.967083][ T5753] usb 6-1: config 0 descriptor?? [ 541.967752][T10472] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 541.967850][T10472] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 541.998961][ T5753] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 542.303893][ T5753] usb 6-1: USB disconnect, device number 16 [ 542.312177][ T5753] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 542.361329][T10503] ip_tables: iptables: counters copy to user failed while replacing table [ 542.715190][ ** replaying previous printk message ** [ 542.715190][ T31] audit: type=1800 audit(1787929268.960:1103): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1437" name="file" dev="configfs" ino=34387 res=0 errno=0 [ 542.716184][T10517] [ 542.743933][T10517] ====================================================== [ 542.750938][T10517] WARNING: possible circular locking dependency detected [ 542.757957][T10517] syzkaller #0 Tainted: G L [ 542.763934][T10517] ------------------------------------------------------ [ 542.770941][T10517] syz.1.1437/10517 is trying to acquire lock: [ 542.776998][T10517] ffff88802a9c4460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 542.785724][T10517] [ 542.785724][T10517] but task is already holding lock: [ 542.793166][T10517] ffff8880780b5920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 542.802402][T10517] [ 542.802402][T10517] which lock already depends on the new lock. [ 542.802402][T10517] [ 542.812796][T10517] [ 542.812796][T10517] the existing dependency chain (in reverse order) is: [ 542.821803][T10517] [ 542.821803][T10517] -> #4 (&common->filesem){++++}-{4:4}: [ 542.829534][T10517] lock_acquire+0x1d1/0x380 [ 542.834570][T10517] down_read+0x99/0x4c0 [ 542.839237][T10517] fsg_show_file+0x20/0x180 [ 542.844247][T10517] configfs_read_iter+0x426/0x6f0 [ 542.849788][T10517] __kernel_read+0x397/0xad0 [ 542.854912][T10517] integrity_kernel_read+0x7e/0xb0 [ 542.860537][T10517] ima_calc_file_hash_tfm+0x25e/0x350 [ 542.866425][T10517] ima_calc_file_hash+0x1e3/0x380 [ 542.871961][T10517] ima_collect_measurement+0x94f/0xb30 [ 542.877934][T10517] process_measurement+0xdfe/0x2350 [ 542.883664][T10517] ima_file_check+0xc3/0x110 [ 542.888772][T10517] security_file_post_open+0xc4/0x210 [ 542.894671][T10517] path_openat+0x5cd/0x2440 [ 542.899686][T10517] do_file_open+0x20e/0x430 [ 542.904696][T10517] do_sys_openat2+0x10f/0x1e0 [ 542.909890][T10517] __x64_sys_openat+0x12d/0x210 [ 542.915256][T10517] do_syscall_64+0x123/0x790 [ 542.920355][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.926756][T10517] [ 542.926756][T10517] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 542.934128][T10517] lock_acquire+0x1d1/0x380 [ 542.939139][T10517] down_read+0x99/0x4c0 [ 542.943802][T10517] configfs_write_iter+0x218/0x4e0 [ 542.949431][T10517] vfs_write+0x6af/0x1050 [ 542.954277][T10517] ksys_write+0x12a/0x250 [ 542.959119][T10517] do_syscall_64+0x123/0x790 [ 542.964216][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.970636][T10517] [ 542.970636][T10517] -> #2 (&buffer->mutex#2){+.+.}-{4:4}: [ 542.978357][T10517] lock_acquire+0x1d1/0x380 [ 542.983368][T10517] __mutex_lock+0x1a4/0x1bc0 [ 542.988463][T10517] configfs_read_iter+0x79/0x6f0 [ 542.994349][T10517] __kernel_read+0x397/0xad0 [ 542.999450][T10517] integrity_kernel_read+0x7e/0xb0 [ 543.005073][T10517] ima_calc_file_hash_tfm+0x25e/0x350 [ 543.010959][T10517] ima_calc_file_hash+0x1e3/0x380 [ 543.016496][T10517] ima_collect_measurement+0x94f/0xb30 [ 543.022479][T10517] process_measurement+0xdfe/0x2350 [ 543.028209][T10517] ima_file_check+0xc3/0x110 [ 543.033324][T10517] security_file_post_open+0xc4/0x210 [ 543.039219][T10517] path_openat+0x5cd/0x2440 [ 543.044240][T10517] do_file_open+0x20e/0x430 [ 543.049256][T10517] do_sys_openat2+0x10f/0x1e0 [ 543.054448][T10517] __x64_sys_openat+0x12d/0x210 [ 543.059808][T10517] do_syscall_64+0x123/0x790 [ 543.064907][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.071306][T10517] [ 543.071306][T10517] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 543.079895][T10517] lock_acquire+0x1d1/0x380 [ 543.084909][T10517] __mutex_lock+0x1a4/0x1bc0 [ 543.090005][T10517] ima_file_truncate+0xe6/0x190 [ 543.095369][T10517] security_file_truncate+0xf9/0x1e0 [ 543.101170][T10517] path_openat+0x1d7e/0x2440 [ 543.106287][T10517] do_file_open+0x20e/0x430 [ 543.111314][T10517] do_sys_openat2+0x10f/0x1e0 [ 543.116514][T10517] __x64_sys_creat+0xcc/0x120 [ 543.121705][T10517] do_syscall_64+0x123/0x790 [ 543.126803][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.133201][T10517] [ 543.133201][T10517] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 543.140579][T10517] check_prev_add+0xeb/0xe60 [ 543.145678][T10517] __lock_acquire+0x1492/0x1ec0 [ 543.151036][T10517] lock_acquire+0x1d1/0x380 [ 543.156045][T10517] mnt_want_write+0x6f/0x420 [ 543.161144][T10517] lookup_open+0x150/0x1990 [ 543.166162][T10517] path_openat+0xa2c/0x2440 [ 543.171175][T10517] do_file_open+0x20e/0x430 [ 543.176185][T10517] file_open_name+0x1c3/0x3e0 [ 543.181377][T10517] filp_open+0x2e/0x50 [ 543.185958][T10517] fsg_lun_open+0x6b/0x7b0 [ 543.190877][T10517] fsg_store_file+0x1e7/0x450 [ 543.196062][T10517] configfs_write_iter+0x302/0x4e0 [ 543.201685][T10517] vfs_write+0x6af/0x1050 [ 543.206530][T10517] ksys_write+0x12a/0x250 [ 543.211378][T10517] do_syscall_64+0x123/0x790 [ 543.216473][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.222876][T10517] [ 543.222876][T10517] other info that might help us debug this: [ 543.222876][T10517] [ 543.233092][T10517] Chain exists of: [ 543.233092][T10517] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 543.233092][T10517] [ 543.245692][T10517] Possible unsafe locking scenario: [ 543.245692][T10517] [ 543.253126][T10517] CPU0 CPU1 [ 543.258474][T10517] ---- ---- [ 543.263819][T10517] lock(&common->filesem); [ 543.268305][T10517] lock(&p->frag_sem); [ 543.274965][T10517] lock(&common->filesem); [ 543.281978][T10517] rlock(sb_writers#6); [ 543.286230][T10517] [ 543.286230][T10517] *** DEADLOCK *** [ 543.286230][T10517] [ 543.294354][T10517] locks held by syz.1.1437/10517: 5, last CPU#1: [ 543.300663][T10517] #0: ffff888067dedcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 543.309703][T10517] #1: ffff88801e35c460 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 543.318765][T10517] #2: ffff88807ade3c80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 543.328765][T10517] #3: ffff8880764dc370 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 543.338503][T10517] #4: ffff8880780b5920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 543.348155][T10517] [ 543.348155][T10517] stack backtrace: [ 543.354039][T10517] CPU: 1 UID: 0 PID: 10517 Comm: syz.1.