last executing test programs: 6m27.66462258s ago: executing program 1 (id=1626): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 6m27.547747038s ago: executing program 1 (id=1627): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x4}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r0, 0x7) 6m26.644177957s ago: executing program 1 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000103, 0x0, 0xfffffffffffffff8}]}) 6m26.363156889s ago: executing program 1 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 6m26.230240979s ago: executing program 1 (id=1643): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x80025b}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6m25.932361217s ago: executing program 1 (id=1648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = dup3(r0, r1, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 6m25.767623162s ago: executing program 32 (id=1648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = dup3(r0, r1, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2.870729116s ago: executing program 2 (id=6341): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) munmap(&(0x7f0000729000/0x2000)=nil, 0x2000) 2.560179082s ago: executing program 2 (id=6347): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.432859794s ago: executing program 2 (id=6348): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0xfbef2e254f19cac2, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 2.346399377s ago: executing program 0 (id=6349): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 2.258504527s ago: executing program 0 (id=6351): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r3}}, 0x40) 2.065657564s ago: executing program 0 (id=6352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.01049482s ago: executing program 2 (id=6354): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x401}, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 1.900448107s ago: executing program 0 (id=6355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@netkit}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x25, 0xff, {0x0, 0x4}, 0x0, 0x0, 0x4b}) 1.846923416s ago: executing program 0 (id=6356): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 1.823522422s ago: executing program 2 (id=6357): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.52988938s ago: executing program 2 (id=6361): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.251173636s ago: executing program 4 (id=6368): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc44, 0xff, 0x8000000000000000, 0xffffffffffffffff, 0x10000, 0x3, 0x400200cc2, 0x7fd, 0x9, 0x8000009, 0x403, 0x80, 0x88, 0x0, 0x3, 0x91], 0x100000, 0x200c40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.249845396s ago: executing program 3 (id=6369): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) 1.168611044s ago: executing program 4 (id=6370): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) bind$tipc(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.095305596s ago: executing program 3 (id=6372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001200)="df", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) 910.446732ms ago: executing program 3 (id=6373): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 840.622247ms ago: executing program 0 (id=6374): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) write$P9_RGETLOCK(r1, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 840.482907ms ago: executing program 4 (id=6375): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 770.118416ms ago: executing program 4 (id=6376): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 760.284661ms ago: executing program 5 (id=6377): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x23, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 647.054862ms ago: executing program 5 (id=6378): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="16f8", 0x2}], 0x1}}], 0x2, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) 645.48217ms ago: executing program 3 (id=6379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 533.696002ms ago: executing program 5 (id=6380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa0000000000000) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 398.281183ms ago: executing program 3 (id=6381): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x22}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) 351.723333ms ago: executing program 5 (id=6382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @binary="56ccabd869c2"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 223.731188ms ago: executing program 4 (id=6383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x8000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x8, 0x100, 0x6, 0x3fdd, 0x0, 0x0, 0x0, 0x10, 0x674}}, 0x50) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000023c0)=0x7) r1 = syz_open_dev$loop(&(0x7f0000002540), 0x5, 0x200) ioctl$BLKPG(r1, 0x1269, &(0x7f0000002640)={0x2, 0x0, 0x98, &(0x7f0000002580)={0x3, 0xab, 0x11}}) 141.339605ms ago: executing program 5 (id=6384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 140.096203ms ago: executing program 4 (id=6385): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002b75aab37900000002"], 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 60.817401ms ago: executing program 3 (id=6386): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3e25}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 0s ago: executing program 5 (id=6387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x1, 0x1, 0x0, @multicast2, @multicast1}, @echo={0x8, 0x0, 0x0, 0x7, 0x8001}}}}}, 0x0) kernel console output (not intermixed with test programs): 420.870716][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.890248][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.910160][ T5712] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 420.928793][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.948225][ T5712] usb 3-1: config 0 descriptor?? [ 421.019281][ T5713] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 421.181875][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.195493][T16747] input: syz0 as /devices/virtual/input/input59 [ 421.205441][ T5713] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 421.238655][ T5713] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 421.260321][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.289021][ T5713] usb 5-1: Product: syz [ 421.300823][ T5713] usb 5-1: Manufacturer: syz [ 421.310843][ T5713] usb 5-1: SerialNumber: syz [ 421.378877][ T5712] ft260 0003:0403:6030.0036: unknown main item tag 0x0 [ 421.397256][ T5712] ft260 0003:0403:6030.0036: unknown main item tag 0x0 [ 421.546571][ T5713] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 421.554426][ T5713] usb 5-1: 2:1 : unsupported format bits 0xd6000008 [ 421.562137][ T5713] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 421.576996][ T5712] ft260 0003:0403:6030.0036: chip code: 0000 0000 [ 421.598457][ T5713] usb 5-1: USB disconnect, device number 54 [ 421.780048][ T5712] ft260 0003:0403:6030.0036: failed to retrieve system status [ 421.796239][ T5712] ft260 0003:0403:6030.0036: probe with driver ft260 failed with error -71 [ 421.837094][ T5712] usb 3-1: USB disconnect, device number 48 [ 421.961400][ T5713] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 421.991947][ T5713] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 422.445720][ T5713] usb 4-1: USB disconnect, device number 52 [ 422.980133][ T30] audit: type=1326 audit(1785155645.059:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.5.4612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01bc79de99 code=0x0 [ 423.112455][ T30] audit: type=1400 audit(1785155645.159:1008): avc: denied { write } for pid=16802 comm="syz.0.4615" path="socket:[63537]" dev="sockfs" ino=63537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 423.283291][ T10] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 423.451653][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.485383][T11663] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.503832][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 423.528628][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 423.552967][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 423.572869][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 423.602838][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 423.613969][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 423.630819][ T10] usb 3-1: Product: syz [ 423.639023][ T10] usb 3-1: Manufacturer: syz [ 423.649286][ T10] usb 3-1: SerialNumber: syz [ 423.664303][ T10] usb 3-1: config 0 descriptor?? [ 423.906890][ T10] radio-si470x 3-1:0.0: DeviceID=0x6f70 ChipID=0x2300 [ 424.107391][ T10] radio-si470x 3-1:0.0: software version 111, hardware version 112 [ 424.189302][ T5712] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 424.289885][ T5713] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 424.319935][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 424.347746][ T10] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 424.362593][ T5712] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 424.385973][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 424.394945][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.423347][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 424.438021][ T5712] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 424.452685][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.474996][ T10] usb 3-1: USB disconnect, device number 49 [ 424.482132][ T5712] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 424.500781][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.511656][ T5712] usb 5-1: Manufacturer: syz [ 424.527192][ T5712] usb 5-1: config 0 descriptor?? [ 424.536415][ T5713] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 424.563011][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.587430][ T5713] usb 4-1: config 0 descriptor?? [ 424.609510][ T5712] rc_core: IR keymap rc-hauppauge not found [ 424.615512][ T5712] Registered IR keymap rc-empty [ 424.621347][ T5712] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 424.633342][ T5712] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input60 [ 424.776588][T16833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.787722][T16833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.002322][ C0] igorplugusb 5-1:0.0: receive overflow, at least 21 lost [ 425.009583][T16857] rc rc0: two consecutive events of type pulse [ 425.024251][ T30] audit: type=1400 audit(1785155647.109:1009): avc: denied { ioctl } for pid=16861 comm="syz.2.4637" path="socket:[63915]" dev="sockfs" ino=63915 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 425.052099][ T5713] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 425.062280][ T5713] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 425.070202][ T5713] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 425.119143][ T5713] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 425.137897][ T5713] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 425.175567][ T5713] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 425.214926][ T10] usb 5-1: USB disconnect, device number 55 [ 425.502913][ T5713] IPVS: starting estimator thread 0... [ 425.529823][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 425.536591][ T5607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.630614][T16874] IPVS: using max 75 ests per chain, 180000 per kthread [ 425.985266][ T30] audit: type=1400 audit(1785155648.069:1010): avc: denied { write } for pid=16895 comm="syz.4.4650" name="core" dev="configfs" ino=3533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.110649][ T30] audit: type=1400 audit(1785155648.119:1011): avc: denied { write } for pid=16895 comm="syz.4.4650" name="rd_mcp_0" dev="configfs" ino=64086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.284582][ T30] audit: type=1400 audit(1785155648.369:1012): avc: denied { setopt } for pid=16902 comm="syz.2.4652" lport=42566 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 426.694061][ T30] audit: type=1400 audit(1785155648.779:1013): avc: denied { write } for pid=16919 comm="syz.2.4658" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.717764][T16920] binder: 16919:16920 ioctl c0306201 200000000040 returned -14 [ 427.151560][T16943] syz.5.4666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 427.233034][T16941] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 427.252062][ T5712] usb 4-1: USB disconnect, device number 53 [ 427.369372][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.403365][T16941] overlayfs: failed to set xattr on upper [ 427.581580][T16941] overlayfs: ...falling back to redirect_dir=nofollow. [ 427.701281][T16941] overlayfs: ...falling back to metacopy=off. [ 427.786097][ T30] audit: type=1400 audit(1785155649.869:1014): avc: denied { write } for pid=16930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.826323][T16941] overlayfs: ...falling back to index=off. [ 427.933616][T16941] overlayfs: ...falling back to uuid=null. [ 428.044121][ T30] audit: type=1400 audit(1785155650.129:1015): avc: denied { audit_write } for pid=16971 comm="syz.0.4676" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 428.174944][ T30] audit: type=1400 audit(1785155650.169:1016): avc: denied { write } for pid=16970 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.222702][ T5713] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 428.439606][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 428.462052][ T5713] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 428.494352][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.546642][ T5713] usb 6-1: Product: syz [ 428.571456][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 428.583552][ T5713] usb 6-1: Manufacturer: syz [ 428.602937][ T5713] usb 6-1: SerialNumber: syz [ 428.626086][ T5713] usb 6-1: config 0 descriptor?? [ 428.883197][ T5713] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 047 [ 428.934737][ T30] audit: type=1400 audit(1785155651.019:1017): avc: denied { write } for pid=16982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.126315][ T30] audit: type=1400 audit(1785155651.209:1018): avc: denied { write } for pid=17011 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.375029][T16969] i2c i2c-1: failure sending STOP [ 429.381801][ T5713] usb 6-1: USB disconnect, device number 47 [ 429.686722][ T30] audit: type=1400 audit(1785155651.769:1019): avc: denied { write } for pid=17019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.879378][ T30] audit: type=1400 audit(1785155651.959:1020): avc: denied { write } for pid=17039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.149404][ T5713] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 430.300642][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1048, setting to 64 [ 430.313187][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 430.326236][ T5713] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 430.337125][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.349663][ T5713] usb 5-1: config 0 descriptor?? [ 430.360801][T17041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.784809][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x1 [ 430.792575][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.800213][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.807235][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.815064][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.822211][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.829520][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.836895][ T5713] elecom 0003:056E:00FE.0039: unknown main item tag 0x0 [ 430.849902][ T5713] elecom 0003:056E:00FE.0039: hidraw0: USB HID v0.0d Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 431.061389][ T5712] usb 5-1: USB disconnect, device number 56 [ 431.089964][T17057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.335318][T17065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17065 comm=syz.3.4702 [ 432.769290][ T5712] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 432.876802][ T30] audit: type=1326 audit(1785155654.959:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.2.4722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ea39de99 code=0x0 [ 432.940333][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.952451][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.967487][ T5712] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 432.983358][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.004528][ T5712] usb 5-1: config 0 descriptor?? [ 433.419558][ T5713] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 433.580327][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.591529][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.601630][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.616944][ T5713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.628812][ T5712] usb 5-1: language id specifier not provided by device, defaulting to English [ 433.643332][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.674707][ T5713] usb 4-1: config 0 descriptor?? [ 433.986296][ T30] audit: type=1326 audit(1785155656.069:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 434.039821][ T5712] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input61 [ 434.067549][ T30] audit: type=1326 audit(1785155656.069:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 434.128197][ T5712] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input62 [ 434.164395][ T5713] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 434.255467][ T5712] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input63 [ 434.324631][ T30] audit: type=1326 audit(1785155656.099:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 434.437038][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.446626][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.462574][ T5712] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input64 [ 434.484245][ C0] plantronics 0003:047F:FFFF.003B: hid_field_extract() called with n (132) > 32! (kworker/u8:18) [ 434.641371][ T30] audit: type=1326 audit(1785155656.099:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 434.688603][ T5712] uclogic 0003:256C:006D.003A: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 434.794421][ T5849] usb 4-1: USB disconnect, device number 54 [ 434.857696][ T5712] usb 5-1: USB disconnect, device number 57 [ 434.962100][ T30] audit: type=1326 audit(1785155656.099:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 435.032335][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 435.081781][T17142] fido_id[17142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 435.202351][ T30] audit: type=1326 audit(1785155656.099:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 435.331935][T17157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.359739][ T5713] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 435.421328][ T5713] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 435.461233][ T30] audit: type=1326 audit(1785155656.139:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 435.607560][ T5713] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 435.654989][ T5713] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 435.700404][ T30] audit: type=1326 audit(1785155656.139:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 435.936761][ T30] audit: type=1326 audit(1785155656.229:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 436.154747][ T30] audit: type=1326 audit(1785155656.229:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01bc79de99 code=0x7ffc0000 [ 436.353738][T17192] netlink: 'syz.0.4752': attribute type 1 has an invalid length. [ 436.442346][T17192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.529003][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.538303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.590106][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.598402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.648734][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.659426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.704561][T17206] sock: sock_set_timeout: `syz.0.4755' (pid 17206) tries to set negative timeout [ 436.721155][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.730255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.792128][T17198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.330898][T17233] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.4766'. [ 437.975970][T17263] binder: 17261:17263 ioctl c0306201 0 returned -14 [ 438.119095][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'. [ 438.166014][T17269] netlink: 'syz.0.4783': attribute type 26 has an invalid length. [ 438.223139][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4783'. [ 438.262838][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'. [ 438.331546][T17269] netlink: 'syz.0.4783': attribute type 26 has an invalid length. [ 438.374660][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4783'. [ 438.756222][T17289] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 438.797318][T17289] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 439.312977][T17303] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4799'. [ 440.169652][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 440.178256][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 440.201548][ T5713] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 440.331808][ T5607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 440.338259][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 440.371831][T17333] tipc: Cannot configure node identity twice [ 440.397427][ T5713] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.423469][ T5713] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.470004][ T5713] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.498369][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.717475][ T5713] usb 5-1: usb_control_msg returned -32 [ 440.723337][ T5713] usbtmc 5-1:16.0: can't read capabilities [ 441.272663][ T5713] usb 5-1: USB disconnect, device number 58 [ 441.294094][T17358] overlayfs: missing 'workdir' [ 441.419155][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 441.419164][ T30] audit: type=1400 audit(1785155663.499:1037): avc: denied { write } for pid=17347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.584809][ T30] audit: type=1400 audit(1785155663.669:1038): avc: denied { write } for pid=17368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.743425][T17376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.002760][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4831'. [ 442.097573][T17394] fuse: Invalid rootmode [ 442.729282][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.769545][ T5713] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 442.949324][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 442.976622][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.049856][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.123782][ T5713] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.194267][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.289121][ T5713] usb 6-1: config 0 descriptor?? [ 443.323623][ T5713] hub 6-1:0.0: USB hub found [ 443.533950][ T5713] hub 6-1:0.0: 1 port detected [ 443.556241][ T30] audit: type=1400 audit(1785155665.639:1039): avc: denied { mounton } for pid=17443 comm="syz.4.4855" path="/1001/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 443.579293][T17444] overlayfs: workdir and upperdir must reside under the same mount [ 443.641108][T17446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4856'. [ 443.652146][T17446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4856'. [ 443.730266][ T10] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 443.941746][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 443.961842][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 443.976861][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 443.992087][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.011502][ T10] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 444.022692][T17458] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 444.042263][ T10] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 444.154143][ T5713] hub 6-1:0.0: activate --> -90 [ 444.262471][ T5849] usb 3-1: USB disconnect, device number 50 [ 444.300570][ T5849] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 444.340659][ T5849] garmin_gps 3-1:1.0: device disconnected [ 444.561834][ T5713] usb 6-1-port1: config error [ 444.585847][ T5713] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 444.593830][ T5849] usb 6-1: USB disconnect, device number 48 [ 444.688962][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4867'. [ 445.041859][T17485] syzkaller1: entered promiscuous mode [ 445.047432][T17485] syzkaller1: entered allmulticast mode [ 445.064431][T17485] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 445.158688][T17489] loop4: detected capacity change from 0 to 2640 [ 445.183129][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.203349][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.226764][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.262997][T17493] Buffer I/O error on dev loop4, logical block 73, async page read [ 445.296365][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.317889][T17493] Buffer I/O error on dev loop4, logical block 73, async page read [ 445.351288][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.365969][T17496] gretap0: entered promiscuous mode [ 445.384780][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.406188][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 445.417845][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.435473][T17489] Buffer I/O error on dev loop4, logical block 0, async page read [ 445.448423][T17496] gretap0: left promiscuous mode [ 445.455361][T17489] ldm_validate_partition_table(): Disk read failed. [ 445.469639][T17489] Dev loop4: unable to read RDB block 0 [ 445.481785][T17489] loop4: unable to read partition table [ 445.501386][T17489] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 445.879299][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 445.949254][ T5849] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.051828][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.074877][T17525] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 446.093093][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.104308][T17527] input: syz1 as /devices/virtual/input/input66 [ 446.113140][T17525] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 446.120764][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 446.134406][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 446.153561][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.193200][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.220157][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.265394][ T5849] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.288560][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.322539][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.345311][ T10] usb 6-1: config 0 descriptor?? [ 446.379100][ T5849] usb 4-1: Product: syz [ 446.404228][ T5849] usb 4-1: Manufacturer: syz [ 446.427484][ T5849] usb 4-1: SerialNumber: syz [ 446.449532][ T5849] usb 4-1: config 0 descriptor?? [ 446.476508][ T5849] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.524407][ T5849] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 446.826010][ T10] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 447.085574][ T5849] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 447.097790][ T5849] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 447.209000][ T30] audit: type=1400 audit(1785155669.289:1040): avc: denied { listen } for pid=17557 comm="syz.2.