last executing test programs: 3m13.991106931s ago: executing program 0 (id=2221): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x65ab, 0x0, 0x83, 0xc, 0x7f, 0x0, 0x54bf, 0xfffffffd], [0x4, 0x0, 0x101, 0xfffffffc, 0x80, 0x1, 0x4, 0x8], [0x2, 0x8, 0x44, 0x2, 0x4, 0x7, 0x6]], '\x00', [{0x0, 0x3}, {0x3}, {0x400}, {0xffffffff, 0x80}, {0x2000008}, {0x2, 0x22c685d5}, {0xf68b, 0xa}, {0xb, 0xfffffff8}, {0xc51}, {0x7334486a}, {0x20000}, {0xffffffff, 0x402}], '\x00', 0x4, 0x0, 0x0, 0x20}) 3m13.91208883s ago: executing program 0 (id=2224): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3m12.655397131s ago: executing program 0 (id=2233): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m12.201683547s ago: executing program 0 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), &(0x7f0000000300)=@sha1={0x1, "8abfd0526424135d0f1244e937c0244956a833aa"}, 0x54, 0x3) 3m11.907186013s ago: executing program 0 (id=2243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x610, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3, 0x8000000}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3m11.571163213s ago: executing program 0 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m55.438471055s ago: executing program 32 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m51.86222448s ago: executing program 4 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m51.594835791s ago: executing program 4 (id=2564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x40}]}, 0x18) 2m51.41186716s ago: executing program 4 (id=2567): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0x1}) 2m51.170722874s ago: executing program 4 (id=2571): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2m50.799148288s ago: executing program 4 (id=2575): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000100", 0x58}], 0x1) 2m50.573127163s ago: executing program 4 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x4000) 2m34.399195276s ago: executing program 33 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x4000) 4.007376848s ago: executing program 1 (id=5057): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000, 0x1}, 0x10}], 0x1}, 0x10) 3.770453221s ago: executing program 1 (id=5060): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 3.580012017s ago: executing program 1 (id=5062): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000680)={0x80, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.282339961s ago: executing program 1 (id=5065): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x5, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) 2.874254952s ago: executing program 1 (id=5069): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4081, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3c0f711662d7b321a8c7bdeace918d0fb74237cc6e446c4e88e78881ce2a52"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.857342742s ago: executing program 6 (id=5070): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r0 = msgget$private(0x0, 0xa4) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/24) 2.414953096s ago: executing program 5 (id=5074): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 2.413659681s ago: executing program 6 (id=5075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x4c80) 2.258206311s ago: executing program 3 (id=5076): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x1b8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 2.201922821s ago: executing program 5 (id=5077): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) 1.994643395s ago: executing program 3 (id=5079): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) 1.742624371s ago: executing program 6 (id=5080): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.666902934s ago: executing program 5 (id=5081): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x401) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"dd7ff7bc", 0xf09b, 0x6, 0x7, 0x10001, 0x4, "785144b84ef7ebe60630484ac7b0c8", "02004900", "cd5ca376", "b4538793", ["1aff03000000000000a7e33f", "000000000000000000f58704", "11430600000800", "ffffd39271af6300"]}) 1.666201512s ago: executing program 3 (id=5082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000009b5bb8324e4791fd00000000000000000000001d00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000100000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 1.494013302s ago: executing program 2 (id=5083): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) 1.381001563s ago: executing program 5 (id=5084): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1.27768317s ago: executing program 3 (id=5085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000100)=0xffffbff6, 0x4) listen(r0, 0x5) 1.235188538s ago: executing program 6 (id=5086): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 1.19304963s ago: executing program 2 (id=5087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}}, 0x20042000) 1.052375334s ago: executing program 5 (id=5088): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 959.560023ms ago: executing program 3 (id=5089): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000000300)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 772.851047ms ago: executing program 2 (id=5090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x6, 0x8}, 0xc) 761.533084ms ago: executing program 5 (id=5091): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3, &(0x7f0000000000)=0x2, 0x3d, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 721.997628ms ago: executing program 3 (id=5092): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x5, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x802, 0xfffb, 0xff7e, 0x8}, 0x0, 0x0}}) 683.04805ms ago: executing program 6 (id=5093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) 559.062707ms ago: executing program 2 (id=5094): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x0, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x20000, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x8000005, 0x0, 0x0, 0x0, 0x7, 0x3, 0xfffffffd, 0x5, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x2000000, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xfffeffff, 0x8007, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x8001, 0xfffffffe, 0x40, 0xf790, 0x40, 0x10000, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x18c, 0x0, 0xfffffffd, 0x4000002, 0x5, 0x0, 0x47, 0x0, 0x100000, 0x1b8, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x6cd7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x420, 0xc, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0xfffffff9, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0xfffffffd, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x2, 0x7fff, 0x9, 0x1d, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x5d66, 0x1, 0x1, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x2, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0xfffffffc, 0x0, 0x5, 0x400, 0x7, 0xc, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5, 0x400]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) 385.168081ms ago: executing program 2 (id=5095): r0 = gettid() sigaltstack(&(0x7f0000000280)={0x0, 0x80000001, 0xffffffffffffffec}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)) 274.729959ms ago: executing program 6 (id=5096): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@getlink={0x20, 0x12, 0x18efde40b3708357, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}}, 0x20}}, 0x20000804) 160.200647ms ago: executing program 2 (id=5097): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x10ffff, 0xffffff88}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) 0s ago: executing program 1 (id=5098): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0xfffffffc}) kernel console output (not intermixed with test programs): 5299][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.555230][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.583216][T12152] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2956'. [ 286.714297][T12134] sit1: left allmulticast mode [ 286.740564][T12134] wireguard0: left allmulticast mode [ 286.823078][T12134] bond2: left promiscuous mode [ 286.936180][T12145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.029270][ T1183] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.088385][ T1183] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.140216][ T1183] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.162239][ T1183] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.370616][ T29] audit: type=1400 audit(1785971539.887:527): avc: denied { write } for pid=12166 comm="syz.5.2963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 287.740722][ T29] audit: type=1400 audit(1785971540.224:528): avc: denied { create } for pid=12187 comm="syz.2.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.798985][ T29] audit: type=1400 audit(1785971540.261:529): avc: denied { ioctl } for pid=12187 comm="syz.2.2973" path="socket:[30860]" dev="sockfs" ino=30860 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.846828][ T5821] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 288.037789][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.077992][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1 [ 288.127179][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.183919][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.247340][ T5821] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.278721][ T5821] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.304503][ T5821] usb 4-1: Manufacturer: syz [ 288.338451][ T5821] usb 4-1: config 0 descriptor?? [ 288.660623][ T5735] usb 4-1: USB disconnect, device number 76 [ 288.715635][T12218] netlink: 'syz.6.2988': attribute type 8 has an invalid length. [ 288.780971][ T29] audit: type=1326 audit(1785971541.206:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.2.2989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 288.852776][ T29] audit: type=1326 audit(1785971541.225:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.2.2989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 288.961158][ T29] audit: type=1326 audit(1785971541.234:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.2.2989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 289.128645][T12232] ip6erspan0: entered allmulticast mode [ 289.419699][T12239] geneve2: entered promiscuous mode [ 289.443614][T12239] geneve2: entered allmulticast mode [ 290.113685][T12271] dlm: no local IP address has been set [ 290.156624][T12271] dlm: cannot start dlm midcomms -107 [ 290.247619][T12278] netlink: 'syz.5.3016': attribute type 1 has an invalid length. [ 290.268166][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 290.268182][ T29] audit: type=1400 audit(1785971542.581:541): avc: denied { associate } for pid=12277 comm="syz.2.3017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.337026][T12278] netlink: 'syz.5.3016': attribute type 2 has an invalid length. [ 291.856963][T12338] netlink: 'syz.5.3045': attribute type 2 has an invalid length. [ 292.007196][T12342] netlink: 'syz.2.3047': attribute type 1 has an invalid length. [ 292.024511][T12342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3047'. [ 292.411142][ T29] audit: type=1400 audit(1785971544.593:542): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 292.526327][T12354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.901953][T12370] ipt_REJECT: ECHOREPLY no longer supported. [ 293.114326][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 293.132526][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 293.188896][T12381] netlink: 'syz.5.3065': attribute type 1 has an invalid length. [ 293.231477][T12381] netlink: 'syz.5.3065': attribute type 3 has an invalid length. [ 293.278755][T12381] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3065'. [ 293.686461][ T5735] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 293.799790][ T29] audit: type=1400 audit(1785971545.893:543): avc: denied { append } for pid=12399 comm="syz.2.3076" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.881983][ T5735] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 293.913173][ T5735] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 293.949081][ T5735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.007907][ T5735] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 294.024713][ T29] audit: type=1400 audit(1785971546.099:544): avc: denied { create } for pid=12403 comm="syz.2.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.092818][ T29] audit: type=1400 audit(1785971546.127:545): avc: denied { setopt } for pid=12403 comm="syz.2.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.437734][ T29] audit: type=1400 audit(1785971546.492:546): avc: denied { getopt } for pid=12411 comm="syz.5.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 294.846429][T12392] syz.1.3070 (12392): drop_caches: 2 [ 295.070760][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.078458][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.187036][ T5735] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 295.213395][ T5735] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 295.240410][ T5735] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 295.255928][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.266632][ T5735] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 295.286582][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.297726][ T5735] usb 7-1: USB disconnect, device number 2 [ 295.545152][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3091'. [ 295.599306][ T1022] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.635165][ T1022] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.660674][ T1022] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.680353][ T1022] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.964860][T12456] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3102'. [ 296.010639][T12456] team0 (unregistering): Port device team_slave_0 removed [ 296.046648][T12456] team0 (unregistering): Port device team_slave_1 removed [ 296.055833][ T29] audit: type=1400 audit(1785971547.989:547): avc: denied { setopt } for pid=12458 comm="syz.3.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.102787][ T5619] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 296.285928][ T29] audit: type=1400 audit(1785971548.223:548): avc: denied { setopt } for pid=12465 comm="syz.5.