last executing test programs: 3.08815812s ago: executing program 2 (id=1760): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) close(0x3) 3.046195233s ago: executing program 0 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) 2.819687457s ago: executing program 0 (id=1762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 2.810451969s ago: executing program 2 (id=1763): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010200010902370002010080320904000002ff0000000705810200020007050202000200090401"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 2.612524774s ago: executing program 0 (id=1766): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) 2.39483249s ago: executing program 1 (id=1769): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4) 2.323727791s ago: executing program 0 (id=1770): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) 2.273430075s ago: executing program 1 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.262012927s ago: executing program 4 (id=1772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000180)='D', 0x1}], 0x1) 2.21273052s ago: executing program 3 (id=1773): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x4008af14, &(0x7f0000002500)) 2.155235606s ago: executing program 0 (id=1774): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.049004525s ago: executing program 1 (id=1775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x2}) 2.045685564s ago: executing program 4 (id=1776): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 1.966118673s ago: executing program 3 (id=1777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.775908881s ago: executing program 3 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*on_existent_event:', 0x14) 1.632208739s ago: executing program 3 (id=1779): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @random="a61b82de0824", @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6fb88", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0xdd86, 0x88be, 0x4, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x407b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x2, {0x5, 0x3, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 1.589747112s ago: executing program 1 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4d0, 0x0, 0x1}]}) 1.489900392s ago: executing program 4 (id=1781): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000000)='.\x00', 0x0) 1.317327654s ago: executing program 3 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n', 0x2) 1.233224908s ago: executing program 1 (id=1783): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.139008266s ago: executing program 2 (id=1784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.000951772s ago: executing program 3 (id=1785): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x758d3ace8aa57493) 917.449202ms ago: executing program 2 (id=1786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0e00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(0x3) 794.134852ms ago: executing program 1 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 530.242239ms ago: executing program 0 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 528.769679ms ago: executing program 2 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 415.719616ms ago: executing program 4 (id=1790): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x2000000000000060, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 285.355892ms ago: executing program 2 (id=1791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlockall(0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 210.150456ms ago: executing program 4 (id=1792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 0s ago: executing program 4 (id=1793): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) kernel console output (not intermixed with test programs): .478802][ T24] usb 5-1: SerialNumber: syz [ 124.485487][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.487635][ T7004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.501838][ T24] usb 5-1: config 0 descriptor?? [ 124.510093][ T5696] usb 4-1: USB disconnect, device number 7 [ 124.519994][ T5712] usb 3-1: config 0 descriptor?? [ 124.529527][ T5712] hub 3-1:0.0: USB hub found [ 124.534863][ T7004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.562407][ T5704] usb 1-1: ucan: probing device on interface #0 [ 124.701820][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 124.739423][ T5712] hub 3-1:0.0: 10 ports detected [ 124.745578][ T5712] hub 3-1:0.0: insufficient power available to use all downstream ports [ 124.942802][ T5712] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 124.954509][ T5712] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 124.965574][ T5712] usbhid 3-1:0.0: can't add hid device: -71 [ 124.971623][ T5712] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 124.997717][ T5712] usb 3-1: USB disconnect, device number 4 [ 125.064617][ T5719] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 125.213488][ T5704] ucan 1-1:0.0 can0: registered device [ 125.236376][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.255376][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.270503][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.278979][ T24] appletouch 5-1:0.85: Geyser mode initialized. [ 125.281478][ T5719] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 125.293173][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input15 [ 125.327266][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.338116][ C1] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 125.346233][ T5719] usb 2-1: config 0 descriptor?? [ 125.376175][ T5704] ucan 1-1:0.0 can0: firmware string: unknown [ 125.385937][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 125.385954][ T30] audit: type=1400 audit(1786101279.983:425): avc: denied { name_bind } for pid=7036 comm="syz.3.549" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.448300][ T5704] usb 1-1: USB disconnect, device number 8 [ 125.465730][ T30] audit: type=1400 audit(1786101279.983:426): avc: denied { node_bind } for pid=7036 comm="syz.3.549" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 125.568231][ T30] audit: type=1400 audit(1786101279.993:427): avc: denied { read } for pid=7036 comm="syz.3.549" path="socket:[15362]" dev="sockfs" ino=15362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.686625][ T24] usb 5-1: USB disconnect, device number 6 [ 125.801762][ T24] appletouch 5-1:0.85: input: appletouch disconnected [ 125.861254][ T5719] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 125.891403][ T5719] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 125.939126][ T7050] netlink: 27 bytes leftover after parsing attributes in process `syz.2.554'. [ 125.974347][ T30] audit: type=1400 audit(1786101280.583:428): avc: denied { connect } for pid=7051 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.029008][ T30] audit: type=1400 audit(1786101280.633:429): avc: denied { read } for pid=7051 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.063255][ T5704] usb 2-1: USB disconnect, device number 6 [ 126.419216][ T30] audit: type=1400 audit(1786101281.033:430): avc: denied { create } for pid=7066 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.479076][ T30] audit: type=1400 audit(1786101281.053:431): avc: denied { setopt } for pid=7066 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.532327][ T30] audit: type=1326 audit(1786101281.093:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff09a99e0d9 code=0x0 [ 126.679495][ T30] audit: type=1400 audit(1786101281.293:433): avc: denied { connect } for pid=7076 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.738760][ T30] audit: type=1400 audit(1786101281.313:434): avc: denied { write } for pid=7076 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.075390][ T29] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 127.248356][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.281642][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.303329][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.321893][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.341784][ T29] usb 5-1: Product: syz [ 127.351567][ T29] usb 5-1: Manufacturer: syz [ 127.369689][ T29] usb 5-1: SerialNumber: syz [ 127.432458][ T29] usb 5-1: 0:2 : does not exist [ 127.642523][ T7098] netlink: 128 bytes leftover after parsing attributes in process `syz.3.576'. [ 127.850936][ T5704] usb 5-1: USB disconnect, device number 7 [ 128.281263][ T5594] block nbd1: Receive control failed (result -32) [ 128.291848][ T5599] block nbd1: Receive control failed (result -32) [ 128.735658][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 128.790694][ T7128] veth1_macvtap: left promiscuous mode [ 129.199453][ T7149] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 129.219358][ T7149] @0: renamed from bond_slave_1 (while UP) [ 129.404899][ T5712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.454629][ T5719] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 129.567764][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 129.587688][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.609234][ T5712] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.625794][ T5719] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.627992][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.645032][ T5719] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.647347][ T5712] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 129.670785][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.674294][ T5719] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.695448][ T5712] usb 4-1: config 0 descriptor?? [ 129.706591][ T5719] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.723489][ T5719] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 129.737744][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.751495][ T5719] usb 5-1: config 0 descriptor?? [ 130.147574][ T5712] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 130.196410][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.222945][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.234727][ T5712] corsair-psu 0003:1B1C:1C09.0007: unable to initialize device (-38) [ 130.238212][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.259786][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.263317][ T5712] corsair-psu 0003:1B1C:1C09.0007: probe with driver corsair-psu failed with error -38 [ 130.277087][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.277122][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.277150][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.277176][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.277203][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.277229][ T5719] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 130.295302][ T5719] acrux 0003:1A34:F705.0008: hidraw0: USB HID v0.01 Device [HID 1a34:f705] on usb-dummy_hcd.4-1/input0 [ 130.295859][ T5719] acrux 0003:1A34:F705.0008: no inputs found [ 130.347475][ T5719] acrux 0003:1A34:F705.0008: Failed to enable force feedback support, error: -19 [ 130.429030][ T5719] usb 5-1: USB disconnect, device number 8 [ 130.456023][ T7182] fido_id[7182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.541865][ T5712] usb 4-1: USB disconnect, device number 8 [ 130.743124][ T7196] erspan0: entered promiscuous mode [ 130.764687][ T7196] erspan0: entered allmulticast mode [ 130.907378][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 130.907395][ T30] audit: type=1400 audit(1786101285.523:444): avc: denied { append } for pid=7204 comm="syz.1.623" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.972595][ T30] audit: type=1400 audit(1786101285.583:445): avc: denied { read write } for pid=7206 comm="syz.4.624" name="sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.028016][ T30] audit: type=1400 audit(1786101285.583:446): avc: denied { open } for pid=7206 comm="syz.4.624" path="/dev/sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.086068][ T30] audit: type=1400 audit(1786101285.633:447): avc: denied { ioctl } for pid=7206 comm="syz.4.624" path="/dev/sg0" dev="devtmpfs" ino=736 ioctlcmd=0x227f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.327036][ T30] audit: type=1400 audit(1786101285.933:448): avc: denied { read write } for pid=7218 comm="syz.4.629" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.393281][ T30] audit: type=1400 audit(1786101285.943:449): avc: denied { open } for pid=7218 comm="syz.4.629" path="/dev/video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.464670][ T30] audit: type=1400 audit(1786101285.973:450): avc: denied { ioctl } for pid=7218 comm="syz.4.629" path="/dev/video36" dev="devtmpfs" ino=1043 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.518019][ T7222] Invalid ELF header magic: != ELF [ 131.552400][ T7222] Invalid ELF header magic: != ELF [ 131.559081][ T30] audit: type=1400 audit(1786101286.133:451): avc: denied { module_load } for pid=7220 comm="syz.1.630" path="/133/bus" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 131.583557][ T30] audit: type=1400 audit(1786101286.173:452): avc: denied { write } for pid=7202 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 131.775400][ T5719] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 131.859314][ T7236] device-mapper: ioctl: name not supplied when creating device [ 131.884038][ T30] audit: type=1400 audit(1786101286.493:453): avc: denied { read write } for pid=7234 comm="syz.1.637" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.911446][ T7237] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 131.945612][ T5719] usb 5-1: not running at top speed; connect to a high speed hub [ 131.989461][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.034894][ T5719] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 132.054414][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.075656][ T7241] input: syz1 as /devices/virtual/input/input16 [ 132.086231][ T5719] usb 5-1: Product: syz [ 132.100639][ T5719] usb 