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 447.313810][ T5849] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 447.324617][ T5849] em28xx 4-1:0.0: No AC97 audio processor [ 447.337311][ T5849] usb 4-1: USB disconnect, device number 55 [ 447.354088][ T5849] em28xx 4-1:0.0: Disconnecting em28xx [ 447.364913][ T5849] em28xx 4-1:0.0: Freeing device [ 448.143481][T17505] usb 6-1: string descriptor 0 read error: -71 [ 448.370594][ T5849] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 448.520942][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3f4c00: rx timeout, send abort [ 448.533704][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.550069][ T5849] usb 4-1: config 0 has no interfaces? [ 448.560905][ T5849] usb 4-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 448.574355][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.584447][T17589] overlayfs: failed to clone upperpath [ 448.591850][ T5849] usb 4-1: Product: syz [ 448.601029][ T5849] usb 4-1: Manufacturer: syz [ 448.611056][ T5849] usb 4-1: SerialNumber: syz [ 448.622613][ T5849] usb 4-1: config 0 descriptor?? [ 448.885523][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.898051][T17604] 9p: Bad value for 'rfdno' [ 448.907703][ T5712] usb 6-1: USB disconnect, device number 49 [ 448.958661][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.984771][ T30] audit: type=1400 audit(1785155671.069:1041): avc: denied { execute } for pid=17606 comm="syz.4.4925" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=67417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 449.029145][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3f4c00: abort rx timeout. Force session deactivation [ 449.062021][ T5849] usb 4-1: USB disconnect, device number 56 [ 449.313114][ T30] audit: type=1400 audit(1785155671.399:1042): avc: denied { write } for pid=17614 comm="syz.2.4928" name="functions" dev="configfs" ino=41415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.425240][ T30] audit: type=1400 audit(1785155671.429:1043): avc: denied { write } for pid=17614 comm="syz.2.4928" name="functions" dev="configfs" ino=41415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.579657][ T5849] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.658234][ T30] audit: type=1400 audit(1785155671.739:1044): avc: denied { write } for pid=17628 comm="syz.2.4934" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.778433][ T5849] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 449.803308][ T5849] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 449.862437][ T5849] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 449.907245][ T5849] usb 4-1: config 220 has no interface number 2 [ 449.933800][ T5849] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 449.991861][ T5849] usb 4-1: config 220 interface 0 has no altsetting 0 [ 450.034023][ T5849] usb 4-1: config 220 interface 76 has no altsetting 0 [ 450.077130][ T5849] usb 4-1: config 220 interface 1 has no altsetting 0 [ 450.112375][ T5849] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 450.140859][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.185796][ T5849] usb 4-1: Product: syz [ 450.206300][ T5849] usb 4-1: Manufacturer: syz [ 450.239238][ T5849] usb 4-1: SerialNumber: syz [ 450.483276][ T5849] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 450.510063][ T5849] uvcvideo 4-1:220.0: No valid video chain found. [ 450.535633][ T5849] usb 4-1: selecting invalid altsetting 0 [ 450.598816][ T5849] usb 4-1: selecting invalid altsetting 0 [ 450.644745][ T5849] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 450.682875][ T30] audit: type=1326 audit(1785155672.759:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17647 comm="syz.5.4942" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x0 [ 450.746671][ T5849] usb 4-1: USB disconnect, device number 57 [ 450.854488][T17650] kvm: MONITOR instruction emulated as NOP! [ 451.499398][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 451.651517][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.668051][ T10] usb 4-1: config 0 has no interface number 0 [ 451.714304][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 451.742459][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.774514][ T10] usb 4-1: Product: syz [ 451.792197][ T10] usb 4-1: Manufacturer: syz [ 451.808653][ T10] usb 4-1: SerialNumber: syz [ 451.844743][ T10] usb 4-1: config 0 descriptor?? [ 451.914569][T17682] xt_hashlimit: size too large, truncated to 1048576 [ 452.077670][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 452.213321][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.268838][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 452.311980][ T10] usb 4-1: media controller created [ 452.370970][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.999367][ T5849] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 453.160467][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.171680][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.181674][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.195380][ T5849] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.204871][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.214482][ T5849] usb 6-1: config 0 descriptor?? [ 453.410970][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 453.438152][ T10] usb 4-1: USB disconnect, device number 58 [ 453.645587][ T5849] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 453.924148][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4966'. [ 453.961850][T17711] netlink: 'syz.4.4966': attribute type 7 has an invalid length. [ 454.008080][T17711] netlink: 'syz.4.4966': attribute type 8 has an invalid length. [ 454.046102][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4966'. [ 454.144291][T17720] binder: 17719:17720 ioctl c0306201 200000000080 returned -14 [ 454.990846][ C0] plantronics 0003:047F:FFFF.003F: usb_submit_urb(ctrl) failed: -1 [ 455.014370][ T30] audit: type=1400 audit(1785155677.069:1046): avc: denied { setopt } for pid=17747 comm="syz.2.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 455.093501][T17754] input: syz1 as /devices/virtual/input/input68 [ 455.781440][ T5849] usb 6-1: USB disconnect, device number 50 [ 456.053275][ T5713] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 456.096039][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4994'. [ 456.126514][ T5713] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 456.289260][ T5849] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 456.448460][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 456.481168][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 456.535030][ T5849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.545182][T17789] netlink: 'syz.4.4999': attribute type 30 has an invalid length. [ 456.578540][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4999'. [ 456.590789][ T5849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.626751][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 456.647264][ T5849] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 456.700184][T17789] netlink: 'syz.4.4999': attribute type 30 has an invalid length. [ 456.728409][ T5849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 456.761063][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4999'. [ 456.797184][ T5849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 456.888980][ T5849] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.984651][ T5849] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.075065][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.213042][T17803] net_ratelimit: 2 callbacks suppressed [ 457.213052][T17803] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 457.326037][ T5849] usb 6-1: GET_CAPABILITIES returned 0 [ 457.353628][ T5849] usbtmc 6-1:16.0: can't read capabilities [ 457.490748][ T5712] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 457.595295][ T5849] usb 6-1: USB disconnect, device number 51 [ 457.660966][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 457.682681][ T5712] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 457.704338][ T5712] usb 3-1: config 0 has no interface number 0 [ 457.732055][ T5712] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 457.766130][ T5712] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 457.792061][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.830933][ T5712] usb 3-1: Product: syz [ 457.856941][ T5712] usb 3-1: Manufacturer: syz [ 457.876444][ T5712] usb 3-1: SerialNumber: syz [ 457.911667][ T5712] usb 3-1: config 0 descriptor?? [ 457.931498][T17806] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 458.056393][T17822] overlayfs: failed to clone lowerpath [ 458.128157][T17824] syzkaller0 speed is unknown, defaulting to 1000 [ 458.175336][T17806] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 458.429488][ T5713] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 458.590883][ T5713] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 458.614868][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.646455][ T5713] usb 6-1: config 0 descriptor?? [ 458.788125][T17836] loop5: detected capacity change from 0 to 7 [ 458.813549][T17836] Dev loop5: unable to read RDB block 7 [ 458.835038][T17836] loop5: AHDI p1 p3 p4 [ 458.851150][T17836] loop5: partition table partially beyond EOD, truncated [ 458.877415][T17836] loop5: p1 size 100663296 extends beyond EOD, truncated [ 458.919490][T17836] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 458.963471][T17837] Dev loop5: unable to read RDB block 7 [ 458.979360][T17837] loop5: AHDI p1 p3 p4 [ 458.989898][T17837] loop5: partition table partially beyond EOD, truncated [ 459.014068][T17837] loop5: p1 size 100663296 extends beyond EOD, truncated [ 459.042009][T17837] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 459.213397][ T8569] udevd[8569]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 459.224875][T11883] udevd[11883]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 459.237470][ T5712] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 459.277558][ T5712] asix 3-1:0.188: probe with driver asix failed with error -71 [ 459.300508][ T8569] udevd[8569]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 459.313789][T11883] udevd[11883]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 459.329622][ T5712] usb 3-1: USB disconnect, device number 51 [ 459.423216][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5022'. [ 459.693546][ T5713] usb 6-1: Cannot set autoneg [ 459.698442][ T5713] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 459.904445][ T5713] usb 6-1: USB disconnect, device number 52 [ 460.389247][ T5713] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 460.472974][T17914] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 460.490718][T17914] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 460.540487][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 460.557992][ T5713] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 460.588057][ T5713] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 460.612109][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 460.658060][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.730724][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 460.767307][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 460.826971][ T5713] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 460.857952][T17928] xt_hashlimit: size too large, truncated to 1048576 [ 460.867941][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.904529][ T5713] usb 3-1: config 0 descriptor?? [ 461.167813][ T5713] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.231717][ T5713] usb 3-1: USB disconnect, device number 52 [ 461.266195][ T5713] usblp0: removed [ 461.625354][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 461.648150][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 461.720228][ T5713] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 461.795498][T17964] overlayfs: failed to clone lowerpath [ 461.822204][T17964] overlayfs: failed to clone lowerpath [ 461.831963][T17966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.839547][ T30] audit: type=1400 audit(1785155683.919:1047): avc: denied { mount } for pid=17965 comm="syz.5.5055" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 461.873566][T17966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.899482][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 461.908899][ T30] audit: type=1400 audit(1785155683.919:1048): avc: denied { mounton } for pid=17965 comm="syz.5.5055" path="/685/file0" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 461.955893][ T5713] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.976572][ T5713] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 462.007570][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 462.037072][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.074293][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.094187][ T30] audit: type=1400 audit(1785155684.179:1049): avc: denied { unmount } for pid=9621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 462.144400][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.197084][ T5713] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.234528][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.278096][ T5713] usb 3-1: config 0 descriptor?? [ 462.436093][ T5849] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 462.484156][ T5849] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.514752][ T5713] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 462.773265][ T5713] usb 3-1: USB disconnect, device number 53 [ 462.806212][ T5713] usblp0: removed [ 463.219993][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5075'. [ 463.508589][T18033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5080'. [ 463.560509][T18033] bond0: entered promiscuous mode [ 463.575911][T18033] gretap0: entered promiscuous mode [ 463.594094][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5080'. [ 463.616770][T18033] hsr1: entered promiscuous mode [ 463.703110][T18040] overlayfs: failed to clone upperpath [ 463.851833][T18045] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 463.957701][ T30] audit: type=1400 audit(1785155686.039:1050): avc: denied { search } for pid=18043 comm="syz.2.5085" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.081329][ T30] audit: type=1400 audit(1785155686.069:1051): avc: denied { search } for pid=18043 comm="syz.2.5085" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.125196][T18045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.150481][T18045] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 464.180536][T18045] audit: backlog limit exceeded [ 464.193750][ T30] audit: type=1400 audit(1785155686.069:1052): avc: denied { search } for pid=18043 comm="syz.2.5085" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.247218][T18045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.184271][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'. [ 466.430611][T18105] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 466.461268][T18105] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 467.063458][T18134] binder: 18132:18134 ioctl c0306201 200000000640 returned -22 [ 467.118484][ T5614] block nbd3: Receive control failed (result -107) [ 467.250385][T18102] nbd3: detected capacity change from 0 to 8589934592 [ 467.592928][T18102] block nbd3: shutting down sockets [ 467.680494][T18160] fuse: Bad value for 'fd' [ 467.867906][T18167] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 467.874872][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5124'. [ 469.393122][T18248] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5157'. [ 469.653880][T18254] batadv_slave_1: entered allmulticast mode [ 469.676130][T18253] batadv_slave_1: left allmulticast mode [ 470.249549][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.260053][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.267247][ C0] bridge0: topology change detected, propagating [ 470.273725][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.280919][ C0] bridge0: topology change detected, propagating [ 470.419269][ T5712] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 