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.319784][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.348018][ T5619] usb 3-1: not running at top speed; connect to a high speed hub [ 296.388538][ T5619] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 296.422062][ T5619] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 296.476809][ T5619] usb 3-1: string descriptor 0 read error: -22 [ 296.491878][ T5619] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 296.515647][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.566045][ T29] audit: type=1400 audit(1785971548.475:549): avc: denied { name_bind } for pid=12476 comm="syz.6.3114" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 296.685528][ T29] audit: type=1400 audit(1785971548.503:550): avc: denied { node_bind } for pid=12476 comm="syz.6.3114" saddr=fe80::15 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 296.796234][ T29] audit: type=1400 audit(1785971548.625:551): avc: denied { getopt } for pid=12478 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.070217][ T5619] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.070892][T12495] xt_TCPMSS: Only works on TCP SYN packets [ 297.103279][ T5619] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.135120][ T5619] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.335518][ T1170] nvmet: connect request for invalid subsystem te! [ 297.336686][T12497] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 297.357728][ T5619] usb 3-1: USB disconnect, device number 85 [ 297.943741][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.944290][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.557969][T12519] xt_nfacct: accounting object `syz1' does not exist [ 298.689561][T12524] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3137'. [ 298.767914][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.816171][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.540593][ T29] audit: type=1400 audit(1785971551.263:552): avc: denied { read } for pid=12531 comm="syz.2.3141" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.618394][ T1183] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.636714][ T1183] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.687181][ T1183] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.724592][ T1183] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.422258][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3155'. [ 300.869595][T12572] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3160'. [ 301.348805][T12592] netlink: 'syz.1.3170': attribute type 12 has an invalid length. [ 301.820690][ T5623] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 301.993745][ T5623] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 302.020758][ T5623] usb 2-1: config 0 has no interface number 0 [ 302.029057][ T5623] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 302.039605][ T5623] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.054106][ T5623] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 302.074477][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.086414][ T5623] usb 2-1: Product: syz [ 302.104289][ T5623] usb 2-1: Manufacturer: syz [ 302.120922][ T5623] usb 2-1: SerialNumber: syz [ 302.140762][ T5623] usb 2-1: config 0 descriptor?? [ 302.147649][T12600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.162429][ T50] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 302.170959][ T5623] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 302.187958][ T5623] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 302.353682][ T50] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.381232][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.399982][ T50] usb 4-1: Product: syz [ 302.408551][ T50] usb 4-1: Manufacturer: syz [ 302.418943][ T50] usb 4-1: SerialNumber: syz [ 302.428499][ T29] audit: type=1326 audit(1785971553.967:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.6.3186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985499e0d9 code=0x7ffc0000 [ 302.533052][ T29] audit: type=1326 audit(1785971553.967:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.6.3186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985499e0d9 code=0x7ffc0000 [ 302.621502][ T29] audit: type=1326 audit(1785971554.004:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.6.3186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f985499e0d9 code=0x7ffc0000 [ 302.676800][ T50] usb 2-1: USB disconnect, device number 80 [ 302.695886][ T5821] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 302.708243][ T50] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 302.724183][ T29] audit: type=1326 audit(1785971554.004:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.6.3186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985499e0d9 code=0x7ffc0000 [ 302.767185][ T50] cyberjack 2-1:0.69: device disconnected [ 302.843618][ T29] audit: type=1326 audit(1785971554.004:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.6.3186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985499e0d9 code=0x7ffc0000 [ 302.905502][ T29] audit: type=1400 audit(1785971554.135:558): avc: denied { firmware_load } for pid=5821 comm="kworker/1:8" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 303.028588][T12632] netlink: 'syz.5.3190': attribute type 2 has an invalid length. [ 303.108373][T12632] : entered promiscuous mode [ 303.139165][ T29] audit: type=1400 audit(1785971554.631:559): avc: denied { setopt } for pid=12635 comm="syz.6.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.235597][ T50] usb 4-1: USB disconnect, device number 77 [ 303.611575][ T29] audit: type=1400 audit(1785971555.071:560): avc: denied { search } for pid=5278 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.644493][T12650] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3199'. [ 303.695833][ T29] audit: type=1400 audit(1785971555.071:561): avc: denied { search } for pid=5278 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.792543][ T29] audit: type=1400 audit(1785971555.071:562): avc: denied { search } for pid=5278 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.070576][T12661] lo speed is unknown, defaulting to 1000 [ 304.081570][ T5821] usb 4-1: Service connection timeout for: 256 [ 304.108672][ T5821] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 304.136460][T12661] lo speed is unknown, defaulting to 1000 [ 304.146091][ T5821] ath9k_htc: Failed to initialize the device [ 304.160117][ T50] usb 4-1: ath9k_htc: USB layer deinitialized [ 304.175614][T12661] lo speed is unknown, defaulting to 1000 [ 304.632385][T12686] netlink: 'syz.6.3212': attribute type 11 has an invalid length. [ 304.690186][T12686] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.3212'. [ 305.399574][ T5821] lo speed is unknown, defaulting to 1000 [ 305.417024][T12661] infiniband syz2: set down [ 305.470037][T12661] infiniband syz2: added lo [ 305.518591][T12718] tmpfs: Bad value for 'mpol' [ 305.621563][T12661] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 305.710680][T12661] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 305.826252][T12661] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 306.202111][T12661] RDS/IB: syz2: added [ 306.227106][T12661] smc: adding ib device syz2 with port count 1 [ 306.271893][T12661] smc: ib device syz2 port 1 has no pnetid [ 306.301959][ T10] lo speed is unknown, defaulting to 1000 [ 306.331939][T12661] lo speed is unknown, defaulting to 1000 [ 306.680423][T12765] openvswitch: netlink: IP tunnel dst address not specified [ 306.883444][T12771] key id 00000004 not found [ 307.435539][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3250'. [ 307.448374][T12661] lo speed is unknown, defaulting to 1000 [ 308.070579][T12661] lo speed is unknown, defaulting to 1000 [ 308.352347][ T5821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 308.522608][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 308.549178][ T5821] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 308.577745][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 308.596391][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 308.606169][T12661] lo speed is unknown, defaulting to 1000 [ 308.632084][ T5821] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 308.658173][ T5821] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.676697][ T5821] usb 7-1: config 0 has no interface number 0 [ 308.693979][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 308.714533][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 308.736984][ T5821] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.771661][ T5821] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.820132][ T5821] usb 7-1: config 0 interface 125 has no altsetting 0 [ 308.831549][ T5821] usb 7-1: config 0 interface 125 has no altsetting 2 [ 308.849915][ T5821] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 308.870539][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.900404][ T5821] usb 7-1: Product: syz [ 308.914558][ T5821] usb 7-1: Manufacturer: syz [ 308.925308][ T5821] usb 7-1: SerialNumber: syz [ 308.947678][ T5821] usb 7-1: config 0 descriptor?? [ 308.973523][ T5821] usb 7-1: selecting invalid altsetting 2 [ 309.015060][T12831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3272'. [ 309.241522][T12661] lo speed is unknown, defaulting to 1000 [ 309.414715][ C1] usb 7-1: async_complete: urb error -71 [ 309.420484][ C1] usb 7-1: async_complete: urb error -71 [ 309.426210][ C1] usb 7-1: async_complete: urb error -71 [ 309.465622][ T5821] get_1284_register: usb error -71 [ 309.496228][ T5821] usb 7-1: USB disconnect, device number 3 [ 309.586524][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 309.643352][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 310.214703][T12661] lo speed is unknown, defaulting to 1000 [ 310.676822][T12886] netlink: 'syz.5.3299': attribute type 15 has an invalid length. [ 310.713338][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3299'. [ 310.914065][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 310.914082][ T29] audit: type=1400 audit(1785971561.900:592): avc: denied { bind } for pid=12895 comm="syz.5.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 311.045186][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 311.135207][T12661] lo speed is unknown, defaulting to 1000 [ 311.237115][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.269648][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.319209][ T10] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 311.343612][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.369144][ T10] usb 7-1: Product: syz [ 311.384587][ T10] usb 7-1: Manufacturer: syz [ 311.409760][ T10] usb 7-1: SerialNumber: syz [ 311.442172][ T10] usb-storage 7-1:1.0: USB Mass Storage device detected [ 311.482237][ T10] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 311.755081][ T50] usb 7-1: USB disconnect, device number 4 [ 312.434734][ T29] audit: type=1400 audit(1785971563.322:593): avc: denied { connect } for pid=12945 comm="syz.5.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.473507][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 312.966836][T12973] netlink: 'syz.3.3340': attribute type 8 has an invalid length. [ 313.020022][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 313.068107][T12975] ipt_ECN: cannot use operation on non-tcp rule [ 313.323047][T12992] ipt_rpfilter: unknown options [ 313.467157][T12989] nvme_fabrics: missing parameter 'traddr=%s' [ 313.522614][ T29] audit: type=1400 audit(1785971564.342:594): avc: denied { read } for pid=12997 comm="syz.6.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 313.962973][T13002] 8021q: adding VLAN 0 to HW filter on device .` [ 314.017135][T13002] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.056544][T13002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.191766][T13002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.219633][T13002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.247883][T13002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.288739][T13002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.347013][T13002] veth1_vlan: left promiscuous mode [ 314.376917][T13002] veth0_vlan: left promiscuous mode [ 314.396100][T13002] veth0_vlan: entered promiscuous mode [ 314.420964][T13002] veth1_vlan: entered promiscuous mode [ 314.458274][T13002] veth1_macvtap: left promiscuous mode [ 314.481668][T13002] veth0_macvtap: left promiscuous mode [ 314.523182][T13002] veth0_macvtap: entered promiscuous mode [ 314.545294][T13002] veth1_macvtap: entered promiscuous mode [ 314.547800][T13020] openvswitch: netlink: IPv4 tunnel dst address is zero [ 314.574594][T13002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.592528][T13002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.614313][T13002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.758515][T13002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.900774][T13002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.937275][ T1183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.967488][T13005] syz.5.3356 (13005): drop_caches: 2 [ 314.979840][T13013] vlan0: entered promiscuous mode [ 314.989616][ T1183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.009544][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.016708][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.085215][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.092390][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.251888][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 315.334772][T13032] sit0: entered promiscuous mode [ 315.374933][T13032] netlink: 'syz.3.3366': attribute type 1 has an invalid length. [ 315.423212][T13032] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3366'. [ 315.535610][ T29] audit: type=1400 audit(1785971566.222:595): avc: denied { read write } for pid=13037 comm="syz.5.3371" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 315.635418][ T29] audit: type=1400 audit(1785971566.222:596): avc: denied { open } for pid=13037 comm="syz.5.3371" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 315.968231][T13051] SET target dimension over the limit! [ 315.975334][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.013885][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.037688][ T1022] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 316.190893][ T29] audit: type=1400 audit(1785971566.839:597): avc: denied { create } for pid=13059 comm="syz.1.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.281695][ T29] audit: type=1400 audit(1785971566.849:598): avc: denied { getopt } for pid=13059 comm="syz.1.