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.364979][T10517] Tainted: [L]=SOFTLOCKUP [ 543.369291][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.379331][T10517] Call Trace: [ 543.382596][T10517] [ 543.385511][T10517] dump_stack_lvl+0x100/0x190 [ 543.390182][T10517] print_circular_bug.cold+0x178/0x1be [ 543.395637][T10517] check_noncircular+0x146/0x160 [ 543.400570][T10517] check_prev_add+0xeb/0xe60 [ 543.405147][T10517] __lock_acquire+0x1492/0x1ec0 [ 543.409986][T10517] lock_acquire+0x1d1/0x380 [ 543.414733][T10517] ? lookup_open+0x150/0x1990 [ 543.419408][T10517] ? __pfx___might_resched+0x10/0x10 [ 543.424686][T10517] ? find_held_lock+0x2b/0x80 [ 543.429357][T10517] mnt_want_write+0x6f/0x420 [ 543.433930][T10517] ? lookup_open+0x150/0x1990 [ 543.438602][T10517] lookup_open+0x150/0x1990 [ 543.443099][T10517] path_openat+0xa2c/0x2440 [ 543.447589][T10517] ? __pfx_path_openat+0x10/0x10 [ 543.452519][T10517] ? kasan_save_stack+0x3f/0x50 [ 543.457361][T10517] ? kasan_save_stack+0x30/0x50 [ 543.462197][T10517] ? kasan_save_track+0x14/0x30 [ 543.467029][T10517] ? __kasan_slab_alloc+0x89/0x90 [ 543.472037][T10517] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 543.477666][T10517] ? do_getname_kernel+0x5d/0x250 [ 543.482678][T10517] ? filp_open+0x1d/0x50 [ 543.486913][T10517] do_file_open+0x20e/0x430 [ 543.491406][T10517] ? __pfx_do_file_open+0x10/0x10 [ 543.496427][T10517] file_open_name+0x1c3/0x3e0 [ 543.501093][T10517] ? __pfx_file_open_name+0x10/0x10 [ 543.506278][T10517] ? do_getname_kernel+0x5d/0x250 [ 543.511290][T10517] ? __asan_memcpy+0x3c/0x60 [ 543.515872][T10517] ? do_getname_kernel+0x1be/0x250 [ 543.520975][T10517] filp_open+0x2e/0x50 [ 543.525035][T10517] fsg_lun_open+0x6b/0x7b0 [ 543.529440][T10517] ? __pfx_down_read+0x10/0x10 [ 543.534194][T10517] fsg_store_file+0x1e7/0x450 [ 543.538854][T10517] configfs_write_iter+0x302/0x4e0 [ 543.543970][T10517] vfs_write+0x6af/0x1050 [ 543.548326][T10517] ? __pfx_configfs_write_iter+0x10/0x10 [ 543.553966][T10517] ? __pfx_vfs_write+0x10/0x10 [ 543.558731][T10517] ? find_held_lock+0x2b/0x80 [ 543.563406][T10517] ksys_write+0x12a/0x250 [ 543.567731][T10517] ? __pfx_ksys_write+0x10/0x10 [ 543.572596][T10517] do_syscall_64+0x123/0x790 [ 543.577175][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.583057][T10517] RIP: 0033:0x7f176799e159 [ 543.587458][T10517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.607069][T10517] RSP: 002b:00007f176878a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.615469][T10517] RAX: ffffffffffffffda RBX: 00007f1767c25fa0 RCX: 00007f176799e159 [ 543.623428][T10517] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 543.631388][T10517] RBP: 00007f1767a35024 R08: 0000000000000000 R09: 0000000000000000 [ 543.639345][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.647304][T10517] R13: 00007f1767c26038 R14: 00007f1767c25fa0 R15: 00007ffce07c22c8 [ 543.655284][T10517] [ 543.715607][T10517] mass_storage.0/lun.0: unable to open backing file: fi [ 546.806014][ T4969] udevd[4969]: worker [5642] /devices/virtual/block/nbd0 timeout; kill it [ 546.806184][ T4969] udevd[4969]: seq 11919 '/devices/virtual/block/nbd0' killed [ 547.112834][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.232800][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!