470.571544][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 470.578134][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.589633][ T5712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.598706][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.621719][ T5712] usb 3-1: config 0 descriptor?? [ 470.844195][ T5712] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 470.899063][ T30] kauditd_printk_skb: 661 callbacks suppressed [ 470.899074][ T30] audit: type=1804 audit(1785155692.979:1121): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.5176" name="/newroot/1005/file1" dev="tmpfs" ino=5195 res=1 errno=0 [ 471.064418][ T5712] usb 3-1: USB disconnect, device number 54 [ 471.070403][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 471.160389][T18297] kvm: user requested TSC rate below hardware speed [ 471.426036][ T30] audit: type=1400 audit(1785155693.509:1122): avc: denied { audit_read } for pid=18311 comm="syz.0.5186" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 471.529409][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.750730][T18331] netlink: 'syz.3.5194': attribute type 19 has an invalid length. [ 471.772683][T18330] veth0_to_team: entered promiscuous mode [ 471.809873][T18330] veth0_to_team: left promiscuous mode [ 471.866055][T18331] netlink: 'syz.3.5194': attribute type 19 has an invalid length. [ 472.040453][T18347] 9p: Bad value for 'rfdno' [ 472.295125][T18361] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5209'. [ 472.400358][T18365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5209'. [ 472.527945][T18369] binder: 18368:18369 ioctl c0306201 2000000001c0 returned -22 [ 472.606526][T18373] input: syz0 as /devices/virtual/input/input69 [ 472.930196][ T30] audit: type=1400 audit(1785155695.009:1123): avc: denied { read write } for pid=18385 comm="syz.5.5220" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.092096][ T30] audit: type=1400 audit(1785155695.009:1124): avc: denied { open } for pid=18385 comm="syz.5.5220" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.230456][ T30] audit: type=1400 audit(1785155695.039:1125): avc: denied { map } for pid=18385 comm="syz.5.5220" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.379015][ T30] audit: type=1400 audit(1785155695.039:1126): avc: denied { execute } for pid=18385 comm="syz.5.5220" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.582806][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 473.612353][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 473.684766][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 473.717750][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 473.747316][T18428] tipc: Started in network mode [ 473.776316][T18428] tipc: Node identity 5af19aeea67a, cluster identity 4711 [ 473.825039][T18428] tipc: Enabled bearer , priority 0 [ 473.866058][T18432] tipc: Disabling bearer [ 473.980637][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 474.014143][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 474.021810][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 474.056289][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 474.071214][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5242'. [ 474.300561][T18415] ceph: No mds server is up or the cluster is laggy [ 474.393716][T18421] ceph: No mds server is up or the cluster is laggy [ 474.545705][T18462] SELinux: invalid class [ 474.580098][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 474.586055][ T5849] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 474.615590][T18462] SELinux: failed to load policy [ 474.623772][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 474.645843][ T10] libceph: connect (1)[c::]:6789 error -101 [ 474.682000][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 474.799746][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 474.815977][ T30] audit: type=1326 audit(1785155696.899:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.2.5252" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ea39de99 code=0x0 [ 474.865918][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 474.943418][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 475.000713][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 475.022795][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 475.041757][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 475.082120][ T5849] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 475.097825][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.118891][ T5849] usb 6-1: Product: syz [ 475.125525][T18476] fuse: Bad value for 'fd' [ 475.135075][ T5849] usb 6-1: Manufacturer: syz [ 475.144860][T18478] netlink: 'syz.3.5255': attribute type 7 has an invalid length. [ 475.154589][ T5849] usb 6-1: SerialNumber: syz [ 475.165089][ T5849] usb 6-1: config 0 descriptor?? [ 475.185269][T18478] netlink: 'syz.3.5255': attribute type 7 has an invalid length. [ 475.586101][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 475.612748][ T5849] input input70: Device does not respond to id packet M [ 475.670677][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 475.706560][ T5849] input input70: Device does not respond to id packet P [ 475.741944][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 475.767795][ T5849] input input70: Device does not respond to id packet B [ 475.810860][ T5849] input input70: Limiting number of effects to 32 (device reports 230) [ 475.906827][T18503] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 475.921548][T18503] overlayfs: missing 'lowerdir' [ 476.012710][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 476.031574][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 476.052921][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 476.082794][ T5849] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 476.128450][ T5849] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 476.220387][ T5849] usb 6-1: USB disconnect, device number 53 [ 476.234379][ T4962] iforce 6-1:0.0: usb_submit_urb failed -19 [ 476.265678][ T4962] iforce 6-1:0.0: usb_submit_urb failed -19 [ 476.287460][ T4962] iforce 6-1:0.0: usb_submit_urb failed -19 [ 476.480569][T18518] binder: 18517:18518 unknown command 0 [ 476.491869][T18518] binder: 18517:18518 ioctl c0306201 200000000080 returned -22 [ 476.926265][T18539] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: 0 [ 476.960353][T18539] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 477.017498][T18539] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 477.914439][T18574] xt_hashlimit: size too large, truncated to 1048576 [ 478.589022][T18597] netlink: 'syz.3.5305': attribute type 1 has an invalid length. [ 478.778377][T18597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.994360][T18622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5306'. [ 479.072893][ T30] audit: type=1326 audit(1785155701.159:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.0.5315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1236f9de99 code=0x0 [ 479.493576][T18640] xt_hashlimit: size too large, truncated to 1048576 [ 479.629286][ T5713] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 479.789278][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 479.796786][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.819622][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.843899][ T5712] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 479.865221][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 479.902089][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.954807][ T5713] usb 3-1: config 0 descriptor?? [ 479.974810][ T30] audit: type=1800 audit(1785155702.059:1129): pid=18659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5331" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 480.039700][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.079643][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.125039][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 480.184615][ T5712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.218352][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.244878][ T5712] usb 6-1: Product: syz [ 480.257253][ T5712] usb 6-1: Manufacturer: syz [ 480.268938][ T5712] usb 6-1: SerialNumber: syz [ 480.296575][T18646] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.418022][ T5713] HID 045e:07da: Invalid code 65791 type 1 [ 480.447708][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0042/input/input71 [ 480.504144][ T5713] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 480.918371][T18685] netlink: 'syz.4.5342': attribute type 1 has an invalid length. [ 480.944836][T18685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.976125][T18685] bond4: (slave geneve2): making interface the new active one [ 480.986509][T18685] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 480.997036][T18127] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.014656][T18127] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.036036][T18127] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.049861][ T5713] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 481.072353][T18127] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.212786][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.255859][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.297862][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.316379][ T30] audit: type=1400 audit(1785155703.399:1130): avc: denied { connect } for pid=18695 comm="syz.4.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.355431][ T5849] usb 3-1: USB disconnect, device number 55 [ 481.366144][ T5712] cdc_ncm 6-1:1.0: bind() failure [ 481.404448][ T5713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.415563][ T5712] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 481.462687][ T5712] cdc_ncm 6-1:1.1: bind() failure [ 481.476084][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.530416][ T5713] usb 4-1: config 0 descriptor?? [ 481.616447][ T5712] usb 6-1: USB disconnect, device number 54 [ 481.986389][ T5713] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 482.360998][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5362'. [ 482.431586][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5362'. [ 482.629842][T18736] overlayfs: failed to clone lowerpath [ 482.800339][ T5713] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 482.981188][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 482.992147][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 483.006234][ T5713] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 483.016062][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.024388][ T5713] usb 3-1: Product: syz [ 483.028790][ T5713] usb 3-1: Manufacturer: syz [ 483.033777][ T5713] usb 3-1: SerialNumber: syz [ 483.048122][ T5713] usb 3-1: config 0 descriptor?? [ 483.066311][T18734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.074132][T18734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.964801][ T30] audit: type=1400 audit(1785155706.049:1131): avc: denied { connect } for pid=18762 comm="syz.0.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 484.141160][ T5849] usb 4-1: USB disconnect, device number 59 [ 484.252309][ T5712] bridge0: entered promiscuous mode [ 484.789867][ T5712] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 484.949690][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 484.963890][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.000683][ T5712] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 485.034812][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.068506][ T5712] usb 4-1: config 0 descriptor?? [ 485.125214][T18807] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 485.144242][T18807] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 485.304974][ T5712] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 485.369434][T18734] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 485.388463][ T5713] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 485.415659][ T5713] usb 3-1: USB disconnect, device number 56 [ 485.560609][T18826] fuse: fd is not a fuse device [ 485.599490][ T5849] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 485.753002][T18841] fuse: fd is not a fuse device [ 485.760008][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 485.770771][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 485.792635][ T5849] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 485.814150][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.827756][T11122] usb 4-1: USB disconnect, device number 60 [ 485.851692][ T5849] usb 6-1: config 0 descriptor?? [ 486.137102][T18855] fuse: fd is not a fuse device [ 486.235720][T18859] xt_hashlimit: size too large, truncated to 1048576 [ 486.298064][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.334722][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.353349][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.376954][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.406455][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.428504][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.445759][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.465662][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.482274][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.491229][ T30] audit: type=1400 audit(1785155708.579:1132): avc: denied { setattr } for pid=18864 comm="syz.3.5422" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.521311][ T5849] apple 0003:05AC:027D.0044: unknown main item tag 0x0 [ 486.530943][T11122] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 486.568833][ T5849] apple 0003:05AC:027D.0044: hidraw0: USB HID v7e.ff Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0 [ 486.636233][ T5849] usb 6-1: USB disconnect, device number 55 [ 486.694938][T18866] fido_id[18866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 486.710266][T11122] usb 3-1: Using ep0 maxpacket: 32 [ 486.733128][T11122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.764323][T11122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.804515][T11122] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 486.832377][T11122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.848944][T18874] overlayfs: failed to clone upperpath [ 486.861030][T11122] usb 3-1: config 0 descriptor?? [ 487.201838][ T5849] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 487.305637][T11122] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 487.364577][ T5849] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 487.389924][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.407869][ T5849] usb 4-1: Product: syz [ 487.418319][ T5849] usb 4-1: Manufacturer: syz [ 487.428387][ T5849] usb 4-1: SerialNumber: syz [ 487.440601][ T5849] r8152-cfgselector 4-1: Unknown version 0x0000 [ 487.582213][ T5712] usb 3-1: USB disconnect, device number 57 [ 487.649439][T11122] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 487.809443][T11122] usb 6-1: Using ep0 maxpacket: 32 [ 487.838464][T11122] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 487.847626][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.856877][T11122] usb 6-1: Product: syz [ 487.871137][T11122] usb 6-1: Manufacturer: syz [ 487.880353][T11122] usb 6-1: SerialNumber: syz [ 487.894111][T11122] usb 6-1: config 0 descriptor?? [ 488.324086][T11122] airspy 6-1:0.0: Board ID: 00 [ 488.335441][T11122] airspy 6-1:0.0: Firmware version: [ 488.662813][ T5849] r8152-cfgselector 4-1: Unknown version 0x0000 [ 488.685391][ T5849] r8152-cfgselector 4-1: USB disconnect, device number 61 [ 488.709540][ T5713] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 488.829697][T18925] overlayfs: failed to clone upperpath [ 488.880663][ T5713] usb 3-1: not running at top speed; connect to a high speed hub [ 488.897298][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.917402][ T5713] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 488.938130][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.957100][ T5713] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 488.980388][ T5713] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 489.135595][T11122] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 489.147993][T11122] airspy 6-1:0.0: Registered as swradio24 [ 489.154391][T11122] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 489.175145][T11122] usb 6-1: USB disconnect, device number 56 [ 489.271369][ T5713] usb 3-1: USB disconnect, device number 58 [ 489.314571][ T5713] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 489.348360][ T5713] garmin_gps 3-1:1.0: device disconnected [ 489.489051][T18935] overlayfs: upper fs does not support file handles, falling back to index=off. [ 489.500043][ T30] audit: type=1400 audit(1785155711.589:1133): avc: denied { listen } for pid=18936 comm="syz.4.