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.696020][T13078] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 318.013142][T13126] openvswitch: netlink: IPv4 tun info is not correct [ 318.454864][ T5623] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 318.590054][T13101] syz.6.3401 (13101): drop_caches: 2 [ 318.638858][ T5623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.693719][ T5623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 318.738096][ T5623] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 318.799702][ T5623] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 318.857126][ T5623] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 318.918472][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.925105][T13154] bond1: option lp_interval: invalid value (0) [ 318.933090][T13154] bond1: option lp_interval: allowed values 1 - 2147483647 [ 318.964000][T13154] bond1 (unregistering): Released all slaves [ 318.990670][T13132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.054524][ T5623] hub 2-1:1.0: bad descriptor, ignoring hub [ 319.090872][ T5623] hub 2-1:1.0: probe with driver hub failed with error -5 [ 319.131403][ T5623] cdc_wdm 2-1:1.0: skipping garbage [ 319.163199][ T5623] cdc_wdm 2-1:1.0: skipping garbage [ 319.195595][ T5623] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 319.268626][ T5623] usb 2-1: USB disconnect, device number 81 [ 319.582366][ T29] audit: type=1400 audit(1785971570.011:599): avc: denied { ioctl } for pid=13182 comm="syz.2.3437" path="socket:[34150]" dev="sockfs" ino=34150 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.704437][ T29] audit: type=1400 audit(1785971570.076:600): avc: denied { write } for pid=13145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.967463][ T29] audit: type=1400 audit(1785971570.376:601): avc: denied { write } for pid=13194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.180150][ T29] audit: type=1400 audit(1785971570.572:602): avc: denied { accept } for pid=13208 comm="syz.1.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.318236][ T29] audit: type=1400 audit(1785971570.694:603): avc: denied { write } for pid=13212 comm="syz.2.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 320.363672][T13205] block device autoloading is deprecated and will be removed. [ 320.409198][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 320.412049][T13220] netlink: 'syz.1.3452': attribute type 10 has an invalid length. [ 320.999425][ T29] audit: type=1400 audit(1785971571.339:604): avc: denied { write } for pid=13240 comm="syz.5.3461" path="socket:[34284]" dev="sockfs" ino=34284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.186632][ T29] audit: type=1400 audit(1785971571.395:605): avc: denied { name_bind } for pid=13242 comm="syz.1.3462" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 321.288074][T13252] vlan0: entered promiscuous mode [ 321.437714][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3467'. [ 321.643484][ T29] audit: type=1400 audit(1785971571.938:606): avc: denied { write } for pid=13216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.992742][T13251] syz.2.3463 (13251): drop_caches: 2 [ 322.142376][ T29] audit: type=1400 audit(1785971572.406:607): avc: denied { load_policy } for pid=13280 comm="syz.1.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 322.177574][T13282] SELinux: policydb version -1638572903 does not match my version range 15-35 [ 322.234607][T13282] SELinux: failed to load policy [ 322.296050][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 322.323693][ T5623] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 322.354148][ T29] audit: type=1400 audit(1785971572.602:608): avc: denied { write } for pid=13281 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.565909][ T5623] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 322.609344][ T5623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.649899][ T5623] usb 6-1: Product: syz [ 322.666930][ T5623] usb 6-1: Manufacturer: syz [ 322.686794][ T5623] usb 6-1: SerialNumber: syz [ 322.706322][ T5623] usb 6-1: config 0 descriptor?? [ 322.737187][ T5623] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 004 [ 323.050979][T13310] CIFS mount error: No usable UNC path provided in device string! [ 323.050979][T13310] [ 323.082919][T13310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.212970][ T5623] (null): failure reading functionality [ 323.257180][ T5623] i2c i2c-1: failure reading functionality [ 323.302721][ T5623] i2c i2c-1: connected i2c-tiny-usb device [ 323.350678][ T5623] usb 6-1: USB disconnect, device number 4 [ 324.057912][T13344] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 324.152600][T13342] lo speed is unknown, defaulting to 1000 [ 324.460606][ T5742] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 324.520028][T13350] bond3: option lp_interval: invalid value (0) [ 324.547051][T13350] bond3: option lp_interval: allowed values 1 - 2147483647 [ 324.578299][T13350] bond3 (unregistering): Released all slaves [ 324.644068][ T5742] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.669664][ T5742] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 324.690888][ T5742] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 324.723260][ T5742] usb 6-1: Manufacturer: syz [ 324.740317][ T5742] usb 6-1: SerialNumber: syz [ 325.001767][ T5742] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 325.044043][ T5742] usb 6-1: USB disconnect, device number 5 [ 325.340978][T13372] ipt_REJECT: TCP_RESET invalid for non-tcp [ 325.460035][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.586116][ T29] audit: type=1400 audit(1785971575.633:609): avc: denied { read } for pid=13377 comm="syz.2.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 325.727851][ T29] audit: type=1400 audit(1785971575.764:610): avc: denied { append } for pid=13381 comm="syz.6.3523" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 325.977603][ T29] audit: type=1400 audit(1785971575.989:611): avc: denied { create } for pid=13389 comm="syz.1.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 326.137642][T13394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3529'. [ 326.897302][ T29] audit: type=1400 audit(1785971576.036:612): avc: denied { bind } for pid=13389 comm="syz.1.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 327.160404][T13404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.239914][T13404] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.276280][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.282429][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.471551][T13404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.503961][T13404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.516006][T13404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.526837][T13404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.573067][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.604557][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.622696][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.638659][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.650130][T13404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 327.663496][T13404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.695386][T13404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.715809][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.723288][ T5623] lo speed is unknown, defaulting to 1000 [ 327.749566][ T5623] syz2: Port: 1 Link ACTIVE [ 327.821201][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.828407][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.851538][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.858743][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.113716][ T50] lo speed is unknown, defaulting to 1000 [ 328.126757][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.172586][ T1022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.234100][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.297732][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 328.411332][T13430] openvswitch: netlink: Duplicate or invalid key (type 0). [ 328.471465][ T5821] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 328.495630][ T5821] usb 7-1: config 1 has no interface number 0 [ 328.526057][ T5821] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 328.587042][ T5821] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 328.608763][ T5821] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.643778][ T5821] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 328.659675][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.698189][ T5821] usb 7-1: Product: syz [ 328.719877][ T5821] usb 7-1: Manufacturer: syz [ 328.738159][ T5821] usb 7-1: SerialNumber: syz [ 328.775102][T13420] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 328.875126][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 328.975324][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3558'. [ 328.993075][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 329.060783][T13454] lo speed is unknown, defaulting to 1000 [ 329.246388][ T5821] usb 7-1: Error in usbnet_get_endpoints (-71) [ 329.297840][ T5821] usb 7-1: USB disconnect, device number 5 [ 329.511657][T13460] bond1: option lp_interval: invalid value (0) [ 329.526942][T13460] bond1: option lp_interval: allowed values 1 - 2147483647 [ 329.610171][T13460] bond1 (unregistering): Released all slaves [ 329.656533][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3563'. [ 330.105198][T13471] netlink: 'syz.1.3564': attribute type 3 has an invalid length. [ 330.185593][T13471] netlink: 'syz.1.3564': attribute type 1 has an invalid length. [ 330.248961][T13471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3564'. [ 330.297827][T13471] NCSI netlink: No device for ifindex 511 [ 331.053847][ T29] audit: type=1400 audit(1785971580.741:613): avc: denied { read } for pid=13500 comm="syz.6.3581" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 331.110803][ T29] audit: type=1400 audit(1785971580.741:614): avc: denied { open } for pid=13500 comm="syz.6.3581" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 331.178306][ T29] audit: type=1400 audit(1785971580.769:615): avc: denied { ioctl } for pid=13500 comm="syz.6.3581" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 331.417278][ T29] audit: type=1400 audit(1785971581.078:616): avc: denied { read write } for pid=13517 comm="syz.2.3587" name="sg0" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 331.796032][ T29] audit: type=1400 audit(1785971581.115:617): avc: denied { open } for pid=13517 comm="syz.2.3587" path="/dev/sg0" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 331.896334][ T29] audit: type=1400 audit(1785971581.527:618): avc: denied { write } for pid=13502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.176915][T13545] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 332.227846][ T29] audit: type=1400 audit(1785971581.845:619): avc: denied { write } for pid=13543 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.419227][T13547] lo speed is unknown, defaulting to 1000 [ 333.417742][ T29] audit: type=1400 audit(1785971582.949:620): avc: denied { bind } for pid=13578 comm="syz.3.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 333.692921][T13588] xt_time: unknown flags 0xc [ 333.914516][T13598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13598 comm=syz.3.3618 [ 333.959235][T13594] lo speed is unknown, defaulting to 1000 [ 334.238998][T13608] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3621'. [ 334.271264][T13608] 0·: renamed from hsr0 (while UP) [ 334.322284][T13608] 0·: entered allmulticast mode [ 334.340055][T13608] hsr_slave_0: entered allmulticast mode [ 334.357883][T13608] hsr_slave_1: entered allmulticast mode [ 334.369544][T13608] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 334.825852][T13614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.855214][T13614] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.918285][T13614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.103717][T13614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.115120][T13614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.133383][T13614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.144423][T13614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.163611][T13614] veth1_vlan: left promiscuous mode [ 335.171283][T13614] veth0_vlan: left promiscuous mode [ 335.178400][T13614] veth0_vlan: entered promiscuous mode [ 335.186774][T13614] veth1_vlan: entered promiscuous mode [ 335.207737][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.220755][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.231521][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.242406][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.262491][T13614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.309016][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.317954][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.360242][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.367407][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.760190][ T1022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.818037][ T1022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.908617][ T74] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.917378][ T74] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.993374][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3643'. [ 336.012184][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 336.107836][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 336.479490][ T5623] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 336.681311][ T5623] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 336.717445][ T5623] usb 6-1: config 0 has no interface number 0 [ 336.746301][ T5623] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 336.759241][T13678] netlink: 'syz.6.3657': attribute type 12 has an invalid length. [ 336.790357][ T5623] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.796141][T13678] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3657'. [ 336.846130][ T5623] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 336.889221][ T5623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.928274][ T5623] usb 6-1: Product: syz [ 336.954955][ T5623] usb 6-1: Manufacturer: syz [ 336.977635][ T5623] usb 6-1: SerialNumber: syz [ 337.011427][ T5623] usb 6-1: config 0 descriptor?? [ 337.028865][T13656] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 337.070524][ T5623] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 337.145875][ T5623] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 337.251442][T13690] syz.2.3663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.383360][T13690] CPU: 1 UID: 0 PID: 13690 Comm: syz.2.3663 Not tainted syzkaller #0 PREEMPT(full) [ 337.383396][T13690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.383413][T13690] Call Trace: [ 337.383422][T13690] [ 337.383432][T13690] dump_stack_lvl+0x100/0x190 [ 337.383472][T13690] warn_alloc.cold+0x94/0xa8 [ 337.383496][T13690] ? __pfx_warn_alloc+0x10/0x10 [ 337.383525][T13690] ? kasan_save_stack+0x3f/0x50 [ 337.383555][T13690] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 337.383589][T13690] ? xskq_create+0x52/0x1d0 [ 337.383613][T13690] ? xsk_setsockopt+0x743/0xab0 [ 337.383641][T13690] ? do_sock_setsockopt+0xf3/0x1d0 [ 337.383674][T13690] ? __sys_setsockopt+0x195/0x220 [ 337.383703][T13690] ? __x64_sys_setsockopt+0xbd/0x160 [ 337.383731][T13690] ? do_syscall_64+0x115/0x870 [ 337.383759][T13690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.383788][T13690] ? xskq_create+0xfb/0x1d0 [ 337.383813][T13690] __vmalloc_node_range_noprof+0x136c/0x1630 [ 337.383858][T13690] ? xskq_create+0xfb/0x1d0 [ 337.383889][T13690] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.383928][T13690] ? kasan_save_track+0x14/0x30 [ 337.383954][T13690] ? __kasan_kmalloc+0xaa/0xb0 [ 337.383982][T13690] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 337.384018][T13690] ? xskq_create+0xfb/0x1d0 [ 337.384042][T13690] vmalloc_user_noprof+0x9e/0xe0 [ 337.384075][T13690] ? xskq_create+0xfb/0x1d0 [ 337.384101][T13690] xskq_create+0xfb/0x1d0 [ 337.384128][T13690] xsk_setsockopt+0x743/0xab0 [ 337.384154][T13690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.384178][T13690] ? find_held_lock+0x2b/0x80 [ 337.384200][T13690] ? __fget_files+0x215/0x3d0 [ 337.384230][T13690] ? selinux_socket_setsockopt+0x6a/0x80 [ 337.384265][T13690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.384292][T13690] do_sock_setsockopt+0xf3/0x1d0 [ 337.384330][T13690] __sys_setsockopt+0x195/0x220 [ 337.384367][T13690] __x64_sys_setsockopt+0xbd/0x160 [ 337.384395][T13690] ? do_syscall_64+0x90/0x870 [ 337.384423][T13690] ? lockdep_hardirqs_on+0x78/0x100 [ 337.384451][T13690] do_syscall_64+0x115/0x870 [ 337.384479][T13690] ? clear_bhb_loop+0x40/0x90 [ 337.384508][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.384532][T13690] RIP: 0033:0x7fa9ab99e0d9 [ 337.384559][T13690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.384583][T13690] RSP: 002b:00007fa9ac852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.384609][T13690] RAX: ffffffffffffffda RBX: 00007fa9abc25fa0 RCX: 00007fa9ab99e0d9 [ 337.384633][T13690] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 337.384648][T13690] RBP: 00007fa9aba35024 R08: 0000000000000029 R09: 0000000000000000 [ 337.384664][T13690] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.384680][T13690] R13: 00007fa9abc26038 R14: 00007fa9abc25fa0 R15: 00007ffec6449f98 [ 337.384714][T13690] [ 337.802374][T13690] Mem-Info: [ 337.829673][T13690] active_anon:12217 inactive_anon:2 isolated_anon:0 [ 337.829673][T13690] active_file:5 inactive_file:49370 isolated_file:0 [ 337.829673][T13690] unevictable:768 dirty:438 writeback:0 [ 337.829673][T13690] slab_reclaimable:7959 slab_unreclaimable:107004 [ 337.829673][T13690] mapped:40891 shmem:1288 pagetables:1453 [ 337.829673][T13690] sec_pagetables:0 bounce:0 [ 337.829673][T13690] kernel_misc_reclaimable:0 [ 337.829673][T13690] free:1272096 free_pcp:12139 free_cma:0 [ 337.909447][ T29] audit: type=1400 audit(1785971587.112:621): avc: denied { ioctl } for pid=13695 comm="syz.1.3665" path="socket:[35280]" dev="sockfs" ino=35280 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.911240][T13690] Node 0 active_anon:48968kB inactive_anon:8kB active_file:20kB inactive_file:197104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163544kB dirty:1752kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13368kB pagetables:5776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 338.003721][T13690] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 338.110526][T13690] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.144743][ T5623] usb 6-1: USB disconnect, device number 6 [ 338.168774][ T5623] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 338.181819][T13690] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 338.200434][ T5623] cyberjack 6-1:0.69: device disconnected [ 338.237979][T13690] Node 0 DMA32 free:1129496kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48880kB inactive_anon:8kB active_file:20kB inactive_file:197100kB unevictable:1536kB writepending:1776kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:43668kB local_pcp:22768kB free_cma:0kB [ 338.350622][T13690] lowmem_reserve[]: 0 0 0 0 0 [ 338.374943][T13690] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.431370][T13690] lowmem_reserve[]: 0 0 0 0 0 [ 338.441428][T13690] Node 1 Normal free:3946460kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:376kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 338.487914][T13690] lowmem_reserve[]: 0 0 0 0 0 [ 338.492715][T13690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.506179][T13690] Node 0 DMA32: 1254*4kB (UM) 612*8kB (UME) 428*16kB (UME) 314*32kB (UME) 134*64kB (UME) 96*128kB (UME) 90*256kB (UME) 75*512kB (UME) 42*1024kB (UME) 29*2048kB (UME) 224*4096kB (UM) = 1129016kB [ 338.529471][T13690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.546500][T13690] Node 1 Normal: 1*4kB (U) 3*8kB (U) 10*16kB (UM) 11*32kB (U) 7*64kB (UM) 4*128kB (U) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946460kB [ 338.564617][T13690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.574347][T13690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.583913][T13690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.593525][T13690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.619679][T13690] 50661 total pagecache pages [ 338.632573][T13690] 0 pages in swap cache [ 338.640860][T13690] Free swap = 124996kB [ 338.654188][T13690] Total swap = 124996kB [ 338.664978][T13690] 2097051 pages RAM [ 338.681458][T13690] 0 pages HighMem/MovableOnly [ 338.763976][T13690] 432306 pages reserved [ 338.777633][T13690] 0 pages cma reserved [ 339.301818][ T29] audit: type=1400 audit(1785971588.450:622): avc: denied { read append } for pid=13733 comm="syz.1.3684" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 339.806196][T13748] bond4: entered promiscuous mode [ 339.853566][T13748] bond4: entered allmulticast mode [ 339.865253][T13748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.584614][ T29] audit: type=1400 audit(1785971589.657:623): avc: denied { setcurrent } for pid=13784 comm="syz.5.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 340.659525][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3709'. [ 340.691386][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3709'. [ 340.842503][T13795] xt_TCPMSS: Only works on TCP SYN packets [ 341.556437][ T29] audit: type=1400 audit(1785971590.573:624): avc: denied { open } for pid=13821 comm="syz.3.3727" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 341.642628][T13825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.649939][T13825] IPv6: NLM_F_CREATE should be set when creating new route [ 341.657217][T13825] IPv6: NLM_F_CREATE should be set when creating new route [ 341.741920][ T29] audit: type=1400 audit(1785971590.611:625): avc: denied { ioctl } for pid=13821 comm="syz.3.3727" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 341.815452][T13827] xt_socket: unknown flags 0x58 [ 343.364791][ T29] audit: type=1400 audit(1785971592.267:626): avc: denied { read write } for pid=11796 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.474706][ T29] audit: type=1400 audit(1785971592.267:627): avc: denied { open } for pid=11796 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.574321][ T29] audit: type=1400 audit(1785971592.267:628): avc: denied { ioctl } for pid=11796 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.683235][ T29] audit: type=1400 audit(1785971592.323:629): avc: denied { create } for pid=13881 comm="syz.3.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 343.782237][ T29] audit: type=1400 audit(1785971592.332:630): avc: denied { bind } for pid=13881 comm="syz.3.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.079282][ T29] audit: type=1400 audit(1785971592.922:631): avc: denied { map_create } for pid=13898 comm="syz.1.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 344.217246][T13902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.245626][ T29] audit: type=1400 audit(1785971592.922:632): avc: denied { map_read map_write } for pid=13898 comm="syz.1.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 344.403926][ T29] audit: type=1400 audit(1785971593.053:633): avc: denied { read write } for pid=13900 comm="syz.5.3764" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.603360][ T29] audit: type=1400 audit(1785971593.053:634): avc: denied { open } for pid=13900 comm="syz.5.3764" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.756461][ T29] audit: type=1400 audit(1785971593.081:635): avc: denied { create } for pid=13903 comm="syz.2.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.160503][T13932] xt_hashlimit: size too large, truncated to 1048576 [ 345.295305][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 346.096684][T13973] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 346.558037][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3805'. [ 347.439933][ T5629] Bluetooth: hci3: unexpected event for opcode 0x203d [ 347.817473][ T5619] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 348.011337][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 348.035353][ T5619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.062136][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 348.072418][ T5619] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 348.121986][ T5619] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 348.147530][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.167364][ T5619] usb 2-1: Product: syz [ 348.185412][ T5619] usb 2-1: Manufacturer: syz [ 348.211792][ T5619] usb 2-1: SerialNumber: syz [ 348.267606][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.290211][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.324080][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 348.349986][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.666834][ T5619] usb 2-1: Limiting number of CPorts to U8_MAX [ 348.685391][T14076] ip6t_REJECT: ECHOREPLY is not supported [ 348.692382][ T5619] usb 2-1: Not enough endpoints found in device, aborting! [ 348.814528][ T5619] usb 2-1: USB disconnect, device number 82 [ 348.924107][ T5714] usb 4-1: USB disconnect, device number 78 [ 349.187947][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 349.187965][ T29] audit: type=1400 audit(1785971597.711:776): avc: denied { prog_load } for pid=14091 comm="syz.6.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.270708][ T29] audit: type=1400 audit(1785971597.740:777): avc: denied { bpf } for pid=14091 comm="syz.6.3851" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.313343][ T29] audit: type=1400 audit(1785971597.740:778): avc: denied { perfmon } for pid=14091 comm="syz.6.3851" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.313630][T14094] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3853'. [ 349.336720][ T29] audit: type=1400 audit(1785971597.740:779): avc: denied { prog_run } for pid=14091 comm="syz.6.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.384405][ T29] audit: type=1400 audit(1785971597.889:780): avc: denied { getopt } for pid=14095 comm="syz.6.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.681227][ T29] audit: type=1400 audit(1785971598.170:781): avc: denied { write } for pid=14105 comm="syz.5.3855" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.719372][T14104] Cannot find add_set index 0 as target [ 349.970175][ T29] audit: type=1400 audit(1785971598.441:782): avc: denied { read } for pid=14111 comm="syz.5.3861" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.019594][T14114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3862'. [ 350.162947][ T29] audit: type=1400 audit(1785971598.469:783): avc: denied { open } for pid=14111 comm="syz.5.3861" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.303698][ T29] audit: type=1400 audit(1785971598.469:784): avc: denied { create } for pid=14112 comm="syz.2.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 350.469504][ T29] audit: type=1400 audit(1785971598.488:785): avc: denied { write } for pid=14112 comm="syz.2.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 351.358122][T14161] ieee802154 phy1 wpan1: encryption failed: -90 [ 351.832606][T14172] bond4: option xmit_hash_policy: invalid value (6) [ 351.898743][T14172] bond4 (unregistering): Released all slaves [ 352.451632][T14199] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 352.595566][T14203] Cannot find add_set index 0 as target [ 353.125312][T14225] bond1: Removing last ns target with arp_interval on [ 353.970226][T14256] vti1: entered promiscuous mode [ 354.221092][T14265] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 354.273928][T14265] netlink: 'syz.1.3936': attribute type 2 has an invalid length. [ 354.414406][T14272] netlink: Unknown conntrack attr (type=12, max=9) [ 354.463122][T14272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.545908][T14279] xt_NFQUEUE: number of total queues is 0 [ 354.704628][T14282] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3945'. [ 354.743751][T14286] xt_policy: output policy not valid in PREROUTING and INPUT [ 354.980775][T14298] netlink: 29 bytes leftover after parsing attributes in process `syz.2.3952'. [ 355.000281][ T10] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 355.031509][T14298] netlink: 29 bytes leftover after parsing attributes in process `syz.2.3952'. [ 355.175666][T14304] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3956'. [ 355.199441][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 355.199460][ T29] audit: type=1400 audit(1785971603.334:805): avc: denied { read } for pid=14301 comm="syz.1.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.253793][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.306731][ T10] usb 4-1: config 8 has an invalid interface number: 254 but max is 0 [ 355.331118][ T10] usb 4-1: config 8 has no interface number 0 [ 355.349150][ T10] usb 4-1: config 8 interface 254 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 355.380927][ T10] usb 4-1: config 8 interface 254 altsetting 17 endpoint 0x85 is Bulk; changing to Interrupt [ 355.416847][ T10] usb 4-1: config 8 interface 254 has no altsetting 0 [ 355.448797][ T10] usb 4-1: string descriptor 0 read error: -22 [ 355.465300][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=c8.b9 [ 355.485212][T14313] xt_hashlimit: size too large, truncated to 1048576 [ 355.499273][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.510954][T14313] xt_hashlimit: max too large, truncated to 1048576 [ 355.534326][T14285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.585063][ T10] mct_u232 4-1:8.254: MCT U232 converter detected [ 355.619449][ T35] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.620636][ T10] mct_u232 ttyUSB0: expected endpoint missing [ 355.972608][ T29] audit: type=1400 audit(1785971604.064:806): avc: denied { create } for pid=14284 comm="syz.3.