5-1: Manufacturer: syz [ 132.133121][ T5719] usb 5-1: SerialNumber: syz [ 132.166322][ T5719] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 132.185279][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 132.207611][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 132.247237][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 132.276852][ T5719] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 132.294352][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 132.315145][ T5719] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 132.355762][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 132.386707][ T5719] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 132.427015][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 132.450178][ T5719] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 132.740062][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750671][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.784842][ T5719] usb 5-1: USB disconnect, device number 9 [ 132.825912][ T5719] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 132.875612][ T5719] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 132.918368][ T5719] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 132.938462][ T5719] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 132.976017][ T5719] keyspan 5-1:1.0: device disconnected [ 133.504704][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.664764][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 133.690602][ T29] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.729617][ T29] usb 4-1: config 0 has no interface number 0 [ 133.750796][ T29] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.769413][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.788600][ T29] usb 4-1: Product: syz [ 133.796318][ T29] usb 4-1: Manufacturer: syz [ 133.805073][ T29] usb 4-1: SerialNumber: syz [ 133.826711][ T29] usb 4-1: config 0 descriptor?? [ 133.842970][ T29] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.049491][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.099800][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.398642][ T7294] vhci_hcd: not connected 4 [ 134.470241][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.482258][ T29] usb 4-1: USB disconnect, device number 9 [ 134.499775][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.542062][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.587576][ T29] quatech2 4-1:0.51: device disconnected [ 134.988837][ T7315] sctp: [Deprecated]: syz.0.672 (pid 7315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.988837][ T7315] Use struct sctp_sack_info instead [ 135.287386][ T7323] ima: Unable to open file: /e (-2) [ 135.287892][ T7322] ima: policy update failed [ 135.326395][ T7320] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.373739][ T7320] block device autoloading is deprecated and will be removed. [ 135.685278][ T29] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.847916][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.871161][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.882520][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.894276][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.908900][ T29] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 135.955498][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.057153][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 136.057185][ T30] audit: type=1400 audit(1786101290.673:465): avc: denied { read } for pid=7352 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.104111][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.110968][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 136.274709][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 136.282396][ T30] audit: type=1400 audit(1786101290.883:466): avc: denied { append } for pid=7358 comm="syz.1.693" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.326854][ T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.347507][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.354345][ T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 136.364065][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.378778][ T24] usb 3-1: config 0 descriptor?? [ 136.402519][ T29] gud 1-1:1.0: Unexpected status OK for failed transfer [ 136.410145][ T29] gud 1-1:1.0: probe with driver gud failed with error -32 [ 136.624565][ T29] usb 1-1: USB disconnect, device number 9 [ 136.817129][ T24] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 137.233134][ T24] usb 3-1: USB disconnect, device number 5 [ 137.480662][ T7377] bond0: entered promiscuous mode [ 137.500743][ T7377] bond_slave_0: entered promiscuous mode [ 137.517717][ T7377] @0: entered promiscuous mode [ 137.542404][ T7377] batadv0: entered promiscuous mode [ 137.575983][ T7377] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 137.600018][ T7377] bond0: left promiscuous mode [ 137.611734][ T7377] bond_slave_0: left promiscuous mode [ 137.618113][ T7377] @0: left promiscuous mode [ 137.631661][ T7377] batadv0: left promiscuous mode [ 137.705662][ T30] audit: type=1400 audit(1786101292.323:467): avc: denied { setopt } for pid=7386 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.818455][ T7390] : renamed from vlan0 (while UP) [ 137.830495][ T7391] cgroup: fork rejected by pids controller in /syz0 [ 138.372028][ T7405] netlink: 116 bytes leftover after parsing attributes in process `syz.1.714'. [ 138.443214][ T7411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.462894][ T9] team_slave_0: entered promiscuous mode [ 138.470230][ T9] team_slave_1: entered promiscuous mode [ 138.659253][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.885795][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.059798][ T30] audit: type=1400 audit(1786101293.673:468): avc: denied { read write } for pid=7427 comm="syz.3.726" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 139.086878][ T7430] loop9: detected capacity change from 0 to 524287936 [ 139.098066][ T30] audit: type=1400 audit(1786101293.683:469): avc: denied { open } for pid=7427 comm="syz.3.726" path="/143/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 139.127357][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.148740][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.163293][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.184910][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.198721][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.306574][ T7435] loop5: detected capacity change from 0 to 7 [ 139.330605][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.340308][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.359039][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.370601][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.380302][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.401948][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.411656][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.423242][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.432946][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.445227][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.454969][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.474811][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.484514][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.501782][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.511838][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.520142][ T7435] ldm_validate_partition_table(): Disk read failed. [ 139.556183][ T7444] team0: Device wg0 is of different type [ 139.559300][ T7445] loop5: detected capacity change from 7 to 0 [ 139.581514][ T7444] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 139.598099][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.607791][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.615717][ T7435] Dev loop5: unable to read RDB block 0 [ 139.622527][ T7435] loop5: unable to read partition table [ 139.636713][ T7435] loop5: partition table beyond EOD, truncated [ 139.663182][ T7435] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 139.813949][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.962304][ T5597] Bluetooth: hci0: Zero size dump init pkt [ 139.985436][ T7462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.009612][ T7462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.104912][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.146040][ T30] audit: type=1400 audit(1786101294.753:470): avc: denied { ioctl } for pid=7464 comm="syz.4.738" path="socket:[16561]" dev="sockfs" ino=16561 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.322463][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 140.342760][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.364147][ T1150] bridge_slave_1: left allmulticast mode [ 140.375678][ T1150] bridge_slave_1: left promiscuous mode [ 140.398549][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.432359][ T9] usbtest 3-1:1.0: Linux gadget zero [ 140.439457][ T9] usbtest 3-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 140.467253][ T1150] bridge_slave_0: left allmulticast mode [ 140.488701][ T1150] bridge_slave_0: left promiscuous mode [ 140.498675][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.519271][ T30] audit: type=1400 audit(1786101295.133:471): avc: denied { append } for pid=7479 comm="syz.3.744" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.680993][ T30] audit: type=1326 audit(1786101295.293:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba599e0d9 code=0x0 [ 140.740948][ T30] audit: type=1400 audit(1786101295.333:473): avc: denied { rename } for pid=7486 comm="syz.4.747" name="file0" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.769887][ T30] audit: type=1400 audit(1786101295.333:474): avc: denied { write } for pid=7486 comm="syz.4.747" name="file1" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.893021][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.908119][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.921311][ T1150] bond0 (unregistering): Released all slaves [ 141.295885][ T5597] Bluetooth: hci0: command tx timeout [ 141.567853][ T7511] binder: 7510:7511 ioctl c0306201 2000000001c0 returned -14 [ 141.638926][ T5330] usb 3-1: USB disconnect, device number 6 [ 142.072734][ T1150] hsr_slave_0: left promiscuous mode [ 142.086119][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 142.086139][ T30] audit: type=1400 audit(1786101296.683:476): avc: denied { connect } for pid=7532 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.153640][ T1150] hsr_slave_1: left promiscuous mode [ 142.161865][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.181688][ T30] audit: type=1400 audit(1786101296.743:477): avc: denied { write } for pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.209153][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.220967][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.243964][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.322982][ T30] audit: type=1400 audit(1786101296.933:478): avc: denied { write } for pid=7539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.380624][ T1150] veth1_macvtap: left promiscuous mode [ 142.394953][ T1150] veth0_macvtap: left promiscuous mode [ 142.413891][ T1150] veth1_vlan: left promiscuous mode [ 142.438181][ T1150] veth0_vlan: left promiscuous mode [ 142.629279][ T30] audit: type=1400 audit(1786101297.243:479): avc: denied { wake_alarm } for pid=7553 comm="syz.1.767" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.031097][ T30] audit: type=1400 audit(1786101297.643:480): avc: denied { ioctl } for pid=7563 comm="syz.2.773" path="socket:[16915]" dev="sockfs" ino=16915 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.064784][ T5330] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.114301][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 143.148038][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 143.254667][ T5330] usb 2-1: Using ep0 maxpacket: 32 [ 143.268541][ T5330] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.276827][ T5330] usb 2-1: config 0 has no interface number 0 [ 143.297173][ T5330] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.307096][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.325335][ T5330] usb 2-1: Product: syz [ 143.329573][ T5330] usb 2-1: Manufacturer: syz [ 143.345000][ T5330] usb 2-1: SerialNumber: syz [ 143.358026][ T5330] usb 2-1: config 0 descriptor?? [ 143.374812][ T5597] Bluetooth: hci0: command tx timeout [ 143.382608][ T5330] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.523826][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 143.587730][ T5330] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.603028][ T5330] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 143.643457][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.681554][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.708091][ T7431] bridge_slave_0: entered allmulticast mode [ 143.755435][ T7431] bridge_slave_0: entered promiscuous mode [ 143.782428][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.819006][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.848564][ T7431] bridge_slave_1: entered allmulticast mode [ 143.857885][ T7431] bridge_slave_1: entered promiscuous mode [ 143.996577][ T7431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.031147][ T7431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.073221][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.089590][ T24] usb 2-1: USB disconnect, device number 7 [ 144.127407][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.192066][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.235485][ T24] quatech2 2-1:0.51: device disconnected [ 144.327013][ T7431] team0: Port device team_slave_0 added [ 144.366578][ T7431] team0: Port device team_slave_1 added [ 144.526991][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.536718][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.579745][ T7431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.637346][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.652335][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.709114][ T7431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.801245][ T30] audit: type=1400 audit(1786101299.413:481): avc: denied { write } for pid=7578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.953877][ T7431] hsr_slave_0: entered promiscuous mode [ 144.980484][ T7431] hsr_slave_1: entered promiscuous mode [ 145.004359][ T7431] debugfs: 'hsr0' already exists in 'hsr' [ 145.022838][ T7431] Cannot create hsr debugfs directory [ 145.089007][ T30] audit: type=1400 audit(1786101299.703:482): avc: denied { write } for pid=7609 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.304761][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.386659][ T7625] i2c i2c-0: new_device: Can't parse I2C address [ 145.454680][ T5597] Bluetooth: hci0: command tx timeout [ 145.561548][ T7630] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 145.799248][ T7630] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 146.460423][ T30] audit: type=1400 audit(1786101301.073:483): avc: denied { write } for pid=7638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.596664][ T7669] sg_write: data in/out 1836017931/74 bytes for SCSI command 0x0-- guessing data in; [ 146.596664][ T7669] program syz.3.810 not setting count and/or reply_len properly [ 146.746351][ T30] audit: type=1400 audit(1786101301.363:485): avc: denied { write } for pid=7675 comm="syz.2.812" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.828666][ T30] audit: type=1400 audit(1786101301.363:484): avc: denied { write } for pid=7672 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.876368][ T7680] block nbd2: server does not support multiple connections per device. [ 146.890909][ T7680] block nbd2: shutting down sockets [ 147.061837][ T7688] capability: warning: `syz.3.817' uses 32-bit capabilities (legacy support in use) [ 147.214620][ T5712] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.289681][ T7431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.342111][ T7431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.362524][ T7431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.380908][ T7700] loop7: detected capacity change from 0 to 7 [ 147.398245][ T7431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.407935][ T5712] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 147.428371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.429826][ T7431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.429904][ T5712] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.438106][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.468068][ T5712] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.471913][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.487920][ T7431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.490654][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.498924][ T5712] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.530717][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.535439][ T7431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.540431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.556229][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.565979][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.582621][ T7431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.584581][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.596644][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.599375][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.615371][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.623000][ T5597] Bluetooth: hci0: command tx timeout [ 147.625085][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.640822][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.650522][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.658671][ T7700] ldm_validate_partition_table(): Disk read failed. [ 147.667979][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.678177][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.687600][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.697334][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.706732][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.716451][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 147.727662][ T7700] Dev loop7: unable to read RDB block 0 [ 147.756831][ T7700] loop7: unable to read partition table [ 147.786686][ T5712] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.796093][ T7700] loop7: partition table beyond EOD, truncated [ 147.816891][ T5712] usb 3-1: invalid MIDI out EP 0 [ 147.833966][ T7700] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 148.016997][ T7703] ldm_validate_partition_table(): Disk read failed. [ 148.050920][ T7703] Dev loop7: unable to read RDB block 0 [ 148.074772][ T7703] loop7: unable to read partition table [ 148.082228][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.101981][ T7703] loop7: partition table beyond EOD, truncated [ 148.165844][ T7431] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.235375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.242531][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.303934][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 148.303948][ T30] audit: type=1400 audit(1786101302.913:487): avc: denied { write } for pid=7695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.310465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.340291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.561245][ T5712] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 148.643219][ T5712] usb 3-1: USB disconnect, device number 7 [ 148.662291][ T30] audit: type=1400 audit(1786101303.273:488): avc: denied { write } for pid=7730 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.717874][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 148.874911][ T7742] netlink: 'syz.2.831': attribute type 2 has an invalid length. [ 148.919039][ T7742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.831'. [ 149.263944][ T30] audit: type=1400 audit(1786101303.873:489): avc: denied { setopt } for pid=7761 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.292237][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 149.473286][ T30] audit: type=1400 audit(1786101304.083:490): avc: denied { write } for pid=7770 comm="syz.2.839" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 149.677510][ T30] audit: type=1400 audit(1786101304.293:491): avc: denied { connect } for pid=7777 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.843111][ T30] audit: type=1400 audit(1786101304.453:492): avc: denied { write } for pid=7749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.867083][ T7782] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.882287][ T7782] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.896912][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.978007][ T7782] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 150.039324][ T7431] veth0_vlan: entered promiscuous mode [ 150.076022][ T7782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.089916][ T7431] veth1_vlan: entered promiscuous mode [ 150.128908][ T30] audit: type=1400 audit(1786101304.743:493): avc: denied { write } for pid=7794 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.198265][ T7782] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.230093][ T7431] veth0_macvtap: entered promiscuous mode [ 150.254085][ T7431] veth1_macvtap: entered promiscuous mode [ 150.301811][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.369616][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.496519][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.545925][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.617550][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.660939][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.681981][ T30] audit: type=1326 audit(1786101305.293:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.2.844" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09a99e0d9 code=0x7fc00000 [ 150.893619][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.945070][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.143970][ T7807] Set syz1 is full, maxelem 6117 reached [ 151.157581][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.200449][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.233227][ T30] audit: type=1400 audit(1786101305.843:495): avc: denied { write } for pid=7800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.335725][ T30] audit: type=1400 audit(1786101305.953:496): avc: denied { mounton } for pid=7431 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 151.933772][ T7861] netlink: 176 bytes leftover after parsing attributes in process `syz.3.864'. [ 152.153995][ T9] IPVS: starting estimator thread 0... [ 152.165517][ T7868] IPVS: sh: FWM 3 0x00000003 - no destination available [ 152.285907][ T7871] IPVS: using max 45 ests per chain, 108000 per kthread [ 152.583920][ T7890] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 152.865992][ T7901] smpboot: CPU 1 is now offline [ 152.876527][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 152.954204][ T7895] PID 7895 killed due to inadequate hugepage pool [ 153.261124][ T7914] block2mtd: error: cannot open device [ 153.532523][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 153.615197][ T5594] Bluetooth: hci0: command 0x0405 tx timeout [ 153.725335][ T5719] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.823549][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 153.823561][ T30] audit: type=1400 audit(1786101308.433:507): avc: denied { append } for pid=7935 comm="syz.1.894" name="sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.957769][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.009196][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.056219][ T5719] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 154.107831][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.156137][ T5719] usb 5-1: config 0 descriptor?? [ 154.190458][ T7947] erspan0: entered promiscuous mode [ 154.255786][ T5599] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 154.578087][ T30] audit: type=1400 audit(1786101309.193:508): avc: denied { create } for pid=7956 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.628035][ T5719] arvo 0003:1E7D:30D4.000A: unbalanced delimiter at end of report description [ 154.693872][ T5696] kernel write not supported for file /media0 (pid: 5696 comm: kworker/0:3) [ 154.716868][ T5719] arvo 0003:1E7D:30D4.000A: parse failed [ 154.730047][ T30] audit: type=1400 audit(1786101309.233:509): avc: denied { read } for pid=7956 comm="syz.1.905" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.772552][ T5719] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 154.880715][ T5719] usb 5-1: USB disconnect, device number 10 [ 154.917782][ T30] audit: type=1400 audit(1786101309.233:510): avc: denied { open } for pid=7956 comm="syz.1.905" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.120480][ T30] audit: type=1400 audit(1786101309.253:511): avc: denied { map } for pid=7956 comm="syz.1.905" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.274742][ T30] audit: type=1400 audit(1786101309.263:512): avc: denied { ioctl } for pid=7956 comm="syz.1.905" path="socket:[19912]" dev="sockfs" ino=19912 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.771214][ T30] audit: type=1400 audit(1786101310.383:513): avc: denied { ioctl } for pid=7984 comm="syz.2.916" path="socket:[20069]" dev="sockfs" ino=20069 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.940209][ T30] audit: type=1400 audit(1786101311.543:514): avc: denied { write } for pid=7985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.326329][ T30] audit: type=1400 audit(1786101311.933:515): avc: denied { write } for pid=8035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.686028][ T5704] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.876141][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 157.921721][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.998385][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.075445][ T5704] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 158.147003][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.214355][ T8059] SELinux: security policydb version 18 (MLS) not backwards compatible [ 158.225957][ T30] audit: type=1400 audit(1786101312.823:516): avc: denied { load_policy } for pid=8057 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.258531][ T5704] usb 1-1: config 0 descriptor?? [ 158.275923][ T8062] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 158.353603][ T8059] SELinux: failed to load policy [ 158.471595][ T8067] netlink: 'syz.4.942': attribute type 5 has an invalid length. [ 158.716438][ T5704] hid_parser_main: 28 callbacks suppressed [ 158.716454][ T5704] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 158.829174][ T5704] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 158.871907][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 158.871919][ T30] audit: type=1400 audit(1786101313.483:518): avc: denied { ioctl } for pid=8072 comm="syz.3.944" path="/dev/ttyqa" dev="devtmpfs" ino=385 ioctlcmd=0x541d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.919647][ T5704] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 158.989373][ T5704] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 159.043501][ T5704] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 159.115884][ T5704] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 159.209334][ T30] audit: type=1400 audit(1786101313.823:519): avc: denied { write } for pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.522688][ T5704] usb 1-1: USB disconnect, device number 10 [ 159.665670][ T30] audit: type=1400 audit(1786101314.273:520): avc: denied { execute } for pid=8100 comm="syz.1.954" path="/211/cpu.stat" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.887876][ T30] audit: type=1400 audit(1786101314.313:521): avc: denied { write } for pid=8097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.380903][ T8122] process 'syz.0.962' launched './file0' with NULL argv: empty string added [ 160.429214][ T30] audit: type=1400 audit(1786101315.043:522): avc: denied { execute_no_trans } for pid=8120 comm="syz.0.962" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.786003][ T8130] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 160.861798][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 160.921582][ T30] audit: type=1400 audit(1786101315.533:523): avc: denied { read } for pid=4948 comm="acpid" name="mouse1" dev="devtmpfs" ino=3026 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.075728][ T30] audit: type=1400 audit(1786101315.533:524): avc: denied { open } for pid=4948 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3026 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.264360][ T30] audit: type=1400 audit(1786101315.533:525): avc: denied { ioctl } for pid=4948 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3026 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.904972][ T5696] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.932864][ T30] audit: type=1400 audit(1786101316.543:526): avc: denied { getopt } for pid=8161 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.127734][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 162.173133][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.244637][ T5696] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 162.293708][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.348687][ T30] audit: type=1400 audit(1786101316.953:527): avc: denied { setopt } for pid=8156 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.368627][ T5696] usb 1-1: config 0 descriptor?? [ 162.633164][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 162.659183][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.737411][ T5696] usb 1-1: USB disconnect, device number 11 [ 163.333243][ T8181] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 163.382955][ T8181] i2c i2c-0: new_device: Instantiated device fusb302 at 0x22 [ 163.804762][ T5704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.986103][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 164.030149][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.110571][ T5704] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 164.157358][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.212572][ T5704] usb 5-1: Product: syz [ 164.243933][ T5704] usb 5-1: Manufacturer: syz [ 164.281618][ T5704] usb 5-1: SerialNumber: syz [ 164.307572][ T5704] usb 5-1: config 0 descriptor?? [ 164.342343][ T5704] usb 5-1: no audio or video endpoints found [ 164.526337][ T5696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.593825][ T5704] usb 5-1: USB disconnect, device number 11 [ 164.708031][ T5696] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 164.747890][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.781567][ T5696] usb 3-1: Product: syz [ 164.803523][ T5696] usb 3-1: Manufacturer: syz [ 164.823755][ T5696] usb 3-1: SerialNumber: syz [ 164.881876][ T8183] syz.0.985 (8183): drop_caches: 2 [ 165.233277][ T8205] overlayfs: upper fs does not support tmpfile. [ 165.650231][ T30] audit: type=1400 audit(1786101320.263:528): avc: denied { create } for pid=8219 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.790491][ T8224] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 165.998604][ T5696] rtl8150 3-1:1.0: couldn't reset the device [ 166.025538][ T5696] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 166.356067][ T5704] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.537076][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.559918][ T5704] usb 5-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 166.578339][ T5704] usb 5-1: config 66 interface 0 has no altsetting 0 [ 166.596169][ T5704] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 166.620997][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.638717][ T5704] usb 5-1: Product: syz [ 166.648017][ T5704] usb 5-1: Manufacturer: syz [ 166.659137][ T5704] usb 5-1: SerialNumber: syz [ 166.683118][ T8234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.923332][ T5704] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 166.952313][ T5704] usb 5-1: USB disconnect, device number 12 [ 167.274122][ T5719] usb 3-1: USB disconnect, device number 8 [ 168.026045][ T5696] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.228237][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.279141][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.352633][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 168.423196][ T5696] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 168.472039][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.742996][ T5696] cxacru 4-1:1.0: invalid response length to cm 0x90: 42 [ 168.781073][ T5696] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 168.831722][ T5696] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 169.277753][ T30] audit: type=1400 audit(1786101323.893:529): avc: denied { create } for pid=8305 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.379044][ T30] audit: type=1400 audit(1786101323.923:530): avc: denied { connect } for pid=8305 comm="syz.0.1036" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.500484][ T30] audit: type=1400 audit(1786101323.923:531): avc: denied { setopt } for pid=8305 comm="syz.0.1036" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.640782][ T30] audit: type=1400 audit(1786101323.923:532): avc: denied { write } for pid=8305 comm="syz.0.1036" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.871715][ T30] audit: type=1400 audit(1786101324.483:533): avc: denied { write } for pid=8323 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.892398][ T8324] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.218166][ T30] audit: type=1400 audit(1786101324.833:534): avc: denied { write } for pid=8339 comm="syz.4.1052" name="usbmon9" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.552848][ T30] audit: type=1400 audit(1786101325.163:535): avc: denied { shutdown } for pid=8346 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.705589][ T30] audit: type=1400 audit(1786101325.193:536): avc: denied { write } for pid=8346 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.821493][ T5704] usb 4-1: USB disconnect, device number 10 [ 171.174436][ T30] audit: type=1400 audit(1786101325.783:537): avc: denied { search } for pid=8375 comm="syz.0.1064" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.328351][ T30] audit: type=1400 audit(1786101325.783:538): avc: denied { search } for pid=8375 comm="syz.0.1064" name="target" dev="configfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.428731][ T30] audit: type=1400 audit(1786101325.783:539): avc: denied { search } for pid=8375 comm="syz.0.1064" name="core" dev="configfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.531654][ T30] audit: type=1400 audit(1786101325.833:540): avc: denied { write search } for pid=8375 comm="syz.0.1064" name="core" dev="configfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.648940][ T30] audit: type=1400 audit(1786101325.833:541): avc: denied { add_name } for pid=8375 comm="syz.0.1064" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.757339][ T30] audit: type=1400 audit(1786101325.833:542): avc: denied { create } for pid=8375 comm="syz.0.1064" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 171.818926][ T8393] Falling back ldisc for ttyS3. [ 171.928307][ T30] audit: type=1400 audit(1786101325.983:543): avc: denied { unmount } for pid=7431 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.117615][ T30] audit: type=1400 audit(1786101326.193:544): avc: denied { write } for pid=8345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.293957][ T8407] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 172.318081][ T30] audit: type=1400 audit(1786101326.443:545): avc: denied { write } for pid=8391 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.363098][ T8407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.266746][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 173.612768][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.793700][ T5704] kernel read not supported for file /media0 (pid: 5704 comm: kworker/0:4) [ 174.376027][ T5704] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.575952][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 174.610344][ T5704] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 174.648239][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.691194][ T5704] usb 3-1: Product: syz [ 174.721034][ T5704] usb 3-1: Manufacturer: syz [ 174.749496][ T5704] usb 3-1: SerialNumber: syz [ 174.783906][ T5704] usb 3-1: config 0 descriptor?? [ 174.805300][ T5696] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 174.833915][ T5704] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.009194][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.054100][ T5696] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 175.109354][ T5696] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 4 [ 175.160975][ T5696] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 175.219697][ T5696] usb 2-1: language id specifier not provided by device, defaulting to English [ 175.246260][ T5704] gspca_se401: ExtraFeatures: 71 [ 175.260484][ T5704] gspca_se401: Too many frame sizes [ 175.275849][ T5696] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 175.301996][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.354796][ T5696] usb 2-1: Manufacturer: 쾗휬n⏤癯僎↢娰嬿埵髧脽Ꮜ䦮诨䡐屰涪㻞碐밬단鈀铅⺰ᆵ텸℞貒总Ⰰ㋵곐傧ⶱ⢲빀문͌罿䨚ꩨݔޥ [ 175.512386][ T9] usb 3-1: USB disconnect, device number 9 [ 175.692650][ T5696] usb 2-1: low speed audio streaming not supported [ 175.737449][ T5696] usb 2-1: low speed audio streaming not supported [ 175.940465][ T5696] usb 2-1: USB disconnect, device number 8 [ 176.066925][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.121520][ T8536] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.189508][ T8535] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 176.824476][ T8562] vti0: entered promiscuous mode [ 177.653957][ T8597] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 178.021840][ T8611] kAFS: bad VL server IP address [ 178.283233][ T8624] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1166'. [ 178.357975][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 178.411748][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.435796][ T5696] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.625888][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 178.635138][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.671752][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.697921][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 178.697934][ T30] audit: type=1400 audit(1786101333.313:551): avc: denied { read write } for pid=8638 comm="syz.0.1173" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.754797][ T5696] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 178.783025][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.819815][ T5696] usb 3-1: Product: syz [ 178.830265][ T30] audit: type=1400 audit(1786101333.313:552): avc: denied { open } for pid=8638 comm="syz.0.1173" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.854095][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 178.862876][ T5696] usb 3-1: Manufacturer: syz [ 178.878121][ T5696] usb 3-1: SerialNumber: syz [ 178.883010][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 178.913305][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 178.928532][ T5696] usb 3-1: config 0 descriptor?? [ 178.952493][ T5696] usb 3-1: no audio or video endpoints found [ 178.972650][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.990525][ T30] audit: type=1400 audit(1786101333.343:553): avc: denied { ioctl } for pid=8638 comm="syz.0.1173" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.065208][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 179.078527][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 179.112592][ T8647] netlink: 'syz.0.1176': attribute type 21 has an invalid length. [ 179.127725][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.145543][ T30] audit: type=1400 audit(1786101333.513:554): avc: denied { getopt } for pid=8643 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.183729][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.234519][ T5696] usb 3-1: USB disconnect, device number 10 [ 179.272749][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.331097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.356988][ T30] audit: type=1400 audit(1786101333.973:555): avc: denied { mount } for pid=8650 comm="syz.4.1178" name="/" dev="hugetlbfs" ino=22440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 179.607822][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 179.626688][ T9] usbtmc 2-1:16.0: can't read capabilities [ 179.640894][ T30] audit: type=1400 audit(1786101334.243:556): avc: denied { connect } for pid=8661 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.778331][ T30] audit: type=1400 audit(1786101334.383:557): avc: denied { write } for pid=8661 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.957659][ T30] audit: type=1400 audit(1786101334.563:558): avc: denied { mounton } for pid=8671 comm="syz.4.1187" path="/proc/550/cgroup" dev="proc" ino=22512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 179.996536][ T8674] block2mtd: illegal erase size [ 180.007606][ T8628] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 180.058700][ T5696] usb 2-1: USB disconnect, device number 9 [ 180.666052][ T5696] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 180.744234][ T8694] ip6gre0: Master is either lo or non-ether device [ 180.860183][ T5696] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 180.930399][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.992335][ T5696] usb 3-1: Product: syz [ 181.023714][ T5696] usb 3-1: Manufacturer: syz [ 181.061811][ T5696] usb 3-1: SerialNumber: syz [ 181.399538][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.446820][ T5696] rtl8150 3-1:1.0: couldn't reset the device [ 181.479191][ T5696] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 181.562712][ T5696] usb 3-1: USB disconnect, device number 11 [ 181.699962][ T30] audit: type=1400 audit(1786101336.313:559): avc: denied { read } for pid=8720 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.898682][ T30] audit: type=1400 audit(1786101336.513:560): avc: denied { getopt } for pid=8727 comm="syz.0.1213" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.425621][ T8746] bond1: invalid ARP target 0.0.0.0 specified for addition [ 182.462292][ T8746] bond1: option arp_ip_target: invalid value (0) [ 183.024942][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 183.110863][ T8746] bond1 (unregistering): Released all slaves [ 183.229135][ T9] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 183.278942][ T9] usb 5-1: config 0 has no interface number 0 [ 183.317025][ T9] usb 5-1: too many endpoints for config 0 interface 115 altsetting 99: 111, using maximum allowed: 30 [ 183.401357][ T9] usb 5-1: config 0 interface 115 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 183.491717][ T9] usb 5-1: config 0 interface 115 has no altsetting 0 [ 183.560638][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 183.626485][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.685993][ T9] usb 5-1: Product: syz [ 183.720464][ T9] usb 5-1: Manufacturer: syz [ 183.745375][ T9] usb 5-1: SerialNumber: syz [ 183.784238][ T9] usb 5-1: config 0 descriptor?? [ 183.816765][ T9] ftdi_sio 5-1:0.115: FTDI USB Serial Device converter detected [ 183.883964][ T9] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 184.120892][ T9] usb 5-1: USB disconnect, device number 13 [ 184.161243][ T9] ftdi_sio 5-1:0.115: device disconnected [ 184.953470][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 184.953483][ T30] audit: type=1400 audit(1786101339.563:564): avc: denied { create } for pid=8813 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.487058][ T5696] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 185.658318][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.699837][ T5696] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 185.718421][ T5719] kernel read not supported for file /dsp1 (pid: 5719 comm: kworker/0:5) [ 185.733797][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1265'. [ 185.777628][ T5696] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 185.821995][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.868571][ T5696] usb 1-1: Product: syz [ 185.901666][ T5696] usb 1-1: Manufacturer: syz [ 185.929996][ T5696] usb 1-1: SerialNumber: syz [ 186.313479][ T30] audit: type=1400 audit(1786101340.923:565): avc: denied { ioctl } for pid=8858 comm="syz.4.1273" path="socket:[23457]" dev="sockfs" ino=23457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.369822][ T8860] vxcan0: tx address claim with dest, not broadcast [ 186.546975][ T30] audit: type=1400 audit(1786101341.163:566): avc: denied { bind } for pid=8868 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.613913][ C0] usb 1-1: received EP1 urb->status = -71 [ 186.682272][ T5696] input: as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 186.812243][ T30] audit: type=1400 audit(1786101341.423:567): avc: denied { name_bind } for pid=8877 comm="syz.1.1282" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 187.529194][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 187.768366][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.817394][ T5696] usb 1-1: USB disconnect, device number 12 [ 188.265420][ T30] audit: type=1400 audit(1786101342.883:568): avc: denied { map } for pid=8911 comm="syz.1.1295" path="/dev/sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.498507][ T30] audit: type=1400 audit(1786101342.903:569): avc: denied { execute } for pid=8911 comm="syz.1.1295" path="/dev/sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.787663][ T30] audit: type=1400 audit(1786101343.403:570): avc: denied { bind } for pid=8924 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.796033][ T5597] Bluetooth: hci0: link tx timeout [ 189.805170][ T5597] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.407673][ T30] audit: type=1400 audit(1786101345.023:571): avc: denied { read } for pid=8954 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.783248][ T8967] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary [ 190.831425][ T30] audit: type=1400 audit(1786101345.443:572): avc: denied { read } for pid=8968 comm="syz.1.1322" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.966556][ T30] audit: type=1400 audit(1786101345.473:573): avc: denied { open } for pid=8968 comm="syz.1.1322" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 191.485495][ T8986] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 191.494324][ T8986] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 191.858786][ T5597] Bluetooth: hci0: command 0x0405 tx timeout [ 193.205131][ T9003] syz.1.1337 (9003): drop_caches: 2 [ 194.182175][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208169][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.297039][ T30] audit: type=1400 audit(1786101350.913:574): avc: denied { map } for pid=9086 comm="syz.2.1376" path="socket:[24743]" dev="sockfs" ino=24743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 196.627409][ T30] audit: type=1400 audit(1786101350.913:575): avc: denied { read } for pid=9086 comm="syz.2.1376" path="socket:[24743]" dev="sockfs" ino=24743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.564601][ T30] audit: type=1400 audit(1786101351.343:576): avc: denied { mounton } for pid=9094 comm="syz.3.1380" path="cgroup:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.433693][ T8931] Set syz1 is full, maxelem 65536 reached [ 200.024917][ T9111] bridge_slave_1: invalid flags given to default FDB implementation [ 200.850247][ T30] audit: type=1400 audit(1786101355.463:577): avc: denied { map } for pid=9127 comm="syz.4.1395" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.874387][ T9129] binder: binder_mmap: 9127 0-1000 bad vm_flags failed -1 [ 201.382380][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 201.390067][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 201.396288][ T5605] Bluetooth: hci2: command 0x2016 tx timeout [ 201.402309][ T4913] Bluetooth: hci3: command 0x0406 tx timeout [ 202.166334][ T9133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1406'. [ 202.837032][ T9135] overlayfs: upper fs does not support file handles, falling back to index=off. [ 203.070745][ T9133] netlink: 'syz.0.1406': attribute type 2 has an invalid length. [ 203.280596][ T9135] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 203.299932][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1406'. [ 203.321431][ T30] audit: type=1400 audit(1786101357.933:578): avc: denied { read } for pid=9136 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.731345][ T30] audit: type=1400 audit(1786101358.343:579): avc: denied { bind } for pid=9144 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.800147][ T9145] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 203.868976][ T9132] syz.2.1396 (9132): drop_caches: 2 [ 203.940755][ T30] audit: type=1400 audit(1786101358.393:580): avc: denied { accept } for pid=9144 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.804645][ T5330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.004626][ T5330] usb 3-1: Using ep0 maxpacket: 32 [ 205.027382][ T5330] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 205.068418][ T5330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.103548][ T5330] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 205.157397][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.224017][ T5330] usb 3-1: config 0 descriptor?? [ 205.691801][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 205.716343][ T5330] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 205.746591][ T5330] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 205.759149][ T9184] gtp0: entered allmulticast mode [ 205.772257][ T5330] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 205.799720][ T5330] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 205.827061][ T5330] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 205.930578][ T5330] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 206.038904][ T30] audit: type=1400 audit(1786101360.653:581): avc: denied { create } for pid=9188 comm="syz.0.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.334938][ T5330] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-110) [ 206.371937][ T5330] corsair-psu 0003:1B1C:1C09.000D: probe with driver corsair-psu failed with error -110 [ 206.423856][ T5330] usb 3-1: USB disconnect, device number 12 [ 206.724245][ T9205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.041520][ T9214] vivid-002: disconnect [ 207.115649][ T9213] vivid-002: reconnect [ 207.337938][ T30] audit: type=1400 audit(1786101361.953:582): avc: denied { create } for pid=9222 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.414170][ T30] audit: type=1400 audit(1786101361.983:583): avc: denied { write } for pid=9222 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.487430][ T30] audit: type=1400 audit(1786101361.983:584): avc: denied { connect } for pid=9222 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.588357][ T30] audit: type=1400 audit(1786101362.053:585): avc: denied { shutdown } for pid=9222 comm="syz.2.1437" lport=55609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.666937][ T30] audit: type=1400 audit(1786101362.073:586): avc: denied { getopt } for pid=9222 comm="syz.2.1437" lport=55609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.700633][ T9234] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 208.187585][ T9247] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.216767][ T30] audit: type=1400 audit(1786101370.832:587): avc: denied { append } for pid=9246 comm="syz.3.1448" name="context-info" dev="tracefs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 208.738914][ T9262] netlink: 'syz.0.1453': attribute type 32 has an invalid length. [ 208.779372][ T9262] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1453'. [ 209.032805][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.104679][ T5719] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 209.109742][ T30] audit: type=1400 audit(1786101371.712:588): avc: denied { map } for pid=9271 comm="syz.0.1459" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 209.225963][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 209.260866][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.275770][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 209.310385][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.323018][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.345996][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.364615][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 209.382784][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.392685][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.435549][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.453507][ T10] usb 5-1: config 0 descriptor?? [ 209.466447][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.495838][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.514597][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.547711][ T30] audit: type=1400 audit(1786101372.162:589): avc: denied { append } for pid=9283 comm="syz.3.1464" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 209.575583][ T5719] usb 3-1: Manufacturer: syz [ 209.580999][ T5330] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.600753][ T5719] usb 3-1: config 0 descriptor?? [ 209.754629][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 209.767675][ T5330] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 209.798041][ T5330] usb 1-1: config 0 has no interface number 0 [ 209.828210][ T5330] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.879581][ T5330] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.923789][ T5330] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 209.925083][ T10] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 209.959065][ T5330] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 209.983202][ T5330] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.027825][ T5330] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 210.060996][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.111982][ T5330] usb 1-1: Product: syz [ 210.151599][ T5330] usb 1-1: Manufacturer: syz [ 210.175878][ T5330] usb 1-1: SerialNumber: syz [ 210.212346][ T5330] usb 1-1: config 0 descriptor?? [ 210.327770][ T5719] rc_core: IR keymap rc-hauppauge not found [ 210.336631][ T5719] Registered IR keymap rc-empty [ 210.352111][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.386933][ T10] corsair 0003:1B1C:1B02.000E: Failed to get K90 initial state (error -71). [ 210.404660][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.433263][ T10] usb 5-1: USB disconnect, device number 14 [ 210.450367][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 210.486188][ T5330] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 210.511337][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 210.554111][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.605013][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.660114][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.697247][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.738486][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.784784][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.798180][ T30] audit: type=1400 audit(1786101373.412:590): avc: denied { ioctl } for pid=9305 comm="syz.1.1472" path="socket:[19184]" dev="sockfs" ino=19184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.829024][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.857320][ T5330] usb 1-1: USB disconnect, device number 13 [ 210.874754][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.883171][ T30] audit: type=1400 audit(1786101373.432:591): avc: denied { setopt } for pid=9305 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.933883][ T30] audit: type=1400 audit(1786101373.442:592): avc: denied { write } for pid=9305 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.944738][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 211.025428][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 211.077878][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 211.104590][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.140515][ T5719] usb 3-1: USB disconnect, device number 13 [ 211.457444][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 211.474706][ T9318] netlink: 'syz.3.1478': attribute type 30 has an invalid length. [ 211.519432][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 211.590317][ T9319] netlink: 'syz.3.1478': attribute type 30 has an invalid length. [ 211.661462][ T9318] vxlan0: entered promiscuous mode [ 211.713519][ T9318] vxlan0: entered allmulticast mode [ 211.765906][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.817079][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.839789][ T5712] logitech-hidpp-device 0005:046D:B012.