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.527108][T18935] overlayfs: failed to set uuid (1034/file2, err=-1); falling back to uuid=null. [ 489.538476][ T30] audit: type=1400 audit(1785155711.589:1134): avc: denied { accept } for pid=18936 comm="syz.4.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.593355][T18935] evm: overlay not supported [ 491.202982][T18987] tls_set_device_offload_rx: netdev not found [ 491.226404][ T30] audit: type=1400 audit(1785155713.299:1135): avc: denied { sys_admin } for pid=18982 comm="syz.2.5471" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 491.462872][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5478'. [ 492.539369][T11122] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 492.740968][T11122] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 492.771608][T11122] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 492.817387][T11122] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.833437][T11122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.849361][T11122] usb 6-1: Product: syz [ 492.856763][T11122] usb 6-1: Manufacturer: syz [ 492.866983][T11122] usb 6-1: SerialNumber: syz [ 493.206831][ T5713] hid_parser_main: 469 callbacks suppressed [ 493.206846][ T5713] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 493.323698][ T5713] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 493.915080][T11122] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 493.953627][T11122] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 493.985999][ T30] audit: type=1400 audit(1785155716.069:1136): avc: denied { read write } for pid=19076 comm="syz.2.5510" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 494.021968][T11122] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 494.098920][ T30] audit: type=1400 audit(1785155716.069:1137): avc: denied { open } for pid=19076 comm="syz.2.5510" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 494.175638][T11122] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 494.197958][T11122] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 494.268091][T19084] netlink: 'syz.0.5513': attribute type 1 has an invalid length. [ 494.328327][T19084] bond3: entered promiscuous mode [ 494.343421][T19084] bond3: entered allmulticast mode [ 494.356906][T19084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.377064][ T5849] usb 6-1: USB disconnect, device number 57 [ 494.383677][ T5849] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 494.426111][T19086] erspan1: entered allmulticast mode [ 494.472265][T19086] bond3: (slave erspan1): making interface the new active one [ 494.512109][T19086] erspan1: entered promiscuous mode [ 494.543211][T19086] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 495.426217][ T30] audit: type=1400 audit(1785155717.509:1138): avc: denied { write } for pid=19096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.738789][ T30] audit: type=1400 audit(1785155717.819:1139): avc: denied { write } for pid=19142 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.853637][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.860247][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.891841][ T30] audit: type=1400 audit(1785155717.959:1140): avc: denied { write } for pid=19145 comm="syz.4.5528" lport=53037 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 495.922759][ T5849] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 496.078182][ T30] audit: type=1400 audit(1785155718.109:1141): avc: denied { cmd } for pid=19151 comm="iou-wrk-19152" path="socket:[74737]" dev="sockfs" ino=74737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 496.136227][T19159] netlink: 'syz.0.5532': attribute type 1 has an invalid length. [ 496.149702][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 496.191886][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.216003][T19162] overlayfs: failed to clone upperpath [ 496.238028][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.266399][T19159] bond4: entered promiscuous mode [ 496.296980][T19159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.309298][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 496.383374][ T5849] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 496.426543][T19169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.440604][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.487605][ T5849] usb 3-1: config 0 descriptor?? [ 496.514833][T19169] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 496.573295][T19169] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 496.628381][T19169] bond4: (slave ipip0): making interface the new active one [ 496.666041][T19169] ipip0: entered promiscuous mode [ 496.682591][ T30] audit: type=1400 audit(1785155718.769:1142): avc: denied { write } for pid=19153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.730630][T19169] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 496.945249][ T30] audit: type=1400 audit(1785155719.029:1143): avc: denied { write } for pid=19178 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.970640][ T5849] microsoft 0003:045E:07DA.0047: ignoring exceeding usage max [ 497.096664][ T5849] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0047/input/input72 [ 497.254577][ T5849] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 497.401715][ T5849] usb 3-1: USB disconnect, device number 59 [ 497.594669][T19191] fido_id[19191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 497.671930][ T30] audit: type=1400 audit(1785155719.749:1144): avc: denied { associate } for pid=19199 comm="syz.3.5539" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 499.403881][T19263] netlink: 'syz.2.5555': attribute type 1 has an invalid length. [ 499.570450][T19263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.699089][T19265] bond4: (slave geneve5): making interface the new active one [ 499.756803][T19265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.823482][T19265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.879589][T19265] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 499.951480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.040809][T19285] fuse: fd is not a fuse device [ 500.407388][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.491271][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.597064][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.893178][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.451528][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.476773][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.753424][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.848449][ T30] audit: type=1400 audit(1785155723.929:1145): avc: denied { create } for pid=19338 comm="syz.0.5575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 502.024207][ T30] audit: type=1400 audit(1785155724.019:1146): avc: denied { create } for pid=19342 comm="syz.2.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 502.067914][T19351] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 502.122333][T19351] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 502.174155][ T30] audit: type=1400 audit(1785155724.019:1147): avc: denied { connect } for pid=19342 comm="syz.2.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 504.316212][T19430] netlink: 820 bytes leftover after parsing attributes in process `syz.2.5613'. [ 504.359493][T19430] netlink: 820 bytes leftover after parsing attributes in process `syz.2.5613'. [ 504.506368][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5615'. [ 504.580455][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5615'. [ 504.599999][ T30] audit: type=1326 audit(1785155726.679:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.5.5614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01bc79de99 code=0x0 [ 504.752692][ T30] audit: type=1326 audit(1785155726.839:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ea39de99 code=0x7ffc0000 [ 504.864564][ T30] audit: type=1326 audit(1785155726.839:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb2ea35e6ce code=0x7ffc0000 [ 504.962526][ T30] audit: type=1326 audit(1785155726.839:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2ea397c17 code=0x7ffc0000 [ 505.066781][ T30] audit: type=1326 audit(1785155726.839:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2ea33f219 code=0x7ffc0000 [ 505.131411][ C0] net_ratelimit: 3 callbacks suppressed [ 505.131424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.193227][ T30] audit: type=1326 audit(1785155726.839:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb2ea39de99 code=0x7ffc0000 [ 505.334282][ T10] Process accounting resumed [ 505.375269][ T30] audit: type=1326 audit(1785155726.839:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.2.5618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ea39de99 code=0x7ffc0000 [ 505.471360][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.740840][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5615'. [ 505.753345][T19461] batman_adv: batadv0: Adding interface: dummy0 [ 505.773140][T19461] batman_adv: batadv0: Interface activated: dummy0 [ 505.826288][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5615'. [ 505.887898][T19463] batadv0: mtu less than device minimum [ 505.911386][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.923039][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.933566][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.944074][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.954585][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.965088][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 505.975585][T19463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 506.892808][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5644'. [ 507.510077][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 507.510088][ T30] audit: type=1400 audit(1785155729.599:1218): avc: denied { read } for pid=19536 comm="syz.3.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 507.619236][ T5849] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 507.781713][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 507.797740][ T5849] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 507.818614][ T5849] usb 6-1: config 1 has no interface number 0 [ 507.850528][ T5849] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 507.900046][ T5849] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 507.967468][ T5849] usb 6-1: config 1 interface 105 has no altsetting 0 [ 508.011456][ T5849] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 508.047449][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 508.098954][ T5849] usb 6-1: Product: syz [ 508.118012][ T5849] usb 6-1: Manufacturer: syz [ 508.138059][ T5849] usb 6-1: SerialNumber: syz [ 508.159840][T19531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 508.188730][T19531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 508.415513][T19550] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.422819][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.648365][T19531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 508.671996][T19531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 509.002804][T19550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.038364][T19550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.096194][ T5849] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 509.114451][ T5849] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 509.285306][T19550] bond1: left promiscuous mode [ 509.296776][T19550] vxlan1: left promiscuous mode [ 509.302693][T19550] vxlan1: left allmulticast mode [ 509.315984][T19550] vxlan2: left promiscuous mode [ 509.324002][T19550] vxlan2: left allmulticast mode [ 509.424617][T19550] bond3: left promiscuous mode [ 509.436245][T19550] erspan1: left promiscuous mode [ 509.442441][T19550] bond3: left allmulticast mode [ 509.454752][T19550] erspan1: left allmulticast mode [ 509.465570][T19550] bond4: left promiscuous mode [ 509.470966][T19550] ipip0: left promiscuous mode [ 509.508338][T11657] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.517487][ T5849] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f0:40:ad:97:ea:c2 [ 509.561237][T11657] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.606304][ T5849] usb 6-1: USB disconnect, device number 58 [ 509.616274][T11657] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.672711][ T5849] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 509.685052][T11657] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.710917][T11657] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.727858][T11657] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.754889][T11657] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.765468][ T5849] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 509.781265][ T5849] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 509.792622][T11657] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.817515][ T5849] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 509.841037][T19585] fuse: Bad value for 'fd' [ 510.167648][ T30] audit: type=1400 audit(1785155732.249:1219): avc: denied { write } for pid=19584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.298642][ T30] audit: type=1400 audit(1785155732.379:1220): avc: denied { write } for pid=19605 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.527619][T19621] netlink: 'syz.5.5680': attribute type 1 has an invalid length. [ 510.565864][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5681'. [ 510.595660][T19623] overlayfs: failed to get inode (-116) [ 510.618434][T19621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.637275][T19623] overlayfs: failed to get inode (-116) [ 510.646539][T19620] syzkaller0 speed is unknown, defaulting to 1000 [ 510.681046][T19629] bond1: (slave bridge1): making interface the new active one [ 510.735150][T19629] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 510.980339][ T30] audit: type=1400 audit(1785155733.059:1221): avc: denied { write } for pid=19614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.120602][T11657] net_ratelimit: 16 callbacks suppressed [ 511.120614][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.245188][ T30] audit: type=1400 audit(1785155733.329:1222): avc: denied { write } for pid=19649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.798729][T19650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.836058][T19650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.020338][T19650] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 512.267887][T11122] syz1: Port: 1 Link DOWN [ 512.272897][T17859] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.290072][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.314810][T17859] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.344563][T17859] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 512.371632][T17859] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.403939][T17859] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.438342][T17859] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 512.491277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.507473][T17859] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.563871][T17859] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.617684][T17859] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 512.677537][T17859] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.738213][T17859] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.794737][T17859] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 513.277394][T19713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 513.420795][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.474825][T19718] file system registered [ 513.900640][T19732] overlayfs: failed to resolve './cgroup': -2 [ 513.955567][T19737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.536296][T19766] netlink: 'syz.5.5731': attribute type 1 has an invalid length. [ 514.549588][ T30] audit: type=1400 audit(1785155736.629:1223): avc: denied { watch watch_reads } for pid=19763 comm="syz.4.5730" path="/1275/file1" dev="tmpfs" ino=6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 514.579600][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.649565][ T5713] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 514.695598][T19766] bond2: (slave geneve2): making interface the new active one [ 514.720195][T19766] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 514.748853][T18119] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 514.782581][T18119] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 514.813054][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.826582][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 514.841034][T18119] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 514.862310][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.896129][T18119] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 514.911213][T19781] input: syz0 as /devices/virtual/input/input73 [ 514.925644][ T5713] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 514.952440][T19778] netlink: 'syz.3.5733': attribute type 29 has an invalid length. [ 514.986801][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.034241][ T5713] usb 3-1: config 0 descriptor?? [ 515.046317][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 515.136825][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 515.208960][T19786] netlink: 'syz.3.5733': attribute type 29 has an invalid length. [ 515.278931][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 515.574512][T19807] overlayfs: failed to clone upperpath [ 515.604016][T19807] overlayfs: failed to clone upperpath [ 515.705254][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.915172][T19817] gretap1: entered promiscuous mode [ 516.291705][ T5713] uclogic 0003:256C:006D.0048: v1 frame probing failed: -71 [ 516.304349][ T5713] uclogic 0003:256C:006D.0048: failed probing parameters: -71 [ 516.337691][ T5713] uclogic 0003:256C:006D.0048: probe with driver uclogic failed with error -71 [ 516.375940][ T5713] usb 3-1: USB disconnect, device number 60 [ 516.843646][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.867011][T19831] SELinux: failed to load policy [ 517.223893][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5755'. [ 517.392917][T19849] netlink: 'syz.3.5759': attribute type 1 has an invalid length. [ 517.413543][T19849] netlink: 'syz.3.5759': attribute type 4 has an invalid length. [ 517.443498][T19849] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5759'. [ 517.619373][ T5713] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 517.770626][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 517.777384][ T5713] usb 3-1: config 8 has an invalid interface number: 97 but max is 0 [ 517.786535][ T5713] usb 3-1: config 8 has no interface number 0 [ 517.799511][ T5713] usb 3-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 517.836009][ T5713] usb 3-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 517.875074][ T5713] usb 3-1: config 8 interface 97 has no altsetting 0 [ 517.901505][ T5713] usb 3-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 517.912402][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.932989][ T5713] usb 3-1: Product: syz [ 517.946975][ T5713] usb 3-1: Manufacturer: syz [ 517.966344][ T5713] usb 3-1: SerialNumber: syz [ 517.991160][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.106028][T19790] Set syz1 is full, maxelem 65536 reached [ 518.178969][T19866] xt_hashlimit: size too large, truncated to 1048576 [ 518.209594][ T5713] hub 3-1:8.97: bad descriptor, ignoring hub [ 518.221772][ T5713] hub 3-1:8.97: probe with driver hub failed with error -5 [ 518.247681][ T5713] sierra 3-1:8.97: Sierra USB modem converter detected [ 518.275692][ T5713] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 518.313320][ T5713] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 518.360440][ T5713] usb 3-1: USB disconnect, device number 61 [ 518.462419][ T5713] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 518.479462][ T5713] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 518.488758][ T5713] sierra 3-1:8.97: device disconnected [ 519.105151][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.113410][T11122] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 519.262632][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5783'. [ 519.292451][T11122] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 519.311600][T11122] usb 3-1: config 1 has no interface number 0 [ 519.339400][T11122] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 519.399868][T11122] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 80 [ 519.438722][T11122] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 519.483480][T11122] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 519.512819][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.542253][T11122] usb 3-1: Product: syz [ 519.550811][T11122] usb 3-1: Manufacturer: syz [ 519.561889][T11122] usb 3-1: SerialNumber: syz [ 519.574200][T19891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.815783][T19891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.859150][T11122] usb 3-1: No status endpoint found [ 520.103697][T11122] usb 3-1: USB disconnect, device number 62 [ 520.239620][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.183953][T19978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.195682][T19979] gadgetfs: bound to dummy_udc driver [ 521.359958][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.407323][ T30] audit: type=1400 audit(1785155743.489:1224): avc: denied { write } for pid=19986 comm="syz.4.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.460217][T19988] veth0_vlan: left promiscuous mode [ 521.505752][T19988] vlan1: entered allmulticast mode [ 521.513221][T19990] fuse: fd is not a fuse device [ 521.539695][T19988] veth0_vlan: entered allmulticast mode [ 521.958984][T20010] netlink: 'syz.3.5829': attribute type 1 has an invalid length. [ 522.035849][T20010] netlink: 'syz.3.5829': attribute type 4 has an invalid length. [ 522.048867][T20013] team0 (unregistering): Port device team_slave_0 removed [ 522.076218][T20013] team0 (unregistering): Port device team_slave_1 removed [ 522.096035][T20010] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.5829'. [ 522.433575][T20031] overlayfs: failed to clone upperpath [ 522.482975][T20031] overlayfs: failed to clone lowerpath [ 522.490048][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.694979][T20034] kvm: emulating exchange as write [ 523.202619][T20053] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 523.241831][T20053] overlayfs: failed to set xattr on upper [ 523.275599][T20053] overlayfs: ...falling back to redirect_dir=nofollow. [ 523.313214][T20053] overlayfs: ...falling back to uuid=null. [ 523.623448][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.501720][ T5849] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 524.679598][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 524.704226][ T5849] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 524.737748][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.746252][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.781490][ T5849] usb 6-1: Product: syz [ 524.806819][ T5849] usb 6-1: Manufacturer: syz [ 524.837292][ T5849] usb 6-1: SerialNumber: syz [ 524.856494][T20104] loop6: detected capacity change from 0 to 2640 [ 524.880405][ T5849] usb 6-1: config 0 descriptor?? [ 524.895809][T20104] buffer_io_error: 13 callbacks suppressed [ 524.895819][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 524.916721][ T5849] gspca_main: spca508-2.14.0 probing 041e:4018 [ 524.942864][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 524.982009][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.020805][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.053890][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.076277][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.100181][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.122610][ T5849] gspca_spca508: reg_read err -32 [ 525.131559][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.147163][ T5849] gspca_spca508: reg_read err -32 [ 525.162538][T20104] ldm_validate_partition_table(): Disk read failed. [ 525.171104][ T5849] gspca_spca508: reg_read err -32 [ 525.183536][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.195315][ T5849] gspca_spca508: reg_read err -32 [ 525.208312][ T5849] gspca_spca508: reg_read err -32 [ 525.221627][T20104] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.243571][T20104] Dev loop6: unable to read RDB block 0 [ 525.255878][T20114] batadv_slave_1: entered allmulticast mode [ 525.263995][T20104] loop6: unable to read partition table [ 525.280374][T20104] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 525.339701][T20113] batadv_slave_1: left allmulticast mode [ 525.435995][ T5849] gspca_spca508: reg write: error -71 [ 525.448327][ T5849] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 525.488000][ T5849] usb 6-1: USB disconnect, device number 59 [ 525.574161][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5875'. [ 525.597157][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5875'. [ 525.870037][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.999967][ T30] audit: type=1400 audit(1785155748.079:1225): avc: denied { read } for pid=20139 comm="syz.4.