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 356.070145][ T29] audit: type=1400 audit(1785971604.148:807): avc: denied { module_request } for pid=14333 comm="syz.2.3971" kmod="arpt_HL" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 356.097176][ T5714] usb 4-1: USB disconnect, device number 79 [ 356.112129][T14336] unsupported nla_type 65535 [ 356.124670][ T5714] mct_u232 4-1:8.254: device disconnected [ 356.324013][ T29] audit: type=1400 audit(1785971604.382:808): avc: denied { ioctl } for pid=14338 comm="syz.1.3974" path="cgroup:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 356.463829][ T29] audit: type=1400 audit(1785971604.438:809): avc: denied { write } for pid=14342 comm="syz.5.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 356.538956][T14347] No such timeout policy "syz1" [ 356.653111][T14353] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 356.865132][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.459833][T14376] --map-set only usable from mangle table [ 357.754536][ T29] audit: type=1400 audit(1785971605.710:810): avc: denied { getopt } for pid=14382 comm="syz.5.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 357.780512][T14384] bridge0: port 3(team_slave_1) entered blocking state [ 357.789059][T14384] bridge0: port 3(team_slave_1) entered disabled state [ 357.799195][T14384] team_slave_1: entered allmulticast mode [ 357.871520][T14384] team_slave_1: entered promiscuous mode [ 358.656245][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4011'. [ 359.558619][ T29] audit: type=1400 audit(1785971607.413:811): avc: denied { append } for pid=14450 comm="syz.1.4027" name="v4l-subdev6" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.287445][ T29] audit: type=1400 audit(1785971608.096:812): avc: denied { ioctl } for pid=14477 comm="syz.6.4040" path="socket:[36755]" dev="sockfs" ino=36755 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.841873][T14506] netlink: 1988 bytes leftover after parsing attributes in process `syz.5.4054'. [ 361.261416][ T29] audit: type=1400 audit(1785971609.003:813): avc: denied { sys_module } for pid=14512 comm="syz.5.4058" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 361.599048][T14526] kAFS: unable to lookup cell '(,c¾û/' [ 362.052135][ T29] audit: type=1400 audit(2000000000.645:814): avc: denied { read } for pid=14536 comm="syz.2.4067" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.099786][T14534] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 362.166660][ T29] audit: type=1400 audit(2000000000.645:815): avc: denied { open } for pid=14536 comm="syz.2.4067" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.288972][ T29] audit: type=1400 audit(2000000000.682:816): avc: denied { ioctl } for pid=14536 comm="syz.2.4067" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.388168][T14545] netlink: 'syz.5.4072': attribute type 6 has an invalid length. [ 362.486674][T14545] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.528741][ T29] audit: type=1326 audit(2000000001.094:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 362.661031][ T29] audit: type=1326 audit(2000000001.094:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 362.782863][T14559] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4078'. [ 362.811989][ T29] audit: type=1326 audit(2000000001.094:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 362.812040][ T29] audit: type=1326 audit(2000000001.094:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 362.812086][ T29] audit: type=1326 audit(2000000001.094:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 362.812130][ T29] audit: type=1326 audit(2000000001.094:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.2.4074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 364.652514][ T5714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 364.723802][T14627] netdevsim netdevsim1: Direct firmware load for . [ 364.723802][T14627] failed with error -2 [ 364.781076][T14627] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 364.781076][T14627] [ 364.844719][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 364.863202][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.871741][T14635] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 364.893608][ T5714] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.914964][ T5714] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 364.949014][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.977538][ T5714] usb 6-1: Product: syz [ 364.989885][ T5714] usb 6-1: Manufacturer: syz [ 365.002196][ T5714] usb 6-1: SerialNumber: syz [ 365.016000][ T5714] usb 6-1: config 0 descriptor?? [ 365.566255][ T5742] usb 6-1: USB disconnect, device number 7 [ 365.811470][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 366.095161][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4135'. [ 366.118866][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4135'. [ 366.201012][T14678] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 366.262767][T14678] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 366.304924][T14682] openvswitch: netlink: IPv4 tunnel dst address is zero [ 366.457726][T14688] netlink: 'syz.2.4141': attribute type 8 has an invalid length. [ 367.002933][T14709] trusted_key: encrypted_key: master key parameter is missing [ 367.015904][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 367.015920][ T29] audit: type=1400 audit(2000000005.275:833): avc: denied { create } for pid=14705 comm="syz.3.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 367.163411][ T29] audit: type=1400 audit(2000000005.322:834): avc: denied { write } for pid=14705 comm="syz.3.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 367.626622][T14731] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4162'. [ 367.992484][T14748] netlink: 57 bytes leftover after parsing attributes in process `syz.5.4170'. [ 368.446451][T14765] xt_ecn: cannot match TCP bits for non-tcp packets [ 368.836364][ T29] audit: type=1400 audit(2000000006.987:835): avc: denied { read write } for pid=14781 comm="syz.6.4189" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 368.954782][ T29] audit: type=1400 audit(2000000007.024:836): avc: denied { open } for pid=14781 comm="syz.6.4189" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.074892][ T29] audit: type=1400 audit(2000000007.024:837): avc: denied { ioctl } for pid=14781 comm="syz.6.4189" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x9441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.189630][ T29] audit: type=1400 audit(2000000007.277:838): avc: denied { setopt } for pid=14796 comm="syz.1.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.377517][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 369.509312][ T29] audit: type=1400 audit(2000000007.623:839): avc: denied { read write } for pid=14812 comm="syz.1.4203" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.580726][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.604332][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.641537][ T29] audit: type=1400 audit(2000000007.623:840): avc: denied { open } for pid=14812 comm="syz.1.4203" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.675179][ T5821] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 369.695536][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.012764][ T29] audit: type=1400 audit(2000000008.091:841): avc: denied { create } for pid=14826 comm="syz.5.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.125222][ T29] audit: type=1400 audit(2000000008.128:842): avc: denied { setopt } for pid=14826 comm="syz.5.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.179387][ T5821] usb 7-1: USB disconnect, device number 6 [ 370.811640][ T5619] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 370.908881][T14859] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4226'. [ 371.004956][ T5619] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 371.004988][ T5619] usb 2-1: config 0 has no interface number 0 [ 371.005201][ T5619] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 371.005232][ T5619] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 371.012505][ T5619] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 371.012538][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.012561][ T5619] usb 2-1: Product: syz [ 371.012578][ T5619] usb 2-1: Manufacturer: syz [ 371.012597][ T5619] usb 2-1: SerialNumber: syz [ 371.026777][ T5619] usb 2-1: config 0 descriptor?? [ 371.262976][ T5619] radio-si470x 2-1:0.35: this is not a si470x device. [ 372.020447][ T5619] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 372.030499][ T5619] usb 2-1: USB disconnect, device number 83 [ 372.148040][T14891] netlink: 'syz.3.4242': attribute type 11 has an invalid length. [ 372.203779][T14894] SELinux: policydb string length 63752 does not match expected length 8 [ 372.203837][T14894] SELinux: failed to load policy [ 372.207085][T14895] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4243'. [ 372.443585][T14903] xt_cgroup: invalid path, errno=-2 [ 373.224441][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 373.224463][ T29] audit: type=1400 audit(2000000011.093:845): avc: denied { ioctl } for pid=14920 comm="syz.2.4257" path="socket:[39177]" dev="sockfs" ino=39177 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.379874][ T29] audit: type=1400 audit(2000000011.243:846): avc: denied { create } for pid=14925 comm="syz.2.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.478787][ T29] audit: type=1400 audit(2000000011.280:847): avc: denied { setopt } for pid=14925 comm="syz.2.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.832337][T14947] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4269'. [ 373.871533][T14947] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4269'. [ 374.058140][T14951] wireguard0: entered promiscuous mode [ 374.101316][T14951] wireguard0: entered allmulticast mode [ 374.354468][T14968] dummy0: entered promiscuous mode [ 374.367023][T14968] dummy0: entered allmulticast mode [ 374.510572][T14972] SET target dimension over the limit! [ 374.531265][T14974] bond0: Error: CAN devices cannot be enslaved [ 374.797478][T14986] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 375.200154][ T29] audit: type=1400 audit(2000000012.936:848): avc: denied { create } for pid=15004 comm="syz.6.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.302740][ T29] audit: type=1400 audit(2000000012.964:849): avc: denied { setopt } for pid=15004 comm="syz.6.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.873284][T15031] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 376.777439][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 377.309475][T15078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.167093][ T5619] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 378.370295][ T5619] usb 6-1: Using ep0 maxpacket: 16 [ 378.434835][ T29] audit: type=1400 audit(2000000015.967:850): avc: denied { create } for pid=15127 comm="syz.1.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 378.545296][ T29] audit: type=1400 audit(2000000016.004:851): avc: denied { connect } for pid=15127 comm="syz.1.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 378.705865][T15136] netlink: 'syz.6.4360': attribute type 1 has an invalid length. [ 378.753405][ T5619] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.758253][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4360'. [ 378.772884][ T5619] usb 6-1: config 7 has an invalid interface number: 161 but max is 0 [ 378.795954][ T5619] usb 6-1: config 7 has no interface number 0 [ 378.806571][ T5619] usb 6-1: config 7 interface 161 has no altsetting 0 [ 378.835041][ T5619] usb 6-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice=8f.93 [ 378.854913][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.879839][ T5619] usb 6-1: Product: syz [ 378.893935][ T5619] usb 6-1: Manufacturer: syz [ 378.906247][ T5619] usb 6-1: SerialNumber: syz [ 378.977908][T15143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4364'. [ 379.211038][ T5619] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610 [ 379.228464][ T5619] gspca_sn9c20x: Write register 1000 failed -71 [ 379.247573][ T5619] gspca_sn9c20x: Device initialization failed [ 379.260713][T15157] xt_TPROXY: Can be used only with -p tcp or -p udp [ 379.287672][ T5619] gspca_sn9c20x 6-1:7.161: probe with driver gspca_sn9c20x failed with error -71 [ 379.308412][ T5619] usb 6-1: USB disconnect, device number 8 [ 379.460205][ T29] audit: type=1400 audit(2000000016.930:852): avc: denied { getopt } for pid=15159 comm="syz.6.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.818480][T15173] netlink: 'syz.3.4379': attribute type 2 has an invalid length. [ 380.115009][T15183] netlink: 'syz.5.4384': attribute type 10 has an invalid length. [ 380.178157][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.187079][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.235111][T15190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 380.260176][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.267369][T15183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.274857][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.282024][T15183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.400506][T15183] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 380.804531][ T29] audit: type=1400 audit(2000000018.184:853): avc: denied { create } for pid=15211 comm="syz.6.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.912375][ T29] audit: type=1400 audit(2000000018.212:854): avc: denied { write } for pid=15211 comm="syz.6.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.027687][ T29] audit: type=1400 audit(2000000018.240:855): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.153973][ T29] audit: type=1400 audit(2000000018.240:856): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.188097][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4404'. [ 381.251853][ T29] audit: type=1400 audit(2000000018.240:857): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.421540][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4410'. [ 381.452799][ T29] audit: type=1400 audit(2000000018.782:858): avc: denied { allowed } for pid=15236 comm="syz.6.