last executing test programs: 4.512911931s ago: executing program 0 (id=142): bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0xe2ae09773fc4def6, 0x6, "57f8a77dcc76"}, 0x0, 0x0, 0x0, 0x0}) 2.220372452s ago: executing program 2 (id=156): ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xfff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffc, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 2.009186965s ago: executing program 0 (id=157): getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_dev$hiddev(0x0, 0x1, 0x2) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x3f, &(0x7f0000000b40)={0x1f, 0xfffff7fc, 0xffff}) 1.250236456s ago: executing program 2 (id=161): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.250071611s ago: executing program 2 (id=162): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80) 1.168361113s ago: executing program 0 (id=163): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.168083778s ago: executing program 2 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x200000000, 0x100000000, 0x9, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x4, 0x103, 0x5, 0x8, 0x7, 0xffffffffffffffff], 0x8000000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.100365709s ago: executing program 0 (id=165): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0xc0, 0x30, 0x1, 0x0, 0x2, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x4}, {0x74, 0x1, [@m_gact={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 908.044671ms ago: executing program 0 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xffff1000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0xfe, 0x9, 0x3}, {0x0, 0x25000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x40000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x0, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x25000, 0x70000, 0x4, 0x0, 0xdf}) 810.529387ms ago: executing program 0 (id=170): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 587.421233ms ago: executing program 3 (id=171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008084}, 0x40c0) 487.758627ms ago: executing program 3 (id=172): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x6}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x3e, 0xfed, 0x2}, 0x28) 487.406042ms ago: executing program 3 (id=173): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 408.34639ms ago: executing program 3 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002004e21e00000010000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000001c38f8affbdb5b4306"], 0x90) 408.219936ms ago: executing program 3 (id=175): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20) 320.493697ms ago: executing program 3 (id=176): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 270.581768ms ago: executing program 1 (id=178): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, r1, 0x2) tee(r1, r1, 0x6, 0x1) 270.410218ms ago: executing program 1 (id=179): syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 199.638711ms ago: executing program 2 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 120.726812ms ago: executing program 1 (id=181): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc) 120.525205ms ago: executing program 1 (id=182): mlockall(0x7) brk(0x75555ede6000) 50.728239ms ago: executing program 1 (id=183): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="6a9988fb", 0x4}], 0x1, 0x7, 0xa4, 0x0) 50.503933ms ago: executing program 1 (id=184): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 0s ago: executing program 2 (id=185): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) kernel console output (not intermixed with test programs): [ 37.974207][ T42] audit: type=1400 audit(1785296170.797:114): avc: denied { rlimitinh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.980998][ T42] audit: type=1400 audit(1785296170.797:115): avc: denied { siginh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:54816' (ED25519) to the list of known hosts. [ 40.242273][ T42] audit: type=1400 audit(1785296173.087:116): avc: denied { name_bind } for pid=5646 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.278851][ T42] audit: type=1400 audit(1785296173.117:117): avc: denied { execute } for pid=5647 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.286143][ T42] audit: type=1400 audit(1785296173.117:118): avc: denied { execute_no_trans } for pid=5647 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.328595][ T42] audit: type=1400 audit(1785296173.167:119): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.373555][ T42] audit: type=1400 audit(1785296173.217:120): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.576142][ T42] audit: type=1400 audit(1785296173.417:121): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.627001][ T42] audit: type=1400 audit(1785296173.467:122): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.714565][ T42] audit: type=1400 audit(1785296173.557:123): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.768195][ T42] audit: type=1400 audit(1785296173.607:124): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.867991][ T42] audit: type=1400 audit(1785296173.707:125): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.131695][ T5647] cgroup: Unknown subsys name 'net' [ 43.264302][ T5647] cgroup: Unknown subsys name 'cpuset' [ 43.269642][ T5647] cgroup: Unknown subsys name 'rlimit' [ 43.495816][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.325633][ T5647] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.182436][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 48.182455][ T42] audit: type=1400 audit(1785296181.027:161): avc: denied { execmem } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.428512][ T42] audit: type=1400 audit(1785296181.267:162): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.442479][ T42] audit: type=1400 audit(1785296181.267:163): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.450986][ T42] audit: type=1400 audit(1785296181.267:164): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.452270][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.452295][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.459723][ T42] audit: type=1400 audit(1785296181.287:165): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[1804]" dev="sockfs" ino=1804 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.463529][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.465970][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.475866][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.478588][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.478641][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.479650][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.481190][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.481846][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.482006][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.482862][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.483391][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.484210][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.484268][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.484846][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.485564][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.487255][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.487724][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.492761][ T42] audit: type=1400 audit(1785296181.337:166): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.502394][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.502568][ T42] audit: type=1400 audit(1785296181.337:168): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.539172][ T42] audit: type=1400 audit(1785296181.337:167): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.547540][ T42] audit: type=1400 audit(1785296181.347:169): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.555752][ T42] audit: type=1400 audit(1785296181.347:170): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.242926][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.246037][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.248772][ T5738] bridge_slave_0: entered allmulticast mode [ 49.252792][ T5738] bridge_slave_0: entered promiscuous mode [ 49.264165][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.267194][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.270213][ T5742] bridge_slave_0: entered allmulticast mode [ 49.273558][ T5742] bridge_slave_0: entered promiscuous mode [ 49.284847][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.287960][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.291085][ T5738] bridge_slave_1: entered allmulticast mode [ 49.294775][ T5738] bridge_slave_1: entered promiscuous mode [ 49.321687][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.324120][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.328699][ T5742] bridge_slave_1: entered allmulticast mode [ 49.332332][ T5742] bridge_slave_1: entered promiscuous mode [ 49.368576][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.374801][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.397926][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.400982][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.403547][ T5733] bridge_slave_0: entered allmulticast mode [ 49.406283][ T5733] bridge_slave_0: entered promiscuous mode [ 49.419000][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.421971][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.424579][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.427119][ T5734] bridge_slave_0: entered allmulticast mode [ 49.430454][ T5734] bridge_slave_0: entered promiscuous mode [ 49.434374][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.437175][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.439962][ T5734] bridge_slave_1: entered allmulticast mode [ 49.443215][ T5734] bridge_slave_1: entered promiscuous mode [ 49.446279][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.448905][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.451322][ T5733] bridge_slave_1: entered allmulticast mode [ 49.454236][ T5733] bridge_slave_1: entered promiscuous mode [ 49.477098][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.514376][ T5738] team0: Port device team_slave_0 added [ 49.536530][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.541758][ T5738] team0: Port device team_slave_1 added [ 49.547035][ T5742] team0: Port device team_slave_0 added [ 49.551256][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.556645][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.579160][ T5742] team0: Port device team_slave_1 added [ 49.593582][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.634991][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.637875][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.648293][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.654405][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.659696][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.670431][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.676170][ T5733] team0: Port device team_slave_0 added [ 49.688996][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.692387][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.702131][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.706867][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.709398][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.718606][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.724648][ T5733] team0: Port device team_slave_1 added [ 49.728715][ T5734] team0: Port device team_slave_0 added [ 49.736006][ T5734] team0: Port device team_slave_1 added [ 49.773933][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.776768][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.787182][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.793813][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.796036][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.804676][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.840387][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.842712][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.851139][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.856652][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.858933][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.867510][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.886606][ T5742] hsr_slave_0: entered promiscuous mode [ 49.890419][ T5742] hsr_slave_1: entered promiscuous mode [ 49.919357][ T5738] hsr_slave_0: entered promiscuous mode [ 49.922157][ T5738] hsr_slave_1: entered promiscuous mode [ 49.924953][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 49.927176][ T5738] Cannot create hsr debugfs directory [ 49.963115][ T5733] hsr_slave_0: entered promiscuous mode [ 49.965993][ T5733] hsr_slave_1: entered promiscuous mode [ 49.968540][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.970584][ T5733] Cannot create hsr debugfs directory [ 50.012114][ T5734] hsr_slave_0: entered promiscuous mode [ 50.015132][ T5734] hsr_slave_1: entered promiscuous mode [ 50.017887][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 50.020208][ T5734] Cannot create hsr debugfs directory [ 50.346713][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.357322][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.362306][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.367660][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.371310][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.377799][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.380939][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.386358][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.441950][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.449176][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.456983][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.462742][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.466361][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.472158][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.491004][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.496356][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.550130][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.555485][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.558600][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.561530][ T5746] Bluetooth: hci1: command tx timeout [ 50.567169][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.571207][ T5746] Bluetooth: hci3: command tx timeout [ 50.571596][ T5740] Bluetooth: hci0: command tx timeout [ 50.573929][ T5746] Bluetooth: hci2: command tx timeout [ 50.582509][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.588401][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.603884][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.609429][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.669213][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.673280][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.681470][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.685932][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.692613][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.696641][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.702493][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.706933][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.714220][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.758525][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.780296][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.783362][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.799934][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.802651][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.828626][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.878391][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.887564][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.890463][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.897696][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.909698][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.912356][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.930245][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.947793][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.963554][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.966671][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.977172][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.986408][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.989252][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.004278][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.007024][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.017505][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.020459][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.197123][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.233928][ T5742] veth0_vlan: entered promiscuous mode [ 51.244102][ T5742] veth1_vlan: entered promiscuous mode [ 51.267457][ T5742] veth0_macvtap: entered promiscuous mode [ 51.274338][ T5742] veth1_macvtap: entered promiscuous mode [ 51.284545][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.295652][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.305083][ T5545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.310256][ T5545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.313836][ T5545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.318753][ T5545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.345061][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.429343][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.432687][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.436583][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.461574][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.467181][ T5738] veth0_vlan: entered promiscuous mode [ 51.473725][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.476319][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.487545][ T5738] veth1_vlan: entered promiscuous mode [ 51.521371][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.540790][ T5733] veth0_vlan: entered promiscuous mode [ 51.557588][ T5738] veth0_macvtap: entered promiscuous mode [ 51.573405][ T5734] veth0_vlan: entered promiscuous mode [ 51.576368][ T5738] veth1_macvtap: entered promiscuous mode [ 51.584567][ T5733] veth1_vlan: entered promiscuous mode [ 51.604517][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.619108][ T5734] veth1_vlan: entered promiscuous mode [ 51.632490][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.642942][ T5733] veth0_macvtap: entered promiscuous mode [ 51.650026][ T5545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653809][ T5545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.657864][ T5733] veth1_macvtap: entered promiscuous mode [ 51.663175][ T5545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.675226][ T5545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.698402][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.712553][ T5734] veth0_macvtap: entered promiscuous mode [ 51.720711][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.728370][ T5734] veth1_macvtap: entered promiscuous mode [ 51.758780][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.762411][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.764787][ T5545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.769334][ T5545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.785091][ T5545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.797576][ T5545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.815150][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.847350][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.853069][ T5545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.858187][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.861428][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.867311][ T5545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.872289][ T5545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.881732][ T5545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.914129][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.917895][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.979169][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.983374][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.014613][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.021082][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.065203][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.068393][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.075334][ T5899] syzkaller0: entered promiscuous mode [ 52.077857][ T5899] syzkaller0: entered allmulticast mode [ 52.227460][ T5911] usb usb1: usbfs: process 5911 (syz.3.6) did not claim interface 0 before use [ 52.643523][ T5740] Bluetooth: hci3: command tx timeout [ 52.646170][ T5741] Bluetooth: hci2: command tx timeout [ 52.646216][ T64] Bluetooth: hci1: command tx timeout [ 52.648747][ T5746] Bluetooth: hci0: command tx timeout [ 53.005862][ T5967] ======================================================= [ 53.005862][ T5967] WARNING: The mand mount option has been deprecated and [ 53.005862][ T5967] and is ignored by this kernel. Remove the mand [ 53.005862][ T5967] option from the mount to silence this warning. [ 53.005862][ T5967] ======================================================= [ 53.295623][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 53.295651][ T42] audit: type=1400 audit(1785296186.137:209): avc: denied { watch } for pid=5970 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.343922][ T42] audit: type=1400 audit(1785296186.187:210): avc: denied { read write } for pid=5972 comm="syz.0.18" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.352246][ T42] audit: type=1400 audit(1785296186.187:211): avc: denied { open } for pid=5972 comm="syz.0.18" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.362931][ T42] audit: type=1400 audit(1785296186.187:212): avc: denied { ioctl } for pid=5972 comm="syz.0.18" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.527667][ T42] audit: type=1400 audit(1785296186.367:213): avc: denied { read } for pid=5976 comm="syz.1.20" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.537044][ T42] audit: type=1400 audit(1785296186.367:214): avc: denied { open } for pid=5976 comm="syz.1.20" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.580610][ T2328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.667945][ T42] audit: type=1400 audit(1785296186.507:215): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.690504][ T1352] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.735981][ T2328] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 53.739269][ T2328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.743013][ T2328] usb 5-1: Product: syz [ 53.744638][ T2328] usb 5-1: Manufacturer: syz [ 53.746258][ T2328] usb 5-1: SerialNumber: syz [ 53.758708][ T2328] ums-karma 5-1:1.0: USB Mass Storage device detected [ 53.760506][ T42] audit: type=1400 audit(1785296186.597:216): avc: denied { name_bind } for pid=5982 comm="syz.1.22" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.767881][ T2328] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 53.767881][ T2328] Please send a copy of this message to and [ 53.798619][ T42] audit: type=1400 audit(1785296186.637:217): avc: denied { write } for pid=5986 comm="syz.1.23" name="if_inet6" dev="proc" ino=4026533093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.941964][ T1352] usb 7-1: unable to get BOS descriptor or descriptor too short [ 53.946440][ T1352] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 53.954141][ T1352] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 53.957712][ T1352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.961124][ T1352] usb 7-1: Product: syz [ 53.963233][ T1352] usb 7-1: Manufacturer: syz [ 53.964762][ T1352] usb 7-1: SerialNumber: syz [ 54.051536][ T5841] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 54.187196][ T1352] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.216216][ T5841] usb 8-1: config 4 has an invalid interface number: 12 but max is 0 [ 54.218905][ T5841] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 54.223921][ T5841] usb 8-1: config 4 has no interface number 0 [ 54.226177][ T2328] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 54.229212][ T5841] usb 8-1: config 4 interface 12 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.233538][ T5841] usb 8-1: config 4 interface 12 has no altsetting 0 [ 54.237884][ T5841] usb 8-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 54.241128][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.243670][ T5841] usb 8-1: Product: syz [ 54.245314][ T5841] usb 8-1: Manufacturer: syz [ 54.246858][ T5841] usb 8-1: SerialNumber: syz [ 54.250123][ T2328] usb 5-1: USB disconnect, device number 2 [ 54.375797][ T1352] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.379415][ T1352] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 54.465446][ T5841] usb 8-1: USB disconnect, device number 2 [ 54.721394][ T5740] Bluetooth: hci3: command tx timeout [ 54.722065][ T64] Bluetooth: hci1: command tx timeout [ 54.723491][ T5740] Bluetooth: hci0: command tx timeout [ 54.724394][ T5746] Bluetooth: hci2: command tx timeout [ 54.780972][ T1352] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.784428][ T1352] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 54.961130][ T2328] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.985338][ T1352] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 54.993058][ T42] audit: type=1400 audit(1785296187.837:218): avc: denied { create } for pid=5998 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.024369][ T1352] usb 7-1: USB disconnect, device number 2 [ 55.055996][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.140451][ T2328] usb 6-1: Using ep0 maxpacket: 16 [ 55.144002][ T2328] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 55.147347][ T2328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.153156][ T2328] usb 6-1: config 0 descriptor?? [ 55.571726][ T2328] elo 0003:04E7:0009.0002: unknown main item tag 0x3 [ 55.574132][ T2328] elo 0003:04E7:0009.0002: unknown global tag 0xc [ 55.576406][ T2328] elo 0003:04E7:0009.0002: item 0 2 1 12 parsing failed [ 55.579493][ T2328] elo 0003:04E7:0009.0002: parse failed [ 55.582501][ T2328] elo 0003:04E7:0009.0002: probe with driver elo failed with error -22 [ 55.767233][ T41] usb 6-1: USB disconnect, device number 2 [ 56.542355][ T6030] support for the xor transformation has been removed. [ 56.800849][ T5740] Bluetooth: hci1: command tx timeout [ 56.810487][ T5740] Bluetooth: hci0: command tx timeout [ 56.813543][ T64] Bluetooth: hci2: command tx timeout [ 56.813634][ T5741] Bluetooth: hci3: command tx timeout [ 56.830490][ T5819] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 57.295134][ T5819] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.298845][ T5819] usb 7-1: config 0 has no interface number 0 [ 57.301588][ T5819] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.305623][ T5819] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.309139][ T5819] usb 7-1: config 0 interface 1 has no altsetting 0 [ 57.311544][ T5819] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 57.314883][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.321276][ T5819] usb 7-1: config 0 descriptor?? [ 57.449994][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 57.565791][ T6056] kvm: pic: non byte write [ 57.758271][ T6070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.55'. [ 57.764603][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 57.929199][ T5819] uclogic 0003:2179:0053.0003: pen parameters not found [ 57.932293][ T5819] uclogic 0003:2179:0053.0003: interface is invalid, ignoring [ 58.134041][ T5819] usb 7-1: USB disconnect, device number 3 [ 58.194411][ T6085] xt_nat: multiple ranges no longer supported [ 58.360406][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.440542][ T29] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 58.530878][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 58.534323][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.537104][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 58.537119][ T42] audit: type=1400 audit(1785296191.377:249): avc: denied { append } for pid=6086 comm="syz.0.61" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.537715][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.556465][ T34] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.559341][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.562231][ T34] usb 6-1: Product: syz [ 58.564206][ T34] usb 6-1: Manufacturer: syz [ 58.566074][ T34] usb 6-1: SerialNumber: syz [ 58.577263][ T34] usb 6-1: 0:2 : does not exist [ 58.593897][ T42] audit: type=1400 audit(1785296191.437:250): avc: denied { ioctl } for pid=6079 comm="syz.3.58" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.796933][ T34] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 58.802965][ T6098] futex_wake_op: syz.0.64 tries to shift op by 144; fix this program [ 58.886695][ T42] audit: type=1400 audit(1785296191.657:251): avc: denied { write } for pid=6092 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.895891][ T42] audit: type=1400 audit(1785296191.667:252): avc: denied { read write } for pid=6092 comm="syz.0.64" name="usbmon8" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.907189][ T42] audit: type=1400 audit(1785296191.667:253): avc: denied { open } for pid=6092 comm="syz.0.64" path="/dev/usbmon8" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.907322][ T42] audit: type=1400 audit(1785296191.737:254): avc: denied { name_bind } for pid=6092 comm="syz.0.64" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.006026][ T34] usb 6-1: USB disconnect, device number 3 [ 59.121945][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.744200][ T42] audit: type=1400 audit(1785296192.587:255): avc: denied { create } for pid=6104 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.750754][ T42] audit: type=1400 audit(1785296192.587:256): avc: denied { getopt } for pid=6104 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.970449][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 60.130457][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 60.134424][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.138865][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.144700][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.149288][ T5880] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.152664][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.159428][ T5880] usb 7-1: config 0 descriptor?? [ 60.576993][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input5 [ 60.595270][ T5880] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 60.745325][ T42] audit: type=1400 audit(1785296193.587:257): avc: denied { create } for pid=6118 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.754913][ T42] audit: type=1400 audit(1785296193.597:258): avc: denied { bind } for pid=6118 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.770270][ T847] usb 7-1: USB disconnect, device number 4 [ 61.095420][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 61.098913][ T29] usb 8-1: can't read configurations, error -71 [ 61.481331][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.485048][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.539294][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.549260][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.646241][ T5545] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.651783][ T5545] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.660806][ T5545] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.670898][ T5545] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.245228][ T6150] xt_hashlimit: size too large, truncated to 1048576 [ 62.520228][ T5740] Bluetooth: hci4: sending frame failed (-49) [ 62.525653][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 62.561118][ T6165] capability: warning: `syz.2.87' uses 32-bit capabilities (legacy support in use) [ 62.870484][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.022378][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.026598][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.032375][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 63.036128][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.039504][ T5880] usb 5-1: Product: syz [ 63.041336][ T5880] usb 5-1: Manufacturer: syz [ 63.043740][ T5880] usb 5-1: SerialNumber: syz [ 63.262996][ T5880] usb 5-1: 0:1 : does not exist [ 63.266074][ T5880] usb 5-1: unit 6 not found! [ 63.268134][ T5880] usb 5-1: unit 2 not found! [ 63.298370][ T5880] usb 5-1: USB disconnect, device number 3 [ 63.316307][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.615186][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 63.615200][ T42] audit: type=1400 audit(1785296196.457:285): avc: denied { mount } for pid=6199 comm="syz.3.101" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.625869][ T42] audit: type=1400 audit(1785296196.457:286): avc: denied { search } for pid=6199 comm="syz.3.101" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.635345][ T42] audit: type=1400 audit(1785296196.457:287): avc: denied { search } for pid=6199 comm="syz.3.101" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.643341][ T42] audit: type=1400 audit(1785296196.457:288): avc: denied { setattr } for pid=6199 comm="syz.3.101" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.803352][ T42] audit: type=1400 audit(1785296196.647:289): avc: denied { create } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.815566][ T42] audit: type=1400 audit(1785296196.657:290): avc: denied { create } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.831462][ T42] audit: type=1400 audit(1785296196.667:291): avc: denied { bind } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.837961][ T42] audit: type=1400 audit(1785296196.667:292): avc: denied { setopt } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.844793][ T42] audit: type=1400 audit(1785296196.667:293): avc: denied { accept } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.852330][ T42] audit: type=1400 audit(1785296196.667:294): avc: denied { write } for pid=6210 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.879950][ T6215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 63.908776][ T6215] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 63.913262][ T6215] overlayfs: failed to look up (tracing) for ino (-66) [ 64.319960][ T6245] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 64.322957][ T6245] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 64.753391][ T6262] syzkaller0: entered promiscuous mode [ 64.755917][ T6262] syzkaller0: entered allmulticast mode [ 64.761303][ T6262] tipc: Started in network mode [ 64.763749][ T6262] tipc: Node identity 7e71aaa1d3ea, cluster identity 4711 [ 64.766364][ T6262] tipc: Enabled bearer , priority 0 [ 64.769747][ T6261] tipc: Resetting bearer [ 64.782600][ T6261] tipc: Disabling bearer [ 65.039480][ T24] cfg80211: failed to load regulatory.db [ 66.302715][ T6312] xt_hashlimit: size too large, truncated to 1048576 [ 66.322818][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 66.390639][ T5880] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.542221][ T5880] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 66.546136][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.555158][ T5880] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 66.561488][ T5880] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 66.565196][ T5880] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 67.337527][ T6321] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 67.392980][ T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 67.396107][ T24] usb 5-1: config 0 has no interface number 0 [ 67.400912][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 67.404565][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.407790][ T24] usb 5-1: Product: syz [ 67.409674][ T24] usb 5-1: Manufacturer: syz [ 67.411797][ T24] usb 5-1: SerialNumber: syz [ 67.417773][ T24] usb 5-1: config 0 descriptor?? [ 67.560545][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 67.651535][ T6326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.152'. [ 67.655572][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 67.712613][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.717133][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 67.719866][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 67.723494][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.729596][ T9] usb 6-1: config 0 descriptor?? [ 68.029095][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 68.036466][ T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 68.041157][ T24] asix 5-1:0.251: probe with driver asix failed with error -71 [ 68.046818][ T24] usb 5-1: USB disconnect, device number 4 [ 68.143593][ T9] apple 0003:05AC:024C.0005: global environment stack underflow [ 68.146715][ T9] apple 0003:05AC:024C.0005: item 0 1 1 11 parsing failed [ 68.149979][ T9] apple 0003:05AC:024C.0005: parse failed [ 68.152703][ T9] apple 0003:05AC:024C.0005: probe with driver apple failed with error -22 [ 68.344630][ T24] usb 6-1: USB disconnect, device number 4 [ 69.340439][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.493797][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 69.498074][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.501553][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 69.501567][ T42] audit: type=1400 audit(1785296202.337:308): avc: denied { read } for pid=6363 comm="syz.0.165" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.519022][ T42] audit: type=1400 audit(1785296202.337:309): avc: denied { open } for pid=6363 comm="syz.0.165" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.529927][ T9] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 69.534076][ T42] audit: type=1400 audit(1785296202.357:310): avc: denied { ioctl } for pid=6363 comm="syz.0.165" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.542968][ T42] audit: type=1400 audit(1785296202.357:311): avc: denied { set_context_mgr } for pid=6363 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.579096][ T42] audit: type=1400 audit(1785296202.417:312): avc: denied { map } for pid=6363 comm="syz.0.165" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.602782][ T42] audit: type=1400 audit(1785296202.437:313): avc: denied { call } for pid=6363 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.618379][ T42] audit: type=1400 audit(1785296202.437:314): avc: denied { transfer } for pid=6363 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.688195][ T42] audit: type=1400 audit(1785296202.527:315): avc: denied { write } for pid=6370 comm="syz.3.168" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.694149][ T6372] binder: 6370:6372 ioctl c0306201 200000000080 returned -14 [ 69.708440][ T6372] binder: 6370:6372 ioctl c0306201 200000000000 returned -22 [ 70.444853][ T6410] capability: warning: `syz.1.181' uses deprecated v2 capabilities in a way that may be insecure [ 70.529688][ T42] audit: type=1400 audit(1785296203.367:316): avc: denied { validate_trans } for pid=6413 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.667858][ T42] audit: type=1400 audit(1785296203.507:317): avc: denied { mount } for pid=6417 comm="syz.1.186" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.675340][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 70.680022][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 70.682850][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 70.686531][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.689993][ T9] Workqueue: usb_hub_wq hub_event [ 70.692256][ T9] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 70.695112][ T9] Code: 48 89 04 24 e8 13 11 b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 04 11 b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 70.702052][ T9] RSP: 0018:ffffc900000c6ec8 EFLAGS: 00010202 [ 70.704409][ T9] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81524ec7 [ 70.707060][ T9] RDX: ffff88801eac4a80 RSI: 0000000000000004 RDI: 0000000000000004 [ 70.709986][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 70.713054][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 70.715983][ T9] R13: ffff88802bc98300 R14: ffffc900000c6fe8 R15: dffffc0000000000 [ 70.718752][ T9] FS: 0000000000000000(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 70.721788][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.724299][ T9] CR2: 00007f6d56beb158 CR3: 0000000052827000 CR4: 0000000000352ef0 [ 70.727180][ T9] Call Trace: [ 70.728500][ T9] [ 70.729932][ T9] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 70.732145][ T9] ? emi26_probe+0x114/0xe30 [ 70.733951][ T9] emi26_probe+0x13c/0xe30 [ 70.735681][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 70.737625][ T9] ? find_held_lock+0x2b/0x80 [ 70.739190][ T9] ? __pfx_emi26_probe+0x10/0x10 [ 70.741051][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.743279][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 70.745327][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 70.747039][ T9] usb_probe_interface+0x303/0x8f0 [ 70.748984][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 70.751088][ T9] really_probe+0x241/0xa60 [ 70.752872][ T9] __driver_probe_device+0x20e/0x450 [ 70.754651][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.756750][ T9] driver_probe_device+0x4a/0x140 [ 70.758565][ T9] __device_attach_driver+0x1df/0x320 [ 70.760491][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 70.762554][ T9] bus_for_each_drv+0x159/0x1e0 [ 70.764436][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.766466][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 70.768477][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.770260][ T9] __device_attach+0x1e4/0x4d0 [ 70.771989][ T9] ? __pfx___device_attach+0x10/0x10 [ 70.774010][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.775975][ T9] device_initial_probe+0xaf/0xd0 [ 70.777873][ T9] bus_probe_device+0x64/0x160 [ 70.779577][ T9] device_add+0x121d/0x1970 [ 70.781352][ T9] ? __pfx_device_add+0x10/0x10 [ 70.783312][ T9] ? mark_held_locks+0x40/0x70 [ 70.785196][ T9] usb_set_configuration+0xd97/0x1c60 [ 70.787132][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 70.789152][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 70.791347][ T9] usb_probe_device+0xef/0x400 [ 70.793284][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 70.795444][ T9] really_probe+0x241/0xa60 [ 70.797320][ T9] __driver_probe_device+0x20e/0x450 [ 70.799473][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.801853][ T9] driver_probe_device+0x4a/0x140 [ 70.803693][ T9] __device_attach_driver+0x1df/0x320 [ 70.805646][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 70.808014][ T9] bus_for_each_drv+0x159/0x1e0 [ 70.810018][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.812164][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 70.814256][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.816601][ T9] __device_attach+0x1e4/0x4d0 [ 70.818531][ T9] ? __pfx___device_attach+0x10/0x10 [ 70.820676][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.822776][ T9] device_initial_probe+0xaf/0xd0 [ 70.824685][ T9] bus_probe_device+0x64/0x160 [ 70.826260][ T9] device_add+0x121d/0x1970 [ 70.828101][ T9] ? __pfx_device_add+0x10/0x10 [ 70.830098][ T9] ? usb_detect_static_quirks+0x335/0x3e0 [ 70.832175][ T9] usb_new_device.cold+0x685/0x115c [ 70.833962][ T9] ? _mutex_trylock_nest_lock+0x241/0x310 [ 70.836263][ T9] ? do_raw_spin_lock+0x128/0x260 [ 70.838303][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 70.840424][ T9] ? mark_held_locks+0x40/0x70 [ 70.842379][ T9] hub_event+0x30a3/0x4a60 [ 70.844209][ T9] ? __pfx_hub_event+0x10/0x10 [ 70.845737][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.847983][ T9] ? rcu_is_watching+0x12/0xc0 [ 70.849959][ T9] process_one_work+0xa23/0x1940 [ 70.851968][ T9] ? __pfx_process_one_work+0x10/0x10 [ 70.854135][ T9] ? __pfx_hub_event+0x10/0x10 [ 70.856065][ T9] worker_thread+0x5ef/0xe50 [ 70.857925][ T9] ? kthread+0x13a/0x450 [ 70.859380][ T9] ? __pfx_worker_thread+0x10/0x10 [ 70.861278][ T9] kthread+0x370/0x450 [ 70.862944][ T9] ? __pfx_kthread+0x10/0x10 [ 70.864841][ T9] ret_from_fork+0x72b/0xd50 [ 70.866635][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 70.868679][ T9] ? __switch_to+0x800/0x10f0 [ 70.870586][ T9] ? __pfx_kthread+0x10/0x10 [ 70.872434][ T9] ret_from_fork_asm+0x1a/0x30 [ 70.874381][ T9] [ 70.875652][ T9] Modules linked in: [ 70.877543][ T9] ---[ end trace 0000000000000000 ]--- [ 70.880557][ T5880] usb 7-1: emi26_load_firmware - request_firmware() failed [ 70.883593][ T5880] usb 7-1: emi26_load_firmware - error loading firmware: error = -12 [ 70.886382][ T5880] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 70.892932][ T5880] usb 7-1: USB disconnect, device number 5 [ 70.895418][ T9] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 70.899770][ T9] Code: 48 89 04 24 e8 13 11 b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 04 11 b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 70.907092][ T9] RSP: 0018:ffffc900000c6ec8 EFLAGS: 00010202 [ 70.909501][ T9] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81524ec7 [ 70.912795][ T9] RDX: ffff88801eac4a80 RSI: 0000000000000004 RDI: 0000000000000004 [ 70.915906][ T9] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 70.918741][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 70.922100][ T9] R13: ffff88802bc98300 R14: ffffc900000c6fe8 R15: dffffc0000000000 [ 70.924480][ T9] FS: 0000000000000000(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 70.927855][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.930546][ T9] CR2: 00007f6d56beb158 CR3: 0000000033ee8000 CR4: 0000000000352ef0 [ 70.933035][ T9] Kernel panic - not syncing: Fatal exception [ 70.936300][ T9] Kernel Offset: disabled [ 70.938034][ T9] Rebooting in 86400 seconds..