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.365289][T20158] loop6: detected capacity change from 0 to 2640 [ 526.465168][ T30] audit: type=1400 audit(1785155748.549:1226): avc: denied { read } for pid=20162 comm="syz.0.5895" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 526.569304][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.624394][T20167] overlayfs: failed to clone upperpath [ 526.652729][ T30] audit: type=1400 audit(1785155748.549:1227): avc: denied { open } for pid=20162 comm="syz.0.5895" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 526.824047][ T30] audit: type=1400 audit(1785155748.579:1228): avc: denied { ioctl } for pid=20162 comm="syz.0.5895" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 526.942579][ T30] audit: type=1400 audit(1785155748.629:1229): avc: denied { write } for pid=20162 comm="syz.0.5895" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 527.019865][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.209629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.373778][ T30] audit: type=1326 audit(1785155749.459:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20192 comm="syz.4.5908" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feea019de99 code=0x0 [ 527.601623][T20207] xt_hashlimit: size too large, truncated to 1048576 [ 528.149608][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.621414][T20243] syzkaller0: entered promiscuous mode [ 528.655476][T20243] syzkaller0: entered allmulticast mode [ 528.678097][T20245] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 528.854164][ T30] audit: type=1800 audit(1785155750.939:1231): pid=20251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5930" name="file0" dev="overlay" ino=5793 res=0 errno=0 [ 529.261139][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.423490][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5942'. [ 529.470991][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'. [ 529.515308][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5942'. [ 529.572086][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'. [ 529.691054][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5950'. [ 529.744148][T20291] netlink: 75 bytes leftover after parsing attributes in process `syz.4.5950'. [ 530.400075][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.650417][ T5849] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 530.855071][ T5849] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.880057][ T5713] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 530.947783][ T5849] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 531.032844][ T5849] usb 6-1: config 0 interface 0 has no altsetting 0 [ 531.074122][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 531.094924][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.119450][ T5849] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 531.131573][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5966'. [ 531.154118][ T5713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.170658][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 531.196468][ T5713] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 531.216854][ T5849] usb 6-1: Product: syz [ 531.234938][ T5849] usb 6-1: Manufacturer: syz [ 531.247229][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.270833][ T5849] usb 6-1: SerialNumber: syz [ 531.295901][ T5713] usb 3-1: SerialNumber: syz [ 531.309513][ T5849] usb 6-1: config 0 descriptor?? [ 531.335439][ T5713] usb 3-1: 0:2 : does not exist [ 531.351659][T20319] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.551322][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.415247][ T30] audit: type=1400 audit(1785155754.499:1232): avc: denied { write } for pid=20353 comm="syz.5.5972" path="socket:[79894]" dev="sockfs" ino=79894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 532.571570][ T5713] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 532.633652][ T5713] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 532.691478][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.733399][ T5849] usb 6-1: selecting invalid altsetting 0 [ 532.741933][ T5713] usb 3-1: USB disconnect, device number 63 [ 532.921306][ T5849] usb 6-1: USB disconnect, device number 60 [ 533.829745][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.065900][T20392] kvm: pic: non byte read [ 534.102088][T20392] kvm: pic: single mode not supported [ 534.102151][T20392] kvm: pic: non byte read [ 534.225667][T20392] kvm: pic: non byte read [ 534.281792][T20392] kvm: pic: single mode not supported [ 534.281953][T20392] kvm: pic: level sensitive irq not supported [ 534.353000][T20392] kvm: pic: non byte read [ 534.443754][T20392] kvm: pic: non byte read [ 534.478223][T20392] kvm: pic: non byte read [ 534.516852][T20392] kvm: pic: non byte read [ 534.551795][T20392] kvm: pic: non byte read [ 534.574099][T18119] rpcbind: server 127.0.0.1 not responding, timed out [ 534.592976][T20392] kvm: pic: level sensitive irq not supported [ 534.593019][T20392] kvm: pic: non byte read [ 534.614518][ T30] audit: type=1400 audit(1785155756.699:1233): avc: denied { unmount } for pid=20411 comm="syz.4.5997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 534.972716][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.226240][T20428] misc userio: Invalid payload size [ 535.328464][T20432] loop5: detected capacity change from 0 to 7 [ 535.357630][T20432] loop5: p3 p4 [ 535.376341][T20432] loop5: partition table partially beyond EOD, truncated [ 535.522032][ T5598] udevd[5598]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 535.544419][T11883] udevd[11883]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 535.906424][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6014'. [ 535.948666][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6014'. [ 536.004638][ T30] audit: type=1400 audit(1785155758.089:1234): avc: denied { accept } for pid=20454 comm="syz.0.6017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 536.139576][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.430252][T20468] xt_hashlimit: size too large, truncated to 1048576 [ 536.463315][T20472] comedi comedi3: comedi_config --init_data is deprecated [ 536.595957][T20479] ffs_data_put(): freeing [ 537.271878][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.391745][ T30] audit: type=1400 audit(1785155759.469:1235): avc: denied { getopt } for pid=20490 comm="syz.5.6032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.567586][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6034'. [ 537.679232][T20498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6034'. [ 538.420481][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.536936][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'. [ 539.063824][T20534] batadv_slave_0: entered promiscuous mode [ 539.070216][T20534] batadv_slave_0: left promiscuous mode [ 539.096742][T20539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.119119][T20539] batadv0: mtu less than device minimum [ 539.140916][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.152422][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.162944][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.173435][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.183923][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.194406][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.204895][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.215372][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 539.225873][T20539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 540.685357][T20539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.050141][ T30] audit: type=1400 audit(1785155763.129:1236): avc: denied { create } for pid=20567 comm="syz.3.6062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.146869][ T30] audit: type=1400 audit(1785155763.189:1237): avc: denied { write } for pid=20567 comm="syz.3.6062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.226406][ T30] audit: type=1400 audit(1785155763.189:1238): avc: denied { nlmsg_write } for pid=20567 comm="syz.3.6062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.277849][ T30] audit: type=1326 audit(1785155763.359:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20572 comm="syz.0.6066" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1236f9de99 code=0x7fc00000 [ 541.927846][ T30] audit: type=1326 audit(1785155764.009:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20572 comm="syz.0.6066" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1236f3f219 code=0x7fc00000 [ 542.056182][ T30] audit: type=1400 audit(1785155764.099:1241): avc: denied { node_bind } for pid=20592 comm="syz.4.6075" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 542.291653][T20602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.526024][T20610] overlayfs: failed to clone upperpath [ 542.957477][T20629] netlink: 'syz.2.6090': attribute type 1 has an invalid length. [ 543.070627][T20629] bond5: entered promiscuous mode [ 543.094280][T20629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.161113][T20634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.224276][T20634] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 543.282334][T20634] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 543.334641][T20634] bond5: (slave ipip0): making interface the new active one [ 543.366785][T20634] ipip0: entered promiscuous mode [ 543.418941][T20634] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 544.096605][T20655] syzkaller0 speed is unknown, defaulting to 1000 [ 544.325440][T20668] fuse: Bad value for 'fd' [ 544.775230][ T30] audit: type=1326 audit(1785155766.859:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20680 comm="syz.2.6112" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ea39de99 code=0x0 [ 544.922022][ T30] audit: type=1326 audit(1785155766.959:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20654 comm="syz.5.6101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01bc79de99 code=0x0 [ 545.051572][T20695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20695 comm=syz.0.6116 [ 545.088766][T20695] netlink: 'syz.0.6116': attribute type 1 has an invalid length. [ 545.097638][T18083] net_ratelimit: 14 callbacks suppressed [ 545.097648][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.163132][T20695] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.212349][T20697] bond5: (slave ip6erspan0): making interface the new active one [ 545.284922][T20697] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 545.313661][T20699] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6117'. [ 545.862272][ T30] audit: type=1400 audit(1785155767.949:1244): avc: denied { append } for pid=20719 comm="syz.5.6127" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 545.932509][ T30] audit: type=1400 audit(1785155767.969:1245): avc: denied { open } for pid=20719 comm="syz.5.6127" path="/865/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 546.035745][T20720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 546.071732][T20720] block device autoloading is deprecated and will be removed. [ 546.223390][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.359592][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.089647][T11122] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 548.250367][T11122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.285063][T11122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.331594][T11122] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.397862][T11122] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.459204][T11122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.469608][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.518370][T11122] usb 6-1: config 0 descriptor?? [ 548.973174][T11122] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 549.448391][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 549.561822][T20826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 549.582496][T20826] overlayfs: failed to set xattr on upper [ 549.591467][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.608008][T20826] overlayfs: ...falling back to redirect_dir=nofollow. [ 549.643660][T20826] overlayfs: ...falling back to index=off. [ 549.667014][T20826] overlayfs: ...falling back to uuid=null. [ 549.688774][T20826] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 549.823777][ T5713] usb 6-1: USB disconnect, device number 61 [ 550.106575][T20847] fuse: fd is not a fuse device [ 550.159295][T20761] Set syz1 is full, maxelem 65536 reached [ 550.264187][T20857] netlink: 'syz.2.6182': attribute type 1 has an invalid length. [ 550.286408][T20857] netlink: 'syz.2.6182': attribute type 4 has an invalid length. [ 550.307234][T20857] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6182'. [ 550.342951][T20862] netlink: 'syz.2.6182': attribute type 1 has an invalid length. [ 550.381822][T20862] netlink: 'syz.2.6182': attribute type 4 has an invalid length. [ 550.426622][T20862] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6182'. [ 550.699937][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.246133][T20906] netlink: 'syz.0.6201': attribute type 4 has an invalid length. [ 551.311806][T20906] netlink: 'syz.0.6201': attribute type 4 has an invalid length. [ 551.403474][T20908] No source specified [ 551.830108][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.007778][T20935] batadv_slave_1: entered promiscuous mode [ 552.057615][T20934] batadv_slave_1: left promiscuous mode [ 552.230611][T20948] binder: 20942:20948 ioctl c0306201 200000000000 returned -14 [ 552.316744][T20950] overlayfs: failed to clone upperpath [ 552.652294][T20963] fuse: Bad value for 'fd' [ 552.960332][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.135929][ T30] audit: type=1400 audit(1785155775.219:1246): avc: denied { mount } for pid=20985 comm="syz.4.6237" name="/" dev="functionfs" ino=82007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 553.179370][T20986] ffs_data_put(): freeing [ 553.869707][T21012] netlink: 'syz.0.6248': attribute type 21 has an invalid length. [ 553.904661][T11663] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.913646][T21012] netlink: 'syz.0.6248': attribute type 21 has an invalid length. [ 553.931581][T11663] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.957618][T11663] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.989097][T11663] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.099796][T11663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.175836][ T30] audit: type=1400 audit(1785155776.259:1247): avc: denied { append } for pid=21016 comm="syz.2.6250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.340065][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.213078][T21066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 556.469626][T18123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.478298][T21085] fuse: Bad value for 'fd' [ 556.654221][ T30] audit: type=1800 audit(1785155778.739:1248): pid=21088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6280" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 557.290913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.300319][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.599580][T18123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.669487][T11122] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 557.843499][T11122] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 557.887084][T11122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.935915][T11122] usb 6-1: config 0 descriptor?? [ 558.149545][T21136] netlink: 'syz.0.6298': attribute type 1 has an invalid length. [ 558.227503][T21136] bond6: entered promiscuous mode [ 558.251098][T21136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.344621][T21136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.370793][T21136] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 558.394986][T21145] xt_hashlimit: size too large, truncated to 1048576 [ 558.405873][T21136] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 558.430003][T21136] bond6: (slave ip6gre1): making interface the new active one [ 558.451001][T21136] ip6gre1: entered promiscuous mode [ 558.470641][T21136] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 558.717126][T21151] overlayfs: failed to clone upperpath [ 558.749695][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.195988][T11122] usb 6-1: Cannot set autoneg [ 559.207802][T11122] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 559.257729][T21164] netlink: 'syz.2.6308': attribute type 5 has an invalid length. [ 559.274491][T11122] usb 6-1: USB