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.546248][ T29] audit: type=1400 audit(2000000018.810:859): avc: denied { create } for pid=15236 comm="syz.6.4411" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.733765][ T29] audit: type=1400 audit(2000000018.810:860): avc: denied { map } for pid=15236 comm="syz.6.4411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.876954][ T29] audit: type=1400 audit(2000000018.810:861): avc: denied { read write } for pid=15236 comm="syz.6.4411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.849305][T15293] netlink: 'syz.6.4439': attribute type 16 has an invalid length. [ 382.914189][T15293] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.4439'. [ 383.134040][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 383.531092][T15325] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4453'. [ 383.843769][T15333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4457'. [ 383.950444][ T5623] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 384.104377][T15343] CIFS: bad ip= option (::.) [ 384.170074][ T5623] usb 7-1: config 1 has an invalid interface number: 95 but max is 0 [ 384.220228][ T5623] usb 7-1: config 1 has no interface number 0 [ 384.256852][ T5623] usb 7-1: config 1 interface 95 has no altsetting 0 [ 384.322273][ T5623] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice= 1.5b [ 384.366702][ T5623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.396125][ T5623] usb 7-1: Product: syz [ 384.407840][ T5623] usb 7-1: Manufacturer: syz [ 384.423513][ T5623] usb 7-1: SerialNumber: syz [ 384.572652][T15359] netlink: 'syz.2.4468': attribute type 21 has an invalid length. [ 384.654594][T15362] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 384.720061][ T5623] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 384.732320][T15362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.770719][ T5623] usb 7-1: USB disconnect, device number 7 [ 384.794994][T15367] syz_tun: entered promiscuous mode [ 384.811309][T15367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 385.191736][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 385.191754][ T29] audit: type=1400 audit(2000000022.290:893): avc: denied { execmod } for pid=15379 comm="syz.1.4479" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 385.275310][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4481'. [ 385.305153][ T29] audit: type=1400 audit(2000000022.327:894): avc: denied { execute } for pid=15379 comm="syz.1.4479" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 385.555079][ T29] audit: type=1400 audit(2000000022.627:895): avc: denied { read append } for pid=15395 comm="syz.1.4488" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 385.622055][ T29] audit: type=1400 audit(2000000022.655:896): avc: denied { open } for pid=15395 comm="syz.1.4488" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 385.759826][ T29] audit: type=1400 audit(2000000022.823:897): avc: denied { read write } for pid=15401 comm="syz.3.4489" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.844747][ T29] audit: type=1400 audit(2000000022.823:898): avc: denied { open } for pid=15401 comm="syz.3.4489" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.869444][ T5821] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 385.923908][ T29] audit: type=1400 audit(2000000022.823:899): avc: denied { ioctl } for pid=15401 comm="syz.3.4489" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.011931][ T29] audit: type=1400 audit(2000000023.029:900): avc: denied { create } for pid=15411 comm="syz.3.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.065619][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.092888][ T5821] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 386.111000][ T29] audit: type=1400 audit(2000000023.048:901): avc: denied { write } for pid=15411 comm="syz.3.4495" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.131604][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.162186][ T5821] usb 2-1: config 0 descriptor?? [ 386.205595][ T5821] smsusb:smsusb_probe: board id=8, interface number 0 [ 386.233229][ T5821] smsusb:smsusb_probe: Device initialized with return code -19 [ 386.352096][ T29] audit: type=1400 audit(2000000023.375:902): avc: denied { create } for pid=15424 comm="syz.2.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 386.432535][ T5821] usb 2-1: USB disconnect, device number 84 [ 386.775470][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4508'. [ 386.977299][T15449] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 387.273541][T15461] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 (while UP) [ 387.329582][T15463] netlink: 'syz.3.4520': attribute type 49 has an invalid length. [ 387.382314][T15463] .`: (slave bond_slave_0): Releasing backup interface [ 387.457581][T15463] bond_slave_0: entered promiscuous mode [ 387.482017][T15463] bond_slave_0: entered allmulticast mode [ 387.527284][T15472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4524'. [ 387.892009][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 388.901549][T15517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4543'. [ 388.965634][T15517] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 388.999878][T15517] bond4 (unregistering): Released all slaves [ 389.582856][ T5735] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 389.780534][ T5735] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.801544][ T5735] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.847300][ T5735] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 389.899682][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.243563][T15558] bridge6: entered promiscuous mode [ 390.255504][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4559'. [ 390.264980][T15558] bridge6: entered allmulticast mode [ 390.473163][ T5735] usb 4-1: USB disconnect, device number 80 [ 390.489709][T15566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4561'. [ 390.552518][T15566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4561'. [ 390.641701][T15573] openvswitch: netlink: IP tunnel TTL not specified. [ 390.909161][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 390.909179][ T29] audit: type=1400 audit(2000000027.641:929): avc: denied { create } for pid=15584 comm="syz.5.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.030114][ T29] audit: type=1400 audit(2000000027.678:930): avc: denied { read } for pid=15584 comm="syz.5.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.148083][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.276293][ T29] audit: type=1400 audit(2000000027.968:931): avc: denied { audit_control } for pid=15594 comm="syz.2.4576" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.457620][T15603] xfrm1: entered allmulticast mode [ 391.674915][T15612] netlink: 'syz.5.4584': attribute type 1 has an invalid length. [ 391.713705][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4584'. [ 391.943370][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.145868][T15625] x_tables: duplicate underflow at hook 4 [ 392.727213][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.818549][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.117693][T15644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 393.199599][T15654] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 393.466996][T15666] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 393.557226][T15670] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4609'. [ 394.046250][T15695] xt_connbytes: Forcing CT accounting to be enabled [ 394.086550][T15686] lo speed is unknown, defaulting to 1000 [ 394.145730][T15697] syz.5.4622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.224541][ T29] audit: type=1400 audit(2000000030.737:932): avc: denied { create } for pid=15702 comm="syz.1.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 394.291412][ T29] audit: type=1400 audit(2000000030.765:933): avc: denied { write } for pid=15702 comm="syz.1.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 394.756404][ T29] audit: type=1400 audit(2000000031.223:934): avc: denied { create } for pid=15720 comm="syz.3.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 394.853470][ T29] audit: type=1400 audit(2000000031.233:935): avc: denied { ioctl } for pid=15720 comm="syz.3.4634" path="socket:[42122]" dev="sockfs" ino=42122 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 394.861331][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4636'. [ 394.967085][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4636'. [ 394.984991][ T29] audit: type=1400 audit(2000000031.448:936): avc: denied { getopt } for pid=15727 comm="syz.1.4637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.003457][T15723] hfs: unable to load iocharset "io#harset" [ 395.467586][ T29] audit: type=1400 audit(2000000031.897:937): avc: denied { ioctl } for pid=15747 comm="syz.5.4646" path="socket:[43146]" dev="sockfs" ino=43146 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.742313][T15754] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4647'. [ 395.980216][T15754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.038258][T15762] xt_l2tp: v2 sid > 0xffff: 117440512 [ 396.068603][T15767] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4652'. [ 396.084894][ T29] audit: type=1400 audit(2000000032.458:938): avc: denied { nlmsg_read } for pid=15765 comm="syz.6.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.728878][ T29] audit: type=1400 audit(2000000033.085:939): avc: denied { write } for pid=15791 comm="syz.2.4661" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 396.884812][ T29] audit: type=1400 audit(2000000033.085:940): avc: denied { open } for pid=15791 comm="syz.2.4661" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 397.016916][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4666'. [ 397.030047][ T29] audit: type=1400 audit(2000000033.113:941): avc: denied { ioctl } for pid=15791 comm="syz.2.4661" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 397.080611][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4666'. [ 397.159798][ T29] audit: type=1326 audit(2000000033.347:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.327980][ T29] audit: type=1326 audit(2000000033.365:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.436966][T15822] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4672'. [ 397.488201][ T29] audit: type=1326 audit(2000000033.365:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.548440][ T29] audit: type=1326 audit(2000000033.365:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.576285][ T29] audit: type=1326 audit(2000000033.365:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.604617][ T29] audit: type=1326 audit(2000000033.365:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 397.631770][ T29] audit: type=1326 audit(2000000033.365:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.4665" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ab99e0d9 code=0x7ffc0000 [ 398.041082][T15849] xt_TCPMSS: Only works on TCP SYN packets [ 398.708827][T15884] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 398.899886][T15893] netlink: 3752 bytes leftover after parsing attributes in process `syz.6.4696'. [ 399.071087][T15904] xt_hl: Unknown Hop Limit match mode: 206 [ 399.448598][T15930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4710'. [ 399.546383][T15940] Zero length message leads to an empty skb [ 399.638430][T15930] bond5: entered promiscuous mode [ 399.674608][T15930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.682754][T15977] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 399.849324][T15983] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4717'. [ 400.061018][T16001] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 400.506847][T16021] netlink: 'syz.2.4730': attribute type 25 has an invalid length. [ 401.526391][T16064] bond0: entered promiscuous mode [ 401.584702][T16064] bond_slave_0: entered promiscuous mode [ 401.621020][T16064] bond_slave_1: entered promiscuous mode [ 401.655722][T16064] bridge0: entered promiscuous mode [ 401.688420][T16079] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 402.346812][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 402.346829][ T29] audit: type=1400 audit(2000000038.332:958): avc: denied { create } for pid=16107 comm="syz.5.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 402.398362][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4758'. [ 402.449714][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'. [ 402.523379][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'. [ 402.578030][ T29] audit: type=1400 audit(2000000038.379:959): avc: denied { write } for pid=16107 comm="syz.5.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 402.771893][ T29] audit: type=1400 audit(2000000038.454:960): avc: denied { write } for pid=16102 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.186351][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 403.405424][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 403.511830][T16158] dlm: Unknown command passed to DLM device : 3 [ 403.511830][T16158] [ 403.521889][T16159] netlink: 'syz.3.4772': attribute type 2 has an invalid length. [ 403.619445][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.627533][ T10] usb 6-1: Product: syz [ 403.637534][ T10] usb 6-1: Manufacturer: syz [ 403.651531][ T10] usb 6-1: SerialNumber: syz [ 403.672247][ T10] usb 6-1: config 0 descriptor?? [ 403.709341][ T10] ch341 6-1:0.0: ch341-uart converter detected [ 403.728567][T16168] xt_hashlimit: size too large, truncated to 1048576 [ 403.733057][ T29] audit: type=1400 audit(2000000039.632:961): avc: denied { setopt } for pid=16165 comm="syz.6.4774" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.024750][ T10] usb 6-1: failed to receive control message: -71 [ 404.116849][ T29] audit: type=1400 audit(2000000039.988:962): avc: denied { read write } for pid=16187 comm="syz.3.4781" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 404.171232][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 404.204029][ T10] usb 6-1: USB disconnect, device number 9 [ 404.219136][T16226] IPv6: Can't replace route, no match found [ 404.220563][ T10] ch341 6-1:0.0: device disconnected [ 404.272110][ T29] audit: type=1400 audit(2000000040.016:963): avc: denied { open } for pid=16187 comm="syz.3.4781" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 404.376267][T16240] tipc: Can't bind to reserved service type 1 [ 404.387094][ T29] audit: type=1400 audit(2000000040.175:964): avc: denied { write } for pid=16136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.472382][ T29] audit: type=1400 audit(2000000040.231:965): avc: denied { create } for pid=16239 comm="syz.3.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.496088][ T5714] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 404.597702][ T29] audit: type=1400 audit(2000000040.231:966): avc: denied { bind } for pid=16239 comm="syz.3.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.699510][ T5714] usb 7-1: Using ep0 maxpacket: 32 [ 404.736222][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.772120][ T29] audit: type=1400 audit(2000000040.493:967): avc: denied { write } for pid=16241 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.848658][ T5714] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 404.895370][ T5714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.934217][ T5714] usb 7-1: Product: syz [ 404.948631][ T5714] usb 7-1: Manufacturer: syz [ 404.970593][ T5714] usb 7-1: SerialNumber: syz [ 405.000995][ T5714] usb 7-1: config 0 descriptor?? [ 405.248410][ T5714] usb 7-1: USB disconnect, device number 8 [ 405.619282][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4800'. [ 405.654159][T16306] unsupported nlmsg_type 40 [ 405.876034][T16324] xfrm0: entered allmulticast mode [ 406.110777][T16338] netlink: Conntrack attr has 8 unknown bytes [ 406.146591][T16338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.590290][T16368] xt_l2tp: v2 doesn't support IP mode [ 407.197081][T16393] bridge0: port 3(syz_tun) entered blocking state [ 407.246804][T16393] bridge0: port 3(syz_tun) entered disabled state [ 407.296149][T16393] syz_tun: entered allmulticast mode [ 407.713123][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 407.713287][ T29] audit: type=1400 audit(2000000043.355:1007): avc: denied { write } for pid=16403 comm="syz.6.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.765096][T16404] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4834'. [ 407.837696][T16409] kAFS: unable to lookup cell '.' [ 407.857533][ T29] audit: type=1400 audit(2000000043.402:1008): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 407.970544][ T29] audit: type=1400 audit(2000000043.402:1009): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.076554][ T29] audit: type=1400 audit(2000000043.402:1010): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.139676][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4838'. [ 408.187135][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4838'. [ 408.245552][ T29] audit: type=1400 audit(2000000043.421:1011): avc: denied { read write } for pid=11179 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.443058][ T29] audit: type=1400 audit(2000000043.421:1012): avc: denied { read write open } for pid=11179 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.602289][ T29] audit: type=1400 audit(2000000043.421:1013): avc: denied { ioctl } for pid=11179 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.716411][ T29] audit: type=1400 audit(2000000043.533:1014): avc: denied { read append } for pid=16411 comm="syz.1.4837" name="comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.863461][ T29] audit: type=1400 audit(2000000043.533:1015): avc: denied { open } for pid=16411 comm="syz.1.4837" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.040838][ T29] audit: type=1400 audit(2000000043.561:1016): avc: denied { ioctl } for pid=16411 comm="syz.1.4837" path="/dev/comedi4" dev="devtmpfs" ino=1279 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.240924][T16522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.377480][T16530] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.549895][T16531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.987583][T16559] netlink: 'syz.2.4881': attribute type 4 has an invalid length. [ 412.371099][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4899'. [ 412.411426][T16610] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 412.727253][T16626] ip_tables: iptables: counters copy to user failed while replacing table [ 413.060475][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 413.060491][ T29] audit: type=1400 audit(2000000048.350:1291): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 413.225995][ T29] audit: type=1400 audit(2000000048.388:1292): avc: denied { ioctl } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 413.368594][ T29] audit: type=1400 audit(2000000048.463:1293): avc: denied { read } for pid=16641 comm="syz.1.4911" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 413.458833][ T29] audit: type=1400 audit(2000000048.463:1294): avc: denied { open } for pid=16641 comm="syz.1.4911" path="net:[4026533260]" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 413.568812][ T29] audit: type=1400 audit(2000000048.463:1295): avc: denied { create } for pid=16641 comm="syz.1.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.634274][ T29] audit: type=1400 audit(2000000048.472:1296): avc: denied { bind } for pid=16641 comm="syz.1.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.655357][ T29] audit: type=1400 audit(2000000048.594:1297): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 413.693550][ T29] audit: type=1400 audit(2000000048.594:1298): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 413.806124][ T29] audit: type=1400 audit(2000000048.594:1299): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 413.942142][ T29] audit: type=1400 audit(2000000048.594:1300): avc: denied { read write } for pid=11796 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.144866][T16776] kAFS: unable to lookup cell '(,c¾Ì' [ 416.309436][ T10] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 416.545209][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.647884][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 416.680405][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 416.704745][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.730874][ T10] usb 4-1: Product: syz [ 416.759231][ T10] usb 4-1: Manufacturer: syz [ 416.790294][ T10] usb 4-1: SerialNumber: syz [ 416.874263][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4961'. [ 417.129789][ T10] snd-usb-caiaq 4-1:1.0: invalid EPs [ 417.152925][ T10] usb 4-1: unable to init card! (ret=-22) [ 417.181237][ T10] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 417.420630][T16837] IPVS: length: 4096 != 8 [ 417.515907][ T10] usb 4-1: USB disconnect, device number 81 [ 417.870198][ T5619] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 418.082340][ T5619] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 418.116988][ T5619] usb 6-1: config 0 has no interface number 1 [ 418.143637][ T5619] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 418.167276][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.193315][ T5619] usb 6-1: config 0 descriptor?? [ 418.478807][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 418.478825][ T29] audit: type=1400 audit(2000000053.420:1681): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.522287][ T5619] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 418.646550][ T29] audit: type=1400 audit(2000000053.420:1682): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.741248][ T29] audit: type=1400 audit(2000000053.420:1683): avc: denied { ioctl } for pid=5615 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.797215][ T5714] usb 6-1: USB disconnect, device number 10 [ 418.826083][ T5714] qcserial 6-1:0.2: device disconnected [ 418.840063][ T29] audit: type=1400 audit(2000000053.430:1684): avc: denied { ioctl } for pid=16847 comm="syz.5.4972" path="/dev/raw-gadget" dev="devtmpfs" ino=816 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.937003][ T29] audit: type=1400 audit(2000000053.448:1685): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.010217][ T29] audit: type=1400 audit(2000000053.448:1686): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.069062][ T29] audit: type=1400 audit(2000000053.448:1687): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.171881][ T29] audit: type=1400 audit(2000000053.720:1688): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.267856][ T29] audit: type=1400 audit(2000000053.720:1689): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.387646][ T29] audit: type=1400 audit(2000000053.720:1690): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.661530][T16930] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 420.049247][T16952] sock: sock_timestamping_bind_phc: sock not bind to device [ 420.299963][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5007'. [ 420.893174][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5015'. [ 420.930759][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5015'. [ 420.993354][T16998] geneve0: entered promiscuous mode [ 421.002448][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 421.202262][ T10] usb 2-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 421.238406][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.258796][ T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 421.302951][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.352681][ T10] usb 2-1: config 0 descriptor?? [ 421.475147][T17023] syz_tun: refused to change device tx_queue_len [ 421.566537][T17028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5025'. [ 421.861955][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 421.903381][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 421.932019][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 421.959935][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 421.988729][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.026769][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.078189][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.107485][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.135612][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.170570][ T10] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 422.298095][ T10] zeroplus 0003:0C12:0030.0001: hidraw0: USB HID v0.bf Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 422.352257][ T10] zeroplus 0003:0C12:0030.0001: no inputs found [ 422.386496][ T10] usb 2-1: USB disconnect, device number 85 [ 422.753373][T17056] fido_id[17056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 422.849023][T17074] gretap0: entered promiscuous mode [ 422.868455][T17074] vlan2: entered promiscuous mode [ 423.815979][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 423.841904][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 423.841921][ T29] audit: type=1400 audit(2000000058.443:1961): avc: denied { ioctl } for pid=17103 comm="syz.2.5043" path="/dev/raw-gadget" dev="devtmpfs" ino=816 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.942311][ T29] audit: type=1400 audit(2000000058.490:1962): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.049216][ T29] audit: type=1400 audit(2000000058.490:1963): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.078134][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5049'. [ 424.103657][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.121749][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.156130][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 424.165304][ T29] audit: type=1400 audit(2000000058.490:1964): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.196883][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.233195][ T10] usb 3-1: config 0 descriptor?? [ 424.252914][ T29] audit: type=1400 audit(2000000058.565:1965): avc: denied { ioctl } for pid=17103 comm="syz.2.5043" path="/dev/raw-gadget" dev="devtmpfs" ino=816 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.327188][ T29] audit: type=1400 audit(2000000058.593:1966): avc: denied { read write } for pid=11179 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.403154][ T29] audit: type=1400 audit(2000000058.593:1967): avc: denied { read write open } for pid=11179 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.491815][ T29] audit: type=1400 audit(2000000058.593:1968): avc: denied { ioctl } for pid=11179 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.534272][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 424.553705][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 424.600457][ T10] usb 3-1: USB disconnect, device number 86 [ 424.619531][ T29] audit: type=1400 audit(2000000058.621:1969): avc: denied { read } for pid=17126 comm="syz.1.5049" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 424.722730][ T29] audit: type=1400 audit(2000000058.621:1970): avc: denied { open } for pid=17126 comm="syz.1.5049" path="net:[4026533260]" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.161452][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 425.386981][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.418017][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.462192][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 425.495323][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.543430][ T10] usb 3-1: config 0 descriptor?? [ 425.806394][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 425.848423][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 425.939997][ T10] input: failed to attach handler kbd to device input42, error: -5 [ 426.058394][ T10] usb 3-1: USB disconnect, device number 87 [ 426.433268][ T5821] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 426.625779][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 426.673611][ T5821] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 426.750783][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.800547][ T5821] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 426.861030][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.924702][ T5821] usb 2-1: config 0 descriptor?? [ 426.983061][T17214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.285723][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5082'. [ 427.364771][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.595327][T17266] [U]  [ 427.672369][ T5821] hid_parser_main: 30 callbacks suppressed [ 427.672392][ T5821] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x2 [ 427.723417][ T5821] corsair 0003:1B1C:1B3E.0002: unknown main item tag 0x6 [ 427.760354][T17274] tipc: Started in network mode [ 427.774349][ T5821] corsair 0003:1B1C:1B3E.0002: global environment stack underflow [ 427.799988][T17274] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 427.818277][ T5821] corsair 0003:1B1C:1B3E.0002: item 0 4 1 11 parsing failed [ 427.841048][T17274] tipc: Enabled bearer , priority 0 [ 427.857875][ T5821] corsair 0003:1B1C:1B3E.0002: parse failed [ 427.892229][ T5821] corsair 0003:1B1C:1B3E.0002: probe with driver corsair failed with error -22 [ 427.948611][ T5821] usb 2-1: USB disconnect, device number 86 [ 428.444378][ T5619] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 428.648219][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 428.673580][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 428.725942][ T5619] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.764677][ T30] INFO: task syz.4.2579:11313 blocked for more than 143 seconds. [ 428.772714][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.800470][ T30] Tainted: G L syzkaller #0 [ 428.815237][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.832725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.876254][ T5619] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 428.885145][ T30] task:syz.4.2579 state:D stack:27376 pid:11313 tgid:11310 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 428.914362][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.931444][ T30] Call Trace: [ 428.944950][ T30] [ 428.958892][ T30] __schedule+0x125c/0x6730 [ 428.964239][ T5619] usb 4-1: Product: syz [ 428.974373][ T30] ? do_raw_spin_lock+0x128/0x260 [ 428.990805][ T5619] usb 4-1: Manufacturer: syz [ 428.993386][ T30] ? __pfx___schedule+0x10/0x10 [ 429.014114][ T30] ? find_held_lock+0x2b/0x80 [ 429.014127][ T5619] usb 4-1: SerialNumber: syz [ 429.034085][ T5821] tipc: Node number set to 10005162 [ 429.055200][ T5619] usb 4-1: config 0 descriptor?? [ 429.061063][ T30] ? schedule+0x225/0x2c0 [ 429.078035][ T30] schedule+0xdd/0x2c0 [ 429.079723][T17300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 429.091741][ T30] schedule_preempt_disabled+0x13/0x30 [ 429.108992][ T30] __mutex_lock+0xccc/0x1bd0 [ 429.124459][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 429.134608][ T30] ? kasan_save_stack+0x30/0x50 [ 429.142645][ T5619] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 429.145753][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 429.169205][ T30] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 429.196263][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 429.196277][ T29] audit: type=1400 audit(2000000063.448:2259): avc: denied { read } for pid=4968 comm="acpid" name="js0" dev="devtmpfs" ino=4489 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.236696][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.245504][ T30] ? netlink_rcv_skb+0x159/0x420 [ 429.270111][ T30] ? genl_rcv+0x28/0x40 [ 429.290571][ T29] audit: type=1400 audit(2000000063.448:2260): avc: denied { open } for pid=4968 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4489 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.291939][ T30] ? netlink_unicast+0x585/0x850 [ 429.385363][ T29] audit: type=1400 audit(2000000063.457:2261): avc: denied { ioctl } for pid=4968 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4489 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.389498][ T30] ? ____sys_sendmsg+0xa4d/0xbe0 [ 429.496680][ T30] ? ___sys_sendmsg+0x190/0x1e0 [ 429.519190][ T30] ? __sys_sendmsg+0x160/0x210 [ 429.535382][ T29] audit: type=1400 audit(2000000063.775:2262): avc: denied { read } for pid=17298 comm="syz.3.5092" name="event4" dev="devtmpfs" ino=4490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.540261][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 429.602149][ T30] nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 429.618578][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 429.620032][ T29] audit: type=1400 audit(2000000063.775:2263): avc: denied { open } for pid=17298 comm="syz.3.5092" path="/dev/input/event4" dev="devtmpfs" ino=4490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.636288][ T30] ? trace_kmalloc+0xeb/0x110 [ 429.682127][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 429.696696][ T30] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 429.713837][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 429.716035][ T29] audit: type=1400 audit(2000000063.794:2264): avc: denied { ioctl } for pid=17298 comm="syz.3.5092" path="/dev/input/event4" dev="devtmpfs" ino=4490 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.728059][ T30] ? __alloc_skb+0x185/0x710 [ 429.779410][ T30] ? kmalloc_reserve+0xf9/0x350 [ 429.792378][ T30] ? __asan_memset+0x23/0x50 [ 429.805162][ T30] ? __alloc_skb+0x4e9/0x710 [ 429.819232][ T30] ? __alloc_skb+0x5b7/0x710 [ 429.830778][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 429.844974][ T30] genl_dumpit+0x125/0x230 [ 429.857421][ T30] netlink_dump+0x532/0xd00 [ 429.869750][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 429.882158][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 429.895305][ T30] ? __asan_memset+0x23/0x50 [ 429.907758][ T30] ? genl_start+0x67a/0x970 [ 429.919597][ T30] __netlink_dump_start+0x6d6/0x990 [ 429.932566][ T30] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 429.947972][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 429.965001][ T30] ? consume_skb+0xd6/0x110 [ 429.977309][ T30] ? __dev_queue_xmit+0xa12/0x4970 [ 429.990291][ T30] ? __pfx_genl_get_cmd+0x10/0x10 [ 430.003190][ T30] ? __pfx_genl_start+0x10/0x10 [ 430.017400][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 430.022633][ T30] ? __pfx_genl_done+0x10/0x10 [ 430.029335][ T30] ? __dev_queue_xmit+0xa33/0x4970 [ 430.034485][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 430.040196][ T30] genl_rcv_msg+0x471/0x800 [ 430.044735][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.050930][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 430.059681][ T30] netlink_rcv_skb+0x159/0x420 [ 430.064480][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.070663][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.075995][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 430.081667][ T30] genl_rcv+0x28/0x40 [ 430.085678][ T30] netlink_unicast+0x585/0x850 [ 430.090814][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 430.096138][ T30] netlink_sendmsg+0x8b0/0xda0 [ 430.101285][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.106602][ T30] ? selinux_socket_sendmsg+0x198/0x2f0 [ 430.112514][ T30] ____sys_sendmsg+0xa4d/0xbe0 [ 430.117311][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.122963][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.128294][ T30] ___sys_sendmsg+0x190/0x1e0 [ 430.135709][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.140934][ T30] ? __lock_acquire+0x49f/0x1a40 [ 430.148131][ T30] __sys_sendmsg+0x160/0x210 [ 430.153219][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.158847][ T30] do_syscall_64+0x115/0x870 [ 430.163794][ T30] ? clear_bhb_loop+0x40/0x90 [ 430.169744][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.178108][ T30] RIP: 0033:0x7fccf119e0d9 [ 430.182558][ T30] RSP: 002b:00007fccf2073028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.192484][ T30] RAX: ffffffffffffffda RBX: 00007fccf1425fa0 RCX: 00007fccf119e0d9 [ 430.200721][ T30] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 430.208965][ T30] RBP: 00007fccf1235024 R08: 0000000000000000 R09: 0000000000000000 [ 430.216963][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.225310][ T30] R13: 00007fccf1426038 R14: 00007fccf1425fa0 R15: 00007ffc94ebd888 [ 430.233590][ T30] [ 430.236720][ T30] [ 430.236720][ T30] Showing all locks held in the system: [ 430.255626][ T5742] usb 4-1: USB disconnect, device number 82 [ 430.261602][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.261650][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 430.297411][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 430.323144][ T30] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 430.351130][ T30] 1 lock held by khungtaskd/30: [ 430.366256][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 430.396155][ T29] audit: type=1400 audit(2000000064.561:2265): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.420957][ T30] 2 locks held by acpid/4968: [ 430.425883][ T30] #0: ffff88804cc50158 (&joydev->mutex){+.+.}-{4:4}, at: joydev_release+0x185/0x2a0 [ 430.447660][ T30] #1: ffff88807dedc2b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x280 [ 430.472951][ T30] 2 locks held by getty/5367: [ 430.485018][ T29] audit: type=1400 audit(2000000064.561:2266): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.485937][ T30] #0: [ 430.540731][ T29] audit: type=1400 audit(2000000064.561:2267): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.541515][ T30] ffff888037df80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 430.633010][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 430.658387][ T30] 6 locks held by kworker/0:5/5742: [ 430.681221][ T30] #0: ffff888023ebdd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 430.702980][ T30] #1: ffffc900046b7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 430.726680][ T30] #2: ffff88802b28c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 430.746836][ T30] #3: ffff88802369d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 430.768604][ T30] #4: ffff8880345201a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 430.790977][ T30] #5: ffff88807dedc2b8 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x24/0x4d0 [ 430.813964][ T30] 3 locks held by kworker/1:8/5821: [ 430.824744][ T30] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 430.835327][ T30] #1: ffffc9000533fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 430.845244][ T30] #2: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 430.855351][ T30] 2 locks held by udevd/6251: [ 430.860183][ T30] #0: ffff888022ad0110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x29e/0x420 [ 430.886035][ T30] #1: ffff88807dedc2b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x280 [ 430.902049][ T29] audit: type=1400 audit(2000000065.047:2268): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.931173][ T30] 2 locks held by syz.0.2247/10551: [ 430.936452][ T30] #0: ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.944764][ T30] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 430.954981][ T30] 3 locks held by syz.4.2579/11313: [ 430.960227][ T30] #0: ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.968522][ T30] #1: ffff888035ecc6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 430.979130][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 431.008874][ T30] [ 431.011611][ T30] ============================================= [ 431.011611][ T30] [ 431.025990][ T30] NMI backtrace for cpu 1 [ 431.026006][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.026028][ T30] Tainted: [L]=SOFTLOCKUP [ 431.026035][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.026045][ T30] Call Trace: [ 431.026050][ T30] [ 431.026057][ T30] dump_stack_lvl+0x100/0x190 [ 431.026080][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 431.026101][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.026125][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 431.026145][ T30] sys_info+0x141/0x190 [ 431.026166][ T30] watchdog+0xcb1/0x1030 [ 431.026189][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.026208][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.026227][ T30] ? __kthread_parkme+0x18c/0x230 [ 431.026254][ T30] ? kthread+0x13a/0x450 [ 431.026267][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.026287][ T30] kthread+0x370/0x450 [ 431.026304][ T30] ? __pfx_kthread+0x10/0x10 [ 431.026326][ T30] ret_from_fork+0x72b/0xd50 [ 431.026354][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.026392][ T30] ? __switch_to+0x800/0x10f0 [ 431.026415][ T30] ? __pfx_kthread+0x10/0x10 [ 431.026437][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.026482][ T30] [ 431.026490][ T30] Sending NMI from CPU 1 to CPUs 0: [ 431.157547][ C0] NMI backtrace for cpu 0 [ 431.157564][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.157592][ C0] Tainted: [L]=SOFTLOCKUP [ 431.157599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.157612][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 431.157640][ C0] Code: 06 f3 5e 00 48 89 df 5b e9 1d 6e 64 00 be 03 00 00 00 5b e9 c2 37 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 45 1b 5a 12 48 8b 34 24 65 48 8b 15 21 1b 5a [ 431.157660][ C0] RSP: 0018:ffffc90000147bd8 EFLAGS: 00000097 [ 431.157676][ C0] RAX: 0000000000000000 RBX: 00000060cb63f894 RCX: ffffffff81fa8dbf [ 431.157689][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: ffff88801eaba540 [ 431.157701][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000004 [ 431.157713][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880b8423d80 [ 431.157725][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 431.157740][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 431.157758][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.157770][ C0] CR2: 00007fe8ad5ed158 CR3: 0000000073331000 CR4: 00000000003526f0 [ 431.157783][ C0] Call Trace: [ 431.157789][ C0] [ 431.157796][ C0] tick_program_event+0x8e/0x140 [ 431.157821][ C0] __hrtimer_rearm_deferred+0x234/0x720 [ 431.157840][ C0] ? irqentry_enter+0x2f/0x130 [ 431.157869][ C0] irqentry_exit+0x5f3/0xa00 [ 431.157894][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.157916][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 431.157938][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 431.157956][ C0] RSP: 0018:ffffc90000147d30 EFLAGS: 00000246 [ 431.157970][ C0] RAX: 0000000000000002 RBX: ffff8880b8428400 RCX: 0000000000000000 [ 431.157982][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 431.157995][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 431.158006][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e80a100 [ 431.158018][ C0] R13: 0000000000000008 R14: 0000000000000100 R15: 0000000000000000 [ 431.158039][ C0] handle_softirqs+0x1ea/0x9b0 [ 431.158066][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 431.158090][ C0] ? run_ksoftirqd+0x5b/0x60 [ 431.158113][ C0] ? rcu_is_watching+0x12/0xc0 [ 431.158143][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 431.158166][ C0] run_ksoftirqd+0x38/0x60 [ 431.158189][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 431.158220][ C0] ? kthread+0x13a/0x450 [ 431.158238][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 431.158266][ C0] kthread+0x370/0x450 [ 431.158283][ C0] ? __pfx_kthread+0x10/0x10 [ 431.158302][ C0] ret_from_fork+0x72b/0xd50 [ 431.158328][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 431.158355][ C0] ? __switch_to+0x800/0x10f0 [ 431.158374][ C0] ? __pfx_kthread+0x10/0x10 [ 431.158394][ C0] ret_from_fork_asm+0x1a/0x30 [ 431.158428][ C0] [ 431.471340][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.478215][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.488887][ T30] Tainted: [L]=SOFTLOCKUP [ 431.493194][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 431.503234][ T30] Call Trace: [ 431.506501][ T30] [ 431.509420][ T30] dump_stack_lvl+0x100/0x190 [ 431.514104][ T30] vpanic+0x552/0x970 [ 431.518080][ T30] ? __pfx_vpanic+0x10/0x10 [ 431.522578][ T30] ? rcu_is_watching+0x12/0xc0 [ 431.527353][ T30] panic+0xd1/0xe0 [ 431.531067][ T30] ? __pfx_panic+0x10/0x10 [ 431.535482][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 431.541632][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 431.547779][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 431.553926][ T30] ? watchdog.cold+0x1ec/0x234 [ 431.558682][ T30] ? watchdog+0xcc1/0x1030 [ 431.563098][ T30] watchdog.cold+0x1fd/0x234 [ 431.567688][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.573488][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.578162][ T30] ? __kthread_parkme+0x18c/0x230 [ 431.583195][ T30] ? kthread+0x13a/0x450 [ 431.587428][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.592102][ T30] kthread+0x370/0x450 [ 431.596163][ T30] ? __pfx_kthread+0x10/0x10 [ 431.600745][ T30] ret_from_fork+0x72b/0xd50 [ 431.605340][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.610452][ T30] ? __switch_to+0x800/0x10f0 [ 431.615123][ T30] ? __pfx_kthread+0x10/0x10 [ 431.619706][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.624486][ T30] [ 431.627733][ T30] Kernel Offset: disabled [ 431.632035][ T30] Rebooting in 86400 seconds..