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 211.861006][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.897745][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.057391][ T9332] fido_id[9332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.364474][ T9341] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.620185][ T30] audit: type=1400 audit(1786101375.232:593): avc: denied { read } for pid=9350 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.873188][ T30] audit: type=1400 audit(1786101375.482:594): avc: denied { bind } for pid=9356 comm="syz.4.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.034098][ T9360] netlink: 4852 bytes leftover after parsing attributes in process `syz.2.1496'. [ 213.054079][ T9360] netlink: 4852 bytes leftover after parsing attributes in process `syz.2.1496'. [ 213.625755][ T9371] syz.3.1501: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.691053][ T9371] CPU: 0 UID: 0 PID: 9371 Comm: syz.3.1501 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.691095][ T9371] Tainted: [L]=SOFTLOCKUP [ 213.691103][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 213.691122][ T9371] Call Trace: [ 213.691130][ T9371] [ 213.691139][ T9371] dump_stack_lvl+0x100/0x190 [ 213.691183][ T9371] warn_alloc.cold+0x94/0xa8 [ 213.691209][ T9371] ? __pfx_warn_alloc+0x10/0x10 [ 213.691238][ T9371] ? __lock_acquire+0x49f/0x1a40 [ 213.691276][ T9371] __vmalloc_node_range_noprof+0x136c/0x1630 [ 213.691318][ T9371] ? trace_contention_end+0x126/0x160 [ 213.691347][ T9371] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 213.691389][ T9371] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 213.691422][ T9371] ? find_held_lock+0x2b/0x80 [ 213.691447][ T9371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.691475][ T9371] ? __pfx___mutex_lock+0x10/0x10 [ 213.691516][ T9371] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 213.691545][ T9371] __vmalloc_node_noprof+0xad/0xf0 [ 213.691575][ T9371] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 213.691612][ T9371] dvb_dvr_do_ioctl+0x15d/0x270 [ 213.691650][ T9371] dvb_usercopy+0x167/0x340 [ 213.691680][ T9371] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 213.691716][ T9371] ? __pfx_dvb_usercopy+0x10/0x10 [ 213.691760][ T9371] ? selinux_file_ioctl+0x13b/0x290 [ 213.691792][ T9371] ? selinux_file_ioctl+0xb6/0x290 [ 213.691831][ T9371] dvb_dvr_ioctl+0x29/0x40 [ 213.691863][ T9371] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 213.691895][ T9371] __x64_sys_ioctl+0x18e/0x210 [ 213.691933][ T9371] do_syscall_64+0x115/0x870 [ 213.691962][ T9371] ? clear_bhb_loop+0x70/0xc0 [ 213.691991][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.692013][ T9371] RIP: 0033:0x7faba599e0d9 [ 213.692042][ T9371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.692064][ T9371] RSP: 002b:00007faba683c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.692093][ T9371] RAX: ffffffffffffffda RBX: 00007faba5c25fa0 RCX: 00007faba599e0d9 [ 213.692108][ T9371] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 213.692122][ T9371] RBP: 00007faba5a35024 R08: 0000000000000000 R09: 0000000000000000 [ 213.692137][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.692151][ T9371] R13: 00007faba5c26038 R14: 00007faba5c25fa0 R15: 00007ffc40a6baa8 [ 213.692184][ T9371] [ 213.745091][ T9371] Mem-Info: [ 213.946280][ T30] audit: type=1400 audit(1786101376.452:595): avc: denied { connect } for pid=9372 comm="syz.2.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.997565][ T9371] active_anon:14489 inactive_anon:8 isolated_anon:0 [ 213.997565][ T9371] active_file:51 inactive_file:55593 isolated_file:0 [ 213.997565][ T9371] unevictable:0 dirty:566 writeback:0 [ 213.997565][ T9371] slab_reclaimable:7311 slab_unreclaimable:99964 [ 213.997565][ T9371] mapped:32416 shmem:2459 pagetables:1493 [ 213.997565][ T9371] sec_pagetables:0 bounce:0 [ 213.997565][ T9371] kernel_misc_reclaimable:0 [ 213.997565][ T9371] free:1299640 free_pcp:12134 free_cma:0 [ 214.153829][ T9371] Node 0 active_anon:61256kB inactive_anon:32kB active_file:204kB inactive_file:222076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132628kB dirty:2256kB writeback:0kB shmem:12936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12372kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.233422][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 214.272767][ T9371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.281245][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 214.369631][ T9371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.414697][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 214.452024][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 214.484071][ T9371] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 214.495981][ T9371] Node 0 DMA32 free:1244680kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53856kB inactive_anon:32kB active_file:204kB inactive_file:222076kB unevictable:0kB writepending:2256kB zspages:312kB present:3129332kB managed:2532260kB mlocked:0kB bounce:0kB free_pcp:40440kB local_pcp:21480kB free_cma:0kB [ 214.591755][ T9371] lowmem_reserve[]: 0 0 0 0 0 [ 214.600440][ T9377] ceph: No mds server is up or the cluster is laggy [ 214.619716][ T9371] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.737616][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 214.762113][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 214.773157][ T9395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.782559][ T9395] IPv6: NLM_F_CREATE should be set when creating new route [ 214.789896][ T9395] IPv6: NLM_F_CREATE should be set when creating new route [ 214.811070][ T9371] lowmem_reserve[]: 0 0 0 0 0 [ 214.823273][ T9371] Node 1 Normal free:3942560kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7796kB local_pcp:0kB free_cma:0kB [ 214.914628][ T9371] lowmem_reserve[]: 0 0 0 0 0 [ 214.944647][ T9371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.969664][ T9371] Node 0 DMA32: 1250*4kB (UME) 1278*8kB (UME) 761*16kB (UME) 571*32kB (UME) 321*64kB (UME) 122*128kB (UME) 52*256kB (UME) 18*512kB (UME) 8*1024kB (ME) 3*2048kB (UM) 276*4096kB (UM) = 1249192kB [ 215.006082][ T9371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.115655][ T9371] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 5*16kB (UM) 9*32kB (UM) 5*64kB (U) 7*128kB (UM) 3*256kB (M) 4*512kB (M) 0*1024kB 1*2048kB (U) 961*4096kB (M) = 3942812kB [ 215.174717][ T9371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.186481][ T9371] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 215.201986][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.206286][ T9371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.238181][ T9371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 215.242459][ T9395] team_slave_0: left promiscuous mode [ 215.272900][ T9395] team_slave_1: left promiscuous mode [ 215.285896][ T9371] 56162 total pagecache pages [ 215.314720][ T9371] 2 pages in swap cache [ 215.320952][ T9371] Free swap = 124912kB [ 215.332615][ T9371] Total swap = 124996kB [ 215.343799][ T9371] 2097051 pages RAM [ 215.366876][ T9371] 0 pages HighMem/MovableOnly [ 215.387906][ T9371] 432275 pages reserved [ 215.401896][ T9371] 0 pages cma reserved [ 215.557213][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.682224][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.334765][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.361539][ T5330] syz1: Port: 1 Link DOWN [ 216.838181][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.857216][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.900289][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.987149][ T5330] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.190667][ T5330] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.221132][ T5330] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 217.252871][ T9433] batadv_slave_1: entered promiscuous mode [ 217.267581][ T9432] batadv_slave_1: left promiscuous mode [ 217.277134][ T5330] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 217.297523][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.314787][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 217.421891][ T5330] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 217.477981][ T30] audit: type=1400 audit(1786101380.092:596): avc: denied { write } for pid=9436 comm="syz.1.1528" name="instances" dev="tracefs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 217.512313][ T10] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.516802][ T5330] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 217.562788][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 217.579080][ T30] audit: type=1400 audit(1786101380.152:597): avc: denied { add_name } for pid=9436 comm="syz.1.1528" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 217.639518][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.681974][ T30] audit: type=1400 audit(1786101380.162:598): avc: denied { create } for pid=9436 comm="syz.1.1528" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 217.691205][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.786255][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.804607][ T10] usb 4-1: Product: syz [ 217.816902][ T10] usb 4-1: Manufacturer: syz [ 217.884787][ T10] usb 4-1: SerialNumber: syz [ 217.901878][ T10] usb 4-1: config 0 descriptor?? [ 217.946905][ T10] usb 4-1: selecting invalid altsetting 0 [ 217.959505][ T980] usb 5-1: USB disconnect, device number 15 [ 218.012008][ T980] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 218.062390][ T980] spcp8x5 5-1:1.0: device disconnected [ 218.113710][ T30] audit: type=1400 audit(1786101380.722:599): avc: denied { create } for pid=9446 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.197359][ T30] audit: type=1400 audit(1786101380.752:600): avc: denied { connect } for pid=9446 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.374132][ T10] usb 4-1: USB disconnect, device number 11 [ 218.486144][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.645557][ T30] audit: type=1400 audit(1786101381.262:601): avc: denied { listen } for pid=9455 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.705116][ T9456] clocksource: Switched to clocksource kvm-clock [ 219.109930][ T30] audit: type=1400 audit(1786101381.693:602): avc: denied { write } for pid=980 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25839 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.339527][ T30] audit: type=1400 audit(1786101381.953:603): avc: denied { map } for pid=9472 comm="syz.3.1545" path="socket:[25858]" dev="sockfs" ino=25858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.339800][ T30] audit: type=1400 audit(1786101381.953:604): avc: denied { read } for pid=9472 comm="syz.3.1545" path="socket:[25858]" dev="sockfs" ino=25858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.096960][ T30] audit: type=1400 audit(1786101382.713:605): avc: denied { read } for pid=9500 comm="syz.4.1555" path="socket:[25599]" dev="sockfs" ino=25599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.647443][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 222.633679][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 222.633697][ T30] audit: type=1400 audit(1786101385.243:613): avc: denied { search } for pid=9570 comm="syz.0.1586" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 222.955117][ T5330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.010806][ T980] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 223.037309][ T980] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 223.089197][ T980] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 223.150743][ T5330] usb 4-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice= 1.00 [ 223.170581][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.189689][ T5330] usb 4-1: Product: syz [ 223.198623][ T5330] usb 4-1: Manufacturer: syz [ 223.205657][ T9588] fido_id[9588]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.219353][ T5330] usb 4-1: SerialNumber: syz [ 223.241596][ T5330] em28xx 4-1:1.0: New device syz syz @ 480 Mbps (2040:6500, interface 0, class 0) [ 223.265037][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.271318][ T5330] em28xx 4-1:1.0: DVB interface 0 found: bulk [ 223.304963][ T5712] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 223.455900][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 223.478046][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.489430][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.507409][ T10] usb 2-1: config 179 has no interface number 0 [ 223.507739][ T5712] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 223.530462][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.562243][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 223.570879][ T5712] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 223.598084][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.604332][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.619101][ T5712] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 223.653195][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 223.662439][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 223.683755][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 223.690406][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.710382][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 223.742581][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.744052][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 223.772874][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.793340][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 223.810891][ T9584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.844057][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 224.183741][ T5712] usb 5-1: USB disconnect, device number 16 [ 224.232516][ T5712] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 224.274151][ T5712] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 224.280354][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 224.321184][ T5712] keyspan 5-1:1.0: device disconnected [ 224.544437][ T10] usb 2-1: USB disconnect, device number 10 [ 224.550513][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 224.550565][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.591920][ T5330] em28xx 4-1:1.0: unknown em28xx chip ID (0) [ 224.888601][ T5330] em28xx 4-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 224.903464][ T5330] em28xx 4-1:1.0: board has no eeprom [ 224.964638][ T5330] em28xx 4-1:1.0: Identified as Hauppauge WinTV HVR 900 (card=10) [ 224.990548][ T5330] em28xx 4-1:1.0: dvb set to bulk mode. [ 225.006812][ T5712] em28xx 4-1:1.0: Binding DVB extension [ 225.050251][ T5330] usb 4-1: USB disconnect, device number 12 [ 225.099076][ T5330] em28xx 4-1:1.0: Disconnecting em28xx [ 225.115934][ T5712] zl10353_read_register: readreg error (reg=127, ret==-19) [ 225.154689][ T5712] em28xx 4-1:1.0: dvb frontend not attached. Can't attach xc3028 [ 225.217549][ T5712] em28xx 4-1:1.0: Registering input extension [ 225.237237][ T5330] em28xx 4-1:1.0: Closing input extension [ 225.512723][ T9620] netlink: 'syz.0.1606': attribute type 10 has an invalid length. [ 225.547961][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.555624][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.582307][ T5330] em28xx 4-1:1.0: Freeing device [ 225.640656][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 225.668354][ T9627] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1608'. [ 225.708386][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.715812][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.723390][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.730620][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.739383][ T9627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1608'. [ 225.791867][ T9620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.822480][ T9633] Failed to get privilege flags for destination (handle=0x2:0xfffffffe) [ 225.843523][ T9629] bridge_slave_1: left allmulticast mode [ 225.893710][ T9629] bridge_slave_1: left promiscuous mode [ 225.916740][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.983550][ T9629] bridge_slave_0: left allmulticast mode [ 225.998041][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1612'. [ 226.019304][ T9629] bridge_slave_0: left promiscuous mode [ 226.037086][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.117989][ T9629] bond0: (slave bridge0): Releasing backup interface [ 226.483930][ T30] audit: type=1400 audit(1786101389.093:614): avc: denied { listen } for pid=9645 comm="syz.0.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.673038][ T9650] block2mtd: parameter too long [ 227.235787][ T5712] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 227.436370][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 227.456903][ T5712] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 227.486139][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.512106][ T5712] usb 4-1: Product: syz [ 227.526197][ T5712] usb 4-1: Manufacturer: syz [ 227.543372][ T5712] usb 4-1: SerialNumber: syz [ 227.580018][ T5712] usb 4-1: config 0 descriptor?? [ 228.008650][ T5712] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 228.063262][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.097196][ T5712] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 228.143691][ T5712] usb 4-1: media controller created [ 228.239693][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.322770][ T9693] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 228.357410][ T9693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.409836][ T5712] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 228.438721][ T5712] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 228.594856][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.631317][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.680026][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.733641][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.796203][ T5712] usb 4-1: USB disconnect, device number 13 [ 228.974692][ T5719] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.091747][ T5712] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 229.174999][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 229.199418][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.226138][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.264611][ T5719] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 229.284602][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.309221][ T5719] usb 2-1: config 0 descriptor?? [ 229.529775][ T30] audit: type=1400 audit(1786101392.143:615): avc: denied { write } for pid=9712 comm="syz.0.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.584244][ T30] audit: type=1400 audit(1786101392.163:616): avc: denied { read } for pid=9712 comm="syz.0.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.770774][ T5719] apple 0003:05AC:024B.0011: fixing up MacBook JIS keyboard report descriptor [ 229.807197][ T5719] apple 0003:05AC:024B.0011: unknown global tag 0xe [ 229.826536][ T5719] apple 0003:05AC:024B.0011: item 0 1 1 14 parsing failed [ 229.850454][ T5719] apple 0003:05AC:024B.0011: parse failed [ 229.950092][ T9722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1652'. [ 230.054681][ T5719] apple 0003:05AC:024B.0011: probe with driver apple failed with error -22 [ 230.204517][ T5719] usb 2-1: USB disconnect, device number 11 [ 230.490301][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1658'. [ 231.104693][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.307250][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 231.343912][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.389507][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 231.415572][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 231.443929][ T10] usb 5-1: Manufacturer: syz [ 231.470234][ T10] usb 5-1: config 0 descriptor?? [ 231.478283][ T30] audit: type=1400 audit(1786101394.093:617): avc: denied { bind } for pid=9756 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.552048][ T30] audit: type=1400 audit(1786101394.093:618): avc: denied { name_bind } for pid=9756 comm="syz.0.1668" src=20130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 231.633087][ T30] audit: type=1400 audit(1786101394.093:619): avc: denied { node_bind } for pid=9756 comm="syz.0.1668" src=20130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 231.634681][ T10] rc_core: IR keymap rc-hauppauge not found [ 231.733645][ T10] Registered IR keymap rc-empty [ 231.760940][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 231.810003][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 231.880200][ T10] usb 5-1: USB disconnect, device number 17 [ 232.028087][ T9776] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 232.100647][ T3017] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 232.235675][ T3017] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 232.348285][ T9785] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 232.510226][ T9784] ovs-system: entered promiscuous mode [ 232.797208][ T30] audit: type=1400 audit(1786101395.413:620): avc: denied { mount } for pid=9804 comm="syz.4.1689" name="/" dev="overlay" ino=1751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.884037][ T30] audit: type=1400 audit(1786101395.493:621): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.905743][ T5712] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.956295][ T9810] input: syz0 as /devices/virtual/input/input23 [ 233.076977][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 233.091254][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 233.131385][ T5712] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 233.163905][ T5712] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 233.199799][ T5712] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 233.234964][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.246279][ T5712] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 233.271215][ T5712] usb 3-1: config 1 interface 0 has no altsetting 0 [ 233.289384][ T5712] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 233.317904][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.353141][ T5712] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 233.436407][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.455386][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 233.474610][ T10] usb 4-1: can't read configurations, error -71 [ 233.587420][ T5712] scsi host1: usb-storage 3-1:1.0 [ 233.665804][ T36] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 233.902738][ T36] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 234.019621][ T980] usb 3-1: USB disconnect, device number 14 [ 234.020997][ T9825] sddr09: could not read card info [ 234.078408][ T57] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 234.122219][ T57] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 234.154053][ T57] sd 1:0:0:0: [sdb] Write Protect is off [ 234.178551][ T57] sd 1:0:0:0: [sdb] Asking for cache data failed [ 234.209989][ T57] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 234.679655][ T57] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 235.045831][ T9853] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 235.104247][ T9853] CIFS: VFS: Error connecting to socket. Aborting operation. [ 235.164077][ T9853] CIFS: VFS: cifs_mount failed w/return code = -111 [ 235.184761][ T5330] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.356617][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.389495][ T9861] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 235.417277][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.455289][ T5330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.513147][ T5330] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 235.546282][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.603499][ T5330] usb 1-1: config 0 descriptor?? [ 236.152588][ T5330] thrustmaster 0003:044F:B324.0012: item 0 4 0 8 parsing failed [ 236.224773][ T5330] thrustmaster 0003:044F:B324.0012: parse failed [ 236.291272][ T5330] thrustmaster 0003:044F:B324.0012: probe with driver thrustmaster failed with error -22 [ 236.393256][ T5330] usb 1-1: USB disconnect, device number 14 [ 236.485976][ T9876] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 237.378908][ T9878] Dynamic Preempt: lazy [ 237.481578][ T30] audit: type=1326 audit(1786101400.083:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.1.1720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a99e0d9 code=0x7fc00000 [ 237.744371][ T30] audit: type=1400 audit(1786101400.353:623): avc: denied { cmd } for pid=9904 comm="syz.3.1733" path="/347/file2" dev="tmpfs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 237.838928][ T30] audit: type=1400 audit(1786101400.443:624): avc: denied { read } for pid=9913 comm="syz.4.1734" name="msr" dev="devtmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 237.934765][ T30] audit: type=1400 audit(1786101400.443:625): avc: denied { open } for pid=9913 comm="syz.4.1734" path="/dev/cpu/1/msr" dev="devtmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 238.045841][ T30] audit: type=1400 audit(1786101400.473:626): avc: denied { write } for pid=9913 comm="syz.4.1734" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.156727][ T30] audit: type=1400 audit(1786101400.473:627): avc: denied { open } for pid=9913 comm="syz.4.1734" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.252181][ T30] audit: type=1400 audit(1786101400.483:628): avc: denied { ioctl } for pid=9913 comm="syz.4.1734" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.371641][ T30] audit: type=1400 audit(1786101400.763:629): avc: denied { setopt } for pid=9923 comm="syz.2.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.895817][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 239.076747][ T30] audit: type=1400 audit(1786101401.693:630): avc: denied { connect } for pid=9959 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.079796][ T9962] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 239.119236][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 239.150618][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 239.176140][ T30] audit: type=1400 audit(1786101401.693:631): avc: denied { shutdown } for pid=9959 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.196626][ T9962] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.199645][ T10] usb 5-1: Product: syz [ 239.236405][ T10] usb 5-1: Manufacturer: syz [ 239.246492][ T10] usb 5-1: SerialNumber: syz [ 239.250446][ T9966] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 239.272177][ T10] usb 5-1: config 0 descriptor?? [ 239.296279][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1755'. [ 239.338325][ T9962] bond0: (slave team0): Enslaving as an active interface with an up link [ 239.394506][ T9966] team0: entered promiscuous mode [ 239.429807][ T9966] team_slave_0: entered promiscuous mode [ 239.456974][ T5597] Bluetooth: hci0: command 0x0405 tx timeout [ 239.473353][ T9966] team_slave_1: entered promiscuous mode [ 239.484465][ T9966] team0: entered allmulticast mode [ 239.490377][ T9966] team_slave_0: entered allmulticast mode [ 239.496538][ T9966] team_slave_1: entered allmulticast mode [ 239.523582][ T9966] bond0: (slave team0): Releasing backup interface [ 239.548782][ T9966] bridge0: port 3(team0) entered blocking state [ 239.567557][ T9966] bridge0: port 3(team0) entered disabled state [ 239.633174][ T10] usb 5-1: USB disconnect, device number 18 [ 240.020207][ T9988] sctp: [Deprecated]: syz.0.1766 (pid 9988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.020207][ T9988] Use struct sctp_sack_info instead [ 240.046351][ T5719] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.222332][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.267837][ T5719] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 240.295635][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.329067][ T5719] usb 3-1: Product: syz [ 240.359111][ T5719] usb 3-1: Manufacturer: syz [ 240.604862][ T5719] usb 3-1: selecting invalid altsetting 1 [ 240.629823][ T5719] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 240.642145][ T5719] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 240.649318][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.674644][ T5719] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 240.706827][ T5719] usb 3-1: selecting invalid altsetting 1 [ 240.716284][ T5719] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 240.747233][ T5719] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 240.762277][ T5719] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 240.792780][ T5719] usb 3-1: USB disconnect, device number 15 [ 240.854879][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.880850][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.924208][ T10] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 240.950114][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.984982][ T10] usb 1-1: Product: syz [ 240.996830][T10017] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 241.009792][ T10] usb 1-1: Manufacturer: syz [ 241.021517][ T10] usb 1-1: SerialNumber: syz [ 241.052244][ T10] symbolserial 1-1:1.0: symbol converter detected [ 241.093975][ T10] usb 1-1: symbol converter now attached to ttyUSB0 [ 241.253549][T10005] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 241.339372][ T10] usb 1-1: USB disconnect, device number 15 [ 241.721713][ T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 241.731396][ T10] symbolserial 1-1:1.0: device disconnected [ 242.570100][T10043] ================================================================== [ 242.578222][T10043] BUG: KASAN: slab-use-after-free in netdev_nl_queue_fill_one+0xf97/0x11f0 [ 242.586836][T10043] Read of size 4 at addr ffff88807e48498c by task syz.0.1788/10043 [ 242.594742][T10043] [ 242.597084][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.0.1788 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 242.597122][T10043] Tainted: [L]=SOFTLOCKUP [ 242.597132][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.597158][T10043] Call Trace: [ 242.597168][T10043] [ 242.597179][T10043] dump_stack_lvl+0x100/0x190 [ 242.597213][T10043] print_report+0x13d/0x4b0 [ 242.597248][T10043] ? __virt_addr_valid+0x239/0x430 [ 242.597280][T10043] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 242.597313][T10043] kasan_report+0xdf/0x1c0 [ 242.597345][T10043] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 242.597379][T10043] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 242.597413][T10043] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 242.597453][T10043] ? find_held_lock+0x2b/0x80 [ 242.597475][T10043] netdev_nl_queue_dump_one+0x189/0x380 [ 242.597508][T10043] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 242.597543][T10043] genl_dumpit+0x125/0x230 [ 242.597576][T10043] netlink_dump+0x532/0xd00 [ 242.597616][T10043] ? __pfx_netlink_dump+0x10/0x10 [ 242.597652][T10043] ? kasan_quarantine_put+0x104/0x240 [ 242.597687][T10043] ? kfree_skbmem+0x19f/0x210 [ 242.597710][T10043] netlink_recvmsg+0x7dc/0xa90 [ 242.597746][T10043] ? __pfx_netlink_recvmsg+0x10/0x10 [ 242.597781][T10043] ? __fget_files+0x215/0x3d0 [ 242.597809][T10043] ? __pfx_netlink_recvmsg+0x10/0x10 [ 242.597845][T10043] sock_recvmsg+0x1d5/0x220 [ 242.597881][T10043] __sys_recvfrom+0x1f2/0x2f0 [ 242.597909][T10043] ? __pfx___sys_recvfrom+0x10/0x10 [ 242.597940][T10043] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 242.597978][T10043] __x64_sys_recvfrom+0xe0/0x1c0 [ 242.598002][T10043] ? do_syscall_64+0x90/0x870 [ 242.598031][T10043] ? lockdep_hardirqs_on+0x78/0x100 [ 242.598058][T10043] do_syscall_64+0x115/0x870 [ 242.598086][T10043] ? clear_bhb_loop+0x70/0xc0 [ 242.598111][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.598136][T10043] RIP: 0033:0x7f97d175e90e [ 242.598157][T10043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.598182][T10043] RSP: 002b:00007f97d26fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 242.598217][T10043] RAX: ffffffffffffffda RBX: 00007f97d26fe6c0 RCX: 00007f97d175e90e [ 242.598233][T10043] RDX: 0000000000001000 RSI: 00007f97d26fd000 RDI: 0000000000000003 [ 242.598249][T10043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.598264][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 242.598279][T10043] R13: 00007f97d26fcf58 R14: 00007f97d26fd000 R15: 0000000000000000 [ 242.598303][T10043] [ 242.598311][T10043] [ 242.859358][T10043] Allocated by task 5604: [ 242.863713][T10043] kasan_save_stack+0x30/0x50 [ 242.868390][T10043] kasan_save_track+0x14/0x30 [ 242.873058][T10043] __kasan_kmalloc+0xaa/0xb0 [ 242.877636][T10043] __kvmalloc_node_noprof+0x34f/0x970 [ 242.882998][T10043] xt_alloc_table_info+0x44/0xa0 [ 242.887926][T10043] do_ip6t_set_ctl+0x611/0xd00 [ 242.892683][T10043] nf_setsockopt+0x8d/0xf0 [ 242.897092][T10043] ipv6_setsockopt+0x135/0x170 [ 242.901853][T10043] tcp_setsockopt+0xa7/0x100 [ 242.906429][T10043] do_sock_setsockopt+0xf3/0x1d0 [ 242.911369][T10043] __sys_setsockopt+0x195/0x220 [ 242.916211][T10043] __x64_sys_setsockopt+0xbd/0x160 [ 242.921315][T10043] do_syscall_64+0x115/0x870 [ 242.925899][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.931785][T10043] [ 242.934093][T10043] Freed by task 5604: [ 242.938054][T10043] kasan_save_stack+0x30/0x50 [ 242.942729][T10043] kasan_save_track+0x14/0x30 [ 242.947425][T10043] kasan_save_free_info+0x3b/0x70 [ 242.952451][T10043] __kasan_slab_free+0x5f/0x80 [ 242.957204][T10043] kfree+0x22b/0x6c0 [ 242.961083][T10043] __do_replace+0x734/0x990 [ 242.965575][T10043] do_ip6t_set_ctl+0xa5f/0xd00 [ 242.970331][T10043] nf_setsockopt+0x8d/0xf0 [ 242.974736][T10043] ipv6_setsockopt+0x135/0x170 [ 242.979494][T10043] tcp_setsockopt+0xa7/0x100 [ 242.984068][T10043] do_sock_setsockopt+0xf3/0x1d0 [ 242.989002][T10043] __sys_setsockopt+0x195/0x220 [ 242.993845][T10043] __x64_sys_setsockopt+0xbd/0x160 [ 242.998945][T10043] do_syscall_64+0x115/0x870 [ 243.003528][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.009411][T10043] [ 243.011719][T10043] The buggy address belongs to the object at ffff88807e484800 [ 243.011719][T10043] which belongs to the cache kmalloc-cg-1k of size 1024 [ 243.026018][T10043] The buggy address is located 396 bytes inside of [ 243.026018][T10043] freed 1024-byte region [ffff88807e484800, ffff88807e484c00) [ 243.039894][T10043] [ 243.042250][T10043] The buggy address belongs to the physical page: [ 243.048656][T10043] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e480 [ 243.057409][T10043] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.065897][T10043] memcg:ffff888029d01301 [ 243.070117][T10043] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 243.077643][T10043] page_type: f5(slab) [ 243.081642][T10043] raw: 00fff00000000040 ffff88813fe2b280 dead000000000100 dead000000000122 [ 243.090224][T10043] raw: 0000000000000000 0000000800100010 00000000f5000000 ffff888029d01301 [ 243.098797][T10043] head: 00fff00000000040 ffff88813fe2b280 dead000000000100 dead000000000122 [ 243.107457][T10043] head: 0000000000000000 0000000800100010 00000000f5000000 ffff888029d01301 [ 243.116116][T10043] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 243.124776][T10043] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 243.133433][T10043] page dumped because: kasan: bad access detected [ 243.139850][T10043] page_owner tracks the page as allocated [ 243.145547][T10043] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4952, tgid 4952 (klogd), ts 62743902760, free_ts 62717503694 [ 243.166291][T10043] post_alloc_hook+0xfd/0x120 [ 243.170995][T10043] get_page_from_freelist+0xf48/0x3530 [ 243.176443][T10043] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 243.182326][T10043] new_slab+0xa2/0x640 [ 243.186384][T10043] refill_objects+0xe3/0x410 [ 243.190962][T10043] __pcs_replace_empty_main+0x376/0x680 [ 243.196505][T10043] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 243.202917][T10043] kmalloc_reserve+0xe8/0x350 [ 243.207595][T10043] __alloc_skb+0x185/0x710 [ 243.212003][T10043] alloc_skb_with_frags+0xdd/0x760 [ 243.217130][T10043] sock_alloc_send_pskb+0x801/0x980 [ 243.222317][T10043] unix_dgram_sendmsg+0x3c7/0x1810 [ 243.227421][T10043] __sys_sendto+0x48b/0x4e0 [ 243.231918][T10043] __x64_sys_sendto+0xe0/0x1c0 [ 243.236672][T10043] do_syscall_64+0x115/0x870 [ 243.241266][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.247147][T10043] page last free pid 5530 tgid 5530 stack trace: [ 243.253455][T10043] __free_frozen_pages+0x79f/0x1090 [ 243.258679][T10043] __folio_put+0x3b4/0x5f0 [ 243.263083][T10043] do_exit+0x1fe8/0x2ae0 [ 243.267312][T10043] do_group_exit+0xd5/0x2a0 [ 243.271800][T10043] __x64_sys_exit_group+0x3e/0x50 [ 243.276812][T10043] x64_sys_call+0x102c/0x1530 [ 243.281486][T10043] do_syscall_64+0x115/0x870 [ 243.286078][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.291958][T10043] [ 243.294266][T10043] Memory state around the buggy address: [ 243.299894][T10043] ffff88807e484880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.307943][T10043] ffff88807e484900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.315990][T10043] >ffff88807e484980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.324032][T10043] ^ [ 243.328344][T10043] ffff88807e484a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.336427][T10043] ffff88807e484a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.344471][T10043] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.552224][T10043] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.559475][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.0.1788 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 243.570426][T10043] Tainted: [L]=SOFTLOCKUP [ 243.574745][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 243.584801][T10043] Call Trace: [ 243.588080][T10043] [ 243.591007][T10043] dump_stack_lvl+0x100/0x190 [ 243.595697][T10043] vpanic+0x552/0x970 [ 243.599680][T10043] ? __pfx_vpanic+0x10/0x10 [ 243.604182][T10043] ? mark_held_locks+0x40/0x70 [ 243.608953][T10043] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 243.614772][T10043] panic+0xd1/0xe0 [ 243.618497][T10043] ? __pfx_panic+0x10/0x10 [ 243.622912][T10043] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 243.628725][T10043] ? preempt_schedule_common+0x42/0xc0 [ 243.634193][T10043] check_panic_on_warn.cold+0x19/0x34 [ 243.639588][T10043] end_report.part.0+0x3a/0x90 [ 243.644375][T10043] kasan_report.cold+0xe/0x18 [ 243.649067][T10043] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 243.654886][T10043] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 243.660534][T10043] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 243.666629][T10043] ? find_held_lock+0x2b/0x80 [ 243.671327][T10043] netdev_nl_queue_dump_one+0x189/0x380 [ 243.676893][T10043] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 243.682646][T10043] genl_dumpit+0x125/0x230 [ 243.687108][T10043] netlink_dump+0x532/0xd00 [ 243.691629][T10043] ? __pfx_netlink_dump+0x10/0x10 [ 243.696669][T10043] ? kasan_quarantine_put+0x104/0x240 [ 243.702056][T10043] ? kfree_skbmem+0x19f/0x210 [ 243.706739][T10043] netlink_recvmsg+0x7dc/0xa90 [ 243.711520][T10043] ? __pfx_netlink_recvmsg+0x10/0x10 [ 243.716908][T10043] ? __fget_files+0x215/0x3d0 [ 243.721596][T10043] ? __pfx_netlink_recvmsg+0x10/0x10 [ 243.726898][T10043] sock_recvmsg+0x1d5/0x220 [ 243.731411][T10043] __sys_recvfrom+0x1f2/0x2f0 [ 243.736103][T10043] ? __pfx___sys_recvfrom+0x10/0x10 [ 243.741323][T10043] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 243.747768][T10043] __x64_sys_recvfrom+0xe0/0x1c0 [ 243.752717][T10043] ? do_syscall_64+0x90/0x870 [ 243.757435][T10043] ? lockdep_hardirqs_on+0x78/0x100 [ 243.762643][T10043] do_syscall_64+0x115/0x870 [ 243.767244][T10043] ? clear_bhb_loop+0x70/0xc0 [ 243.771927][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.777826][T10043] RIP: 0033:0x7f97d175e90e [ 243.782243][T10043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.801858][T10043] RSP: 002b:00007f97d26fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 243.810278][T10043] RAX: ffffffffffffffda RBX: 00007f97d26fe6c0 RCX: 00007f97d175e90e [ 243.818252][T10043] RDX: 0000000000001000 RSI: 00007f97d26fd000 RDI: 0000000000000003 [ 243.826222][T10043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.834190][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 243.842163][T10043] R13: 00007f97d26fcf58 R14: 00007f97d26fd000 R15: 0000000000000000 [ 243.850150][T10043] [ 243.853401][T10043] Kernel Offset: disabled [ 243.857714][T10043] Rebooting in 86400 seconds..