disconnect, device number 62 [ 559.483647][T21171] fuse: Bad value for 'fd' [ 559.508306][T21173] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6312'. [ 559.630807][T21175] kvm: apic: phys broadcast and lowest prio [ 559.677846][T21179] xfrm1: entered allmulticast mode [ 559.784793][T21184] ip6gretap1: entered promiscuous mode [ 559.890064][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.473250][T21218] overlayfs: failed to clone upperpath [ 560.967040][T21235] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 560.996892][T21235] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 561.020096][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.146914][T21243] overlayfs: failed to clone upperpath [ 561.329895][T21252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6344'. [ 561.374547][ T5713] libceph: connect (2)127.0.0.1:12345 error -101 [ 561.388785][T21252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6344'. [ 561.401042][ T5713] libceph: ceph_tcp_connect failed: -101 [ 561.432003][ T5713] libceph: mon0 (2)127.0.0.1:12345 connect error [ 561.448967][T21252] netlink: 'syz.4.6344': attribute type 4 has an invalid length. [ 561.583989][T21266] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 561.702718][T21266] SELinux: failed to load policy [ 561.729314][ T5713] libceph: connect (2)127.0.0.1:12345 error -101 [ 561.752962][T21268] SELinux: ebitmap start bit (536870912) is beyond the end of the bitmap (1472) [ 561.764578][ T5713] libceph: ceph_tcp_connect failed: -101 [ 561.785797][ T5713] libceph: mon0 (2)127.0.0.1:12345 connect error [ 561.795895][T21268] SELinux: invalid class [ 561.826130][T21268] SELinux: failed to load policy [ 562.149441][T21253] ceph: No mds server is up or the cluster is laggy [ 562.159626][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.679584][ T5849] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 562.839644][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 562.862799][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 562.901065][ T5849] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 562.931061][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.961418][ T5849] usb 3-1: Product: syz [ 562.984586][ T5849] usb 3-1: Manufacturer: syz [ 563.012720][ T5849] usb 3-1: SerialNumber: syz [ 563.035937][ T5849] usb 3-1: config 0 descriptor?? [ 563.068393][ T5849] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 563.120223][ T5849] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 563.281472][T18123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.443326][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 563.479234][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 563.592403][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6381'. [ 563.671002][ T5849] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 563.833430][T21365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6385'. [ 563.892131][T21367] netlink: 'syz.3.6386': attribute type 1 has an invalid length. [ 563.923142][T21368] [ 563.925465][T21368] ====================================================== [ 563.932453][T21368] WARNING: possible circular locking dependency detected [ 563.939448][T21368] syzkaller #0 Tainted: G L [ 563.945394][T21368] ------------------------------------------------------ [ 563.952374][T21368] syz.4.6385/21368 is trying to acquire lock: [ 563.958404][T21368] ffffffff90b4e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.966117][T21368] [ 563.966117][T21368] but task is already holding lock: [ 563.973452][T21368] ffff8880367aec60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 563.981679][T21368] [ 563.981679][T21368] which lock already depends on the new lock. [ 563.981679][T21368] [ 563.992049][T21368] [ 563.992049][T21368] the existing dependency chain (in reverse order) is: [ 564.001028][T21368] [ 564.001028][T21368] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 564.008375][T21368] lock_acquire+0x1b9/0x370 [ 564.013371][T21368] __mutex_lock+0x1a4/0x1bd0 [ 564.018454][T21368] pipe_lock+0x69/0x80 [ 564.023013][T21368] iter_file_splice_write+0x1fd/0x10b0 [ 564.028960][T21368] do_splice+0x109c/0x1f90 [ 564.033875][T21368] __do_splice+0x33b/0x370 [ 564.038791][T21368] __x64_sys_splice+0x187/0x250 [ 564.044134][T21368] do_syscall_64+0x115/0x870 [ 564.049219][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.055601][T21368] [ 564.055601][T21368] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 564.062959][T21368] lock_acquire+0x1b9/0x370 [ 564.067959][T21368] mnt_want_write+0x6f/0x410 [ 564.073036][T21368] path_openat+0xad9/0x4280 [ 564.078027][T21368] do_file_open+0x20e/0x430 [ 564.083018][T21368] file_open_name+0x1c3/0x3e0 [ 564.088185][T21368] filp_open+0x2e/0x50 [ 564.092744][T21368] fsg_lun_open+0x6b/0x7b0 [ 564.097652][T21368] fsg_store_file+0x1e7/0x450 [ 564.102817][T21368] configfs_write_iter+0x302/0x4e0 [ 564.108423][T21368] vfs_write+0x6ac/0x1050 [ 564.113254][T21368] ksys_write+0x12a/0x250 [ 564.118083][T21368] do_syscall_64+0x115/0x870 [ 564.123163][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.129544][T21368] [ 564.129544][T21368] -> #4 (&common->filesem){+.+.}-{4:4}: [ 564.137248][T21368] lock_acquire+0x1b9/0x370 [ 564.142241][T21368] down_write+0x8b/0x1f0 [ 564.146975][T21368] fsg_store_file+0x193/0x450 [ 564.152140][T21368] configfs_write_iter+0x302/0x4e0 [ 564.157741][T21368] vfs_write+0x6ac/0x1050 [ 564.162563][T21368] ksys_write+0x12a/0x250 [ 564.167386][T21368] do_syscall_64+0x115/0x870 [ 564.172467][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.178849][T21368] [ 564.178849][T21368] -> #3 (&p->frag_sem){++++}-{4:4}: [ 564.186195][T21368] lock_acquire+0x1b9/0x370 [ 564.191189][T21368] down_read+0x99/0x4c0 [ 564.195835][T21368] configfs_write_iter+0x218/0x4e0 [ 564.201443][T21368] vfs_write+0x6ac/0x1050 [ 564.206269][T21368] ksys_write+0x12a/0x250 [ 564.211093][T21368] do_syscall_64+0x115/0x870 [ 564.216173][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.222554][T21368] [ 564.222554][T21368] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 564.230073][T21368] lock_acquire+0x1b9/0x370 [ 564.235065][T21368] __mutex_lock+0x1a4/0x1bd0 [ 564.240154][T21368] configfs_read_iter+0x79/0x6f0 [ 564.245579][T21368] __kernel_read+0x397/0xad0 [ 564.250662][T21368] integrity_kernel_read+0x7e/0xb0 [ 564.256266][T21368] ima_calc_file_hash_tfm+0x25e/0x350 [ 564.262128][T21368] ima_calc_file_hash+0x1e3/0x380 [ 564.267640][T21368] ima_collect_measurement+0x94f/0xb30 [ 564.273588][T21368] process_measurement+0xdfe/0x2350 [ 564.279276][T21368] ima_file_check+0xc3/0x110 [ 564.284351][T21368] security_file_post_open+0xc4/0x210 [ 564.290224][T21368] path_openat+0x985/0x4280 [ 564.295215][T21368] do_file_open+0x20e/0x430 [ 564.300207][T21368] do_sys_openat2+0x10f/0x1e0 [ 564.305379][T21368] __x64_sys_openat+0x12d/0x210 [ 564.310722][T21368] do_syscall_64+0x115/0x870 [ 564.315808][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.322190][T21368] [ 564.322190][T21368] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 564.330749][T21368] lock_acquire+0x1b9/0x370 [ 564.335743][T21368] __mutex_lock+0x1a4/0x1bd0 [ 564.340822][T21368] process_measurement+0x5ab/0x2350 [ 564.346507][T21368] ima_file_check+0xc3/0x110 [ 564.351590][T21368] security_file_post_open+0xc4/0x210 [ 564.357454][T21368] path_openat+0x985/0x4280 [ 564.362448][T21368] do_file_open_root+0x2f6/0x5a0 [ 564.367879][T21368] file_open_root+0x1c6/0x3f0 [ 564.373042][T21368] kernel_read_file_from_path_initns+0x189/0x260 [ 564.379862][T21368] _request_firmware+0x733/0x13c0 [ 564.385382][T21368] request_firmware+0x35/0x50 [ 564.390546][T21368] reg_reload_regdb+0x85/0x460 [ 564.395804][T21368] genl_family_rcv_msg_doit+0x214/0x300 [ 564.401839][T21368] genl_rcv_msg+0x560/0x800 [ 564.406829][T21368] netlink_rcv_skb+0x159/0x420 [ 564.412087][T21368] genl_rcv+0x28/0x40 [ 564.416557][T21368] netlink_unicast+0x585/0x850 [ 564.421808][T21368] netlink_sendmsg+0x8b0/0xda0 [ 564.427058][T21368] ____sys_sendmsg+0xa4d/0xbe0 [ 564.432321][T21368] ___sys_sendmsg+0x190/0x1e0 [ 564.437500][T21368] __sys_sendmsg+0x160/0x210 [ 564.442581][T21368] do_syscall_64+0x115/0x870 [ 564.447660][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.454040][T21368] [ 564.454040][T21368] -> #0 (cb_lock){++++}-{4:4}: [ 564.460950][T21368] check_prev_add+0xeb/0xe60 [ 564.466031][T21368] __lock_acquire+0x136c/0x1a40 [ 564.471371][T21368] lock_acquire+0x1b9/0x370 [ 564.476364][T21368] down_read+0x99/0x4c0 [ 564.481015][T21368] genl_rcv+0x19/0x40 [ 564.485485][T21368] netlink_unicast+0x585/0x850 [ 564.490737][T21368] netlink_sendmsg+0x8b0/0xda0 [ 564.495986][T21368] sock_sendmsg+0x394/0x410 [ 564.500983][T21368] splice_to_socket+0xb3c/0x11a0 [ 564.506412][T21368] do_splice+0x109c/0x1f90 [ 564.511317][T21368] __do_splice+0x33b/0x370 [ 564.516224][T21368] __x64_sys_splice+0x187/0x250 [ 564.521564][T21368] do_syscall_64+0x115/0x870 [ 564.526642][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.533022][T21368] [ 564.533022][T21368] other info that might help us debug this: [ 564.533022][T21368] [ 564.543216][T21368] Chain exists of: [ 564.543216][T21368] cb_lock --> sb_writers#6 --> &pipe->mutex [ 564.543216][T21368] [ 564.554997][T21368] Possible unsafe locking scenario: [ 564.554997][T21368] [ 564.562413][T21368] CPU0 CPU1 [ 564.567743][T21368] ---- ---- [ 564.573073][T21368] lock(&pipe->mutex); [ 564.577194][T21368] lock(sb_writers#6); [ 564.583843][T21368] lock(&pipe->mutex); [ 564.590481][T21368] rlock(cb_lock); [ 564.594256][T21368] [ 564.594256][T21368] *** DEADLOCK *** [ 564.594256][T21368] [ 564.602364][T21368] 1 lock held by syz.4.6385/21368: [ 564.607444][T21368] #0: ffff8880367aec60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 564.616134][T21368] [ 564.616134][T21368] stack backtrace: [ 564.621996][T21368] CPU: 0 UID: 0 PID: 21368 Comm: syz.4.6385 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.622013][T21368] Tainted: [L]=SOFTLOCKUP [ 564.622017][T21368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 564.622024][T21368] Call Trace: [ 564.622029][T21368] [ 564.622036][T21368] dump_stack_lvl+0x100/0x190 [ 564.622052][T21368] print_circular_bug.cold+0x178/0x1c7 [ 564.622071][T21368] check_noncircular+0x146/0x160 [ 564.622084][T21368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 564.622099][T21368] check_prev_add+0xeb/0xe60 [ 564.622111][T21368] ? __lock_acquire+0x49f/0x1a40 [ 564.622125][T21368] __lock_acquire+0x136c/0x1a40 [ 564.622141][T21368] lock_acquire+0x1b9/0x370 [ 564.622154][T21368] ? genl_rcv+0x19/0x40 [ 564.622166][T21368] ? __pfx___might_resched+0x10/0x10 [ 564.622181][T21368] down_read+0x99/0x4c0 [ 564.622195][T21368] ? genl_rcv+0x19/0x40 [ 564.622206][T21368] ? __pfx_down_read+0x10/0x10 [ 564.622220][T21368] ? netlink_deliver_tap+0x1ae/0xcc0 [ 564.622238][T21368] genl_rcv+0x19/0x40 [ 564.622249][T21368] netlink_unicast+0x585/0x850 [ 564.622261][T21368] ? __pfx_netlink_unicast+0x10/0x10 [ 564.622271][T21368] ? __build_skb_around+0x278/0x390 [ 564.622284][T21368] netlink_sendmsg+0x8b0/0xda0 [ 564.622296][T21368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.622307][T21368] ? selinux_socket_sendmsg+0x198/0x2f0 [ 564.622325][T21368] sock_sendmsg+0x394/0x410 [ 564.622343][T21368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.622353][T21368] ? __pfx_sock_sendmsg+0x10/0x10 [ 564.622374][T21368] splice_to_socket+0xb3c/0x11a0 [ 564.622390][T21368] ? __pfx_splice_to_socket+0x10/0x10 [ 564.622404][T21368] ? inode_has_perm+0x16d/0x1d0 [ 564.622423][T21368] ? bpf_lsm_file_permission+0x9/0x10 [ 564.622441][T21368] ? security_file_permission+0x76/0x210 [ 564.622452][T21368] ? rw_verify_area+0xce/0x6d0 [ 564.622467][T21368] ? __pfx_splice_to_socket+0x10/0x10 [ 564.622481][T21368] do_splice+0x109c/0x1f90 [ 564.622494][T21368] ? __lock_acquire+0x49f/0x1a40 [ 564.622507][T21368] ? __lock_acquire+0x49f/0x1a40 [ 564.622521][T21368] ? __pfx_do_splice+0x10/0x10 [ 564.622534][T21368] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 564.622546][T21368] ? find_held_lock+0x2b/0x80 [ 564.622564][T21368] __do_splice+0x33b/0x370 [ 564.622577][T21368] ? __pfx___do_splice+0x10/0x10 [ 564.622592][T21368] __x64_sys_splice+0x187/0x250 [ 564.622605][T21368] do_syscall_64+0x115/0x870 [ 564.622618][T21368] ? clear_bhb_loop+0x40/0x90 [ 564.622630][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.622642][T21368] RIP: 0033:0x7feea019de99 [ 564.622653][T21368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.622664][T21368] RSP: 002b:00007feea10c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 564.622675][T21368] RAX: ffffffffffffffda RBX: 00007feea0426090 RCX: 00007feea019de99 [ 564.622682][T21368] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 564.622689][T21368] RBP: 00007feea0233eaf R08: 000200000000622c R09: 0000000000000000 [ 564.622695][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.622702][T21368] R13: 00007feea0426128 R14: 00007feea0426090 R15: 00007ffe102fd4b8 [ 564.622712][T21368] [ 565.102043][T21367] bond2: entered promiscuous mode [ 565.107154][T21367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.128687][T21367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.135596][T21367] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 565.145874][T21367] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 565.156041][T21367] bond2: (slave ip6gre1): making interface the new active one [ 565.163497][T21367] ip6gre1: entered promiscuous mode [ 565.169269][T21367] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 565.206843][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6385'. [ 565.314607][ T5849] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 565.324186][ T5849] em28xx 3-1:0.0: board has no eeprom [ 565.389208][ T5849] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 565.397068][ T5849] em28xx 3-1:0.0: dvb set to bulk mode. [ 565.402786][T11122] em28xx 3-1:0.0: Binding DVB extension [ 565.420978][T11122] em28xx 3-1:0.0: Registering input extension [ 565.430605][ T5849] usb 3-1: USB disconnect, device number 64 [ 565.454029][ T5849] em28xx 3-1:0.0: Disconnecting em28xx [ 565.460859][ T5849] em28xx 3-1:0.0: Closing input extension [ 565.468521][ T5849] em28xx 3-1:0.0: Freeing device [ 565.530328][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.630249][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.730248][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.830276][T18119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.930430][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.030154][T11657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.130341][T18123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.230291][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog