last executing test programs: 3m52.635111524s ago: executing program 3 (id=201): socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001540)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) 3m51.589314335s ago: executing program 3 (id=210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x2, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m48.152457615s ago: executing program 3 (id=223): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x24008804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000300), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') 3m46.338406458s ago: executing program 3 (id=232): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/220) 3m44.706756419s ago: executing program 3 (id=238): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) 3m44.512192287s ago: executing program 3 (id=240): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) 3m44.140405919s ago: executing program 32 (id=240): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) 5.375300253s ago: executing program 0 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 5.085017406s ago: executing program 0 (id=1640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x7, 0xffffffff, 0x9}) 2.398777347s ago: executing program 2 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 2.194124805s ago: executing program 2 (id=1679): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.870817905s ago: executing program 0 (id=1685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x4c00) 1.817394561s ago: executing program 0 (id=1687): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x5, 0x802, 0xff, 0x1e, 0x402, 0x1c49}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.669300429s ago: executing program 0 (id=1689): syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000040), 0x1, 0x80000) 1.4976436s ago: executing program 4 (id=1691): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010000", 0x7) 1.496015921s ago: executing program 2 (id=1692): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/220) 1.439061877s ago: executing program 1 (id=1694): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.403444147s ago: executing program 0 (id=1695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x7, 0xffffffff, 0x9}) 1.255505047s ago: executing program 4 (id=1696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000", @ANYRES32, @ANYBLOB="0000000000000100b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.17549037s ago: executing program 1 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0901040000c000001c00128009000100626f6e64001e00000c000280050001000100"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.144652146s ago: executing program 4 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fcdbdf25140000004800078008000100390a00000c000400000000000000000008000100080000000c000400400000000000000008000200"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 947.454508ms ago: executing program 1 (id=1700): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0404d1a, 0x0) 946.11249ms ago: executing program 4 (id=1701): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x74, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 931.12018ms ago: executing program 5 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x583, 0x0, 0xffffffffffffffff}]}) 815.508857ms ago: executing program 4 (id=1703): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x2, 0xfff1}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008848}, 0x24004004) socket$nl_generic(0x10, 0x3, 0x10) 799.981393ms ago: executing program 2 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 649.600339ms ago: executing program 5 (id=1705): bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-384,ecb(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000b40)="070019b780ab3d", 0x7) 613.101201ms ago: executing program 2 (id=1706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) 486.636588ms ago: executing program 4 (id=1707): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 417.156966ms ago: executing program 5 (id=1708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000001801", @ANYRES32, @ANYBLOB="0000000000000100b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 415.91029ms ago: executing program 2 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 357.621066ms ago: executing program 1 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) 275.199539ms ago: executing program 5 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0901040000c000001c00128009000100626f6e64001e00000c000280050001000100"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 129.36018ms ago: executing program 5 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fcdbdf25140000004800078008000100390a00000c000400000000000000000008000100080000000c000400400000000000000008000200"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 109.158759ms ago: executing program 1 (id=1713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.453805ms ago: executing program 5 (id=1714): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/220) 0s ago: executing program 1 (id=1715): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000002c0)=[{0x21, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x800000000000007}, {0x1, @svalue=0x3}, {0x3, @svalue=0xfffffffffffffffe}]}, 0x2}, {0x2b, '\x00', @data=0x7, 0xe6}, {0x14, '\x00', @buffer={"eee713e999fc4d6a82d774dcf206a0dd631170a3991abae1ccbb88521c42f8c6", 0x20}, 0x4}]}) kernel console output (not intermixed with test programs): m 3-1:1.0: skipping garbage [ 155.749682][ T5734] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 155.775531][ T5734] cdc_wdm 3-1:1.0: Unknown control protocol [ 155.905322][ T30] audit: type=1326 audit(1786969706.065:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6867 comm="syz.1.332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ef9e0d9 code=0x7ffc0000 [ 155.972939][ T5817] usb 3-1: USB disconnect, device number 12 [ 156.012982][ T30] audit: type=1326 audit(1786969706.095:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6867 comm="syz.1.332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ef9e0d9 code=0x7ffc0000 [ 156.050794][ T6876] Config c/1 of g1 needs at least one function. [ 156.089244][ T30] audit: type=1326 audit(1786969706.095:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6867 comm="syz.1.332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ef9e0d9 code=0x7ffc0000 [ 156.094099][ T6876] udc dummy_udc.0: failed to start g1: -22 [ 156.118657][ T6880] capability: warning: `syz.5.242' uses 32-bit capabilities (legacy support in use) [ 156.179029][ T6876] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 156.287105][ T6888] program syz.0.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.309311][ T6876] UDC core: g1: couldn't find an available UDC or it's busy [ 156.346700][ T6888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.252229][ T5734] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.422277][ T5734] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 157.454487][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.494996][ T5734] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 157.546626][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.731154][ T5734] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 157.744060][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.751882][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 157.767743][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 158.272638][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 158.283444][ T5734] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.301777][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 158.309533][ T5734] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 158.351966][ T5734] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.471683][ T5734] usb 3-1: USB disconnect, device number 13 [ 158.486793][ T5734] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 158.500212][ T5734] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 158.510277][ T5734] keyspan 3-1:1.0: device disconnected [ 158.872630][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.091984][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.110471][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.136801][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.308228][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.318646][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.332595][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.345674][ T29] usb 5-1: Product: syz [ 159.350207][ T29] usb 5-1: Manufacturer: syz [ 159.361609][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 159.371328][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 159.450244][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.526917][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 160.483456][ T29] usb 5-1: USB disconnect, device number 12 [ 160.741325][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 160.741343][ T30] audit: type=1400 audit(1786969710.865:501): avc: denied { write } for pid=6937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.068755][ T30] audit: type=1800 audit(1786969710.955:502): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.347" name="file0" dev="overlay" ino=38 res=0 errno=0 [ 161.381037][ T30] audit: type=1400 audit(1786969711.535:503): avc: denied { write } for pid=6962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.561482][ T6972] ip_tables: iptables: counters copy to user failed while replacing table [ 162.970147][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 164.821375][ T30] audit: type=1400 audit(1786969714.975:504): avc: denied { create } for pid=7020 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.918033][ T30] audit: type=1400 audit(1786969716.075:505): avc: denied { read } for pid=7044 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.496044][ T30] audit: type=1400 audit(1786969717.655:506): avc: denied { write } for pid=7054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.738334][ T30] audit: type=1400 audit(1786969717.895:507): avc: denied { write } for pid=7077 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.436551][ T30] audit: type=1400 audit(1786969718.595:508): avc: denied { write } for pid=7082 comm="syz.0.383" name="functions" dev="configfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.513038][ T30] audit: type=1400 audit(1786969718.675:509): avc: denied { write } for pid=7082 comm="syz.0.383" name="target" dev="configfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.597270][ T30] audit: type=1400 audit(1786969718.705:510): avc: denied { write } for pid=7082 comm="syz.0.383" name="usb_gadget" dev="configfs" ino=12983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.669697][ T30] audit: type=1400 audit(1786969718.715:511): avc: denied { write } for pid=7082 comm="syz.0.383" name="naa.1234567890abcdef" dev="configfs" ino=12985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.752429][ T7083] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 168.765941][ T30] audit: type=1400 audit(1786969718.795:512): avc: denied { write } for pid=7082 comm="syz.0.383" name="core" dev="configfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.845813][ T30] audit: type=1400 audit(1786969718.795:513): avc: denied { write } for pid=7082 comm="syz.0.383" name="rd_mcp_0" dev="configfs" ino=13797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.907341][ T30] audit: type=1400 audit(1786969718.985:514): avc: denied { write } for pid=7082 comm="syz.0.383" name="lun" dev="configfs" ino=12992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.445603][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.391'. [ 171.018306][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 171.018335][ T30] audit: type=1400 audit(1786969721.175:520): avc: denied { create } for pid=7152 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.123904][ T30] audit: type=1400 audit(1786969721.265:521): avc: denied { bind } for pid=7152 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.153023][ T30] audit: type=1400 audit(1786969721.295:522): avc: denied { write } for pid=7134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.508984][ T30] audit: type=1400 audit(1786969721.655:523): avc: denied { write } for pid=7165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.705434][ T30] audit: type=1400 audit(1786969722.865:524): avc: denied { block_suspend } for pid=7172 comm="syz.4.404" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.001421][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.232802][ T24] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 173.279268][ T24] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.327682][ T24] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.375899][ T24] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.422615][ T24] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.479699][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.508521][ T24] usb 1-1: Product: syz [ 173.517023][ T24] usb 1-1: Manufacturer: syz [ 173.528706][ T24] usb 1-1: SerialNumber: syz [ 173.559781][ T24] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 173.585890][ T30] audit: type=1400 audit(1786969723.735:525): avc: denied { write } for pid=7174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.648780][ T24] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 173.677112][ T24] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 173.850889][ T7177] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 173.887128][ T30] audit: type=1400 audit(1786969724.045:526): avc: denied { write } for pid=7195 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.122526][ T7206] hub 8-0:1.0: USB hub found [ 174.129377][ T7206] hub 8-0:1.0: 1 port detected [ 174.984374][ T30] audit: type=1400 audit(1786969725.145:527): avc: denied { node_bind } for pid=7223 comm="syz.4.414" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 175.666418][ T7237] syzkaller0: entered promiscuous mode [ 175.689172][ T7237] syzkaller0: entered allmulticast mode [ 175.785591][ T24] usb 1-1: USB disconnect, device number 9 [ 175.846605][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 175.933988][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 176.000050][ T24] ti_usb_3410_5052 1-1:2.0: device disconnected [ 176.551378][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 176.751160][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 176.765487][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 176.786432][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 176.820731][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 176.841867][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 176.872819][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 176.907947][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 176.936381][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.951337][ T24] usb 1-1: Product: syz [ 176.957531][ T24] usb 1-1: Manufacturer: syz [ 176.971593][ T24] usb 1-1: SerialNumber: syz [ 176.987362][ T24] usb 1-1: config 0 descriptor?? [ 177.409111][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 177.428168][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 177.450289][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 177.468785][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 177.684942][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.709752][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.739762][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.756849][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.775341][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.801390][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.807781][ T5720] kernel read not supported for file /sysvipc/msg (pid: 5720 comm: kworker/1:5) [ 177.829085][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.848526][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.863196][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.878521][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.894953][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.918617][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.934898][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.950387][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 177.971876][ T24] input input8: Timeout waiting for response from device. [ 177.991677][ T24] usb 1-1: USB disconnect, device number 10 [ 178.211456][ T983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.404066][ T983] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 178.424202][ T983] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.447880][ T983] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.470134][ T983] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.488431][ T983] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.503151][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.514682][ T983] usb 5-1: Product: syz [ 178.518943][ T983] usb 5-1: Manufacturer: syz [ 178.527114][ T983] usb 5-1: SerialNumber: syz [ 178.546119][ T983] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 178.575464][ T983] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 178.583929][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 178.605768][ T983] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 178.741893][ T24] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 178.766243][ T7277] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 178.787588][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.803494][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 178.830251][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.843257][ T24] usb 1-1: Product: syz [ 178.847494][ T24] usb 1-1: Manufacturer: syz [ 178.857051][ T24] usb 1-1: SerialNumber: syz [ 179.237520][ T24] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 180.234270][ T5734] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.346749][ T30] audit: type=1400 audit(1786969730.505:528): avc: denied { create } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.366836][ T30] audit: type=1400 audit(1786969730.505:529): avc: denied { bind } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.386638][ T30] audit: type=1400 audit(1786969730.505:530): avc: denied { setopt } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.393581][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 180.406517][ T30] audit: type=1400 audit(1786969730.515:531): avc: denied { accept } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.452903][ T30] audit: type=1400 audit(1786969730.515:532): avc: denied { write } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.489001][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.498120][ T30] audit: type=1400 audit(1786969730.515:533): avc: denied { read } for pid=7304 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.511714][ T5734] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 180.543390][ T5734] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 180.552439][ T5734] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 180.562431][ T5734] usb 6-1: config 14 has no interface number 0 [ 180.568630][ T5734] usb 6-1: config 14 has no interface number 1 [ 180.574876][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 180.586540][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 180.598304][ T5734] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 180.609890][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.621991][ T7311] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 180.623190][ T5734] usb 6-1: config 14 interface 57 has no altsetting 0 [ 180.637483][ T5734] usb 6-1: config 14 interface 228 has no altsetting 0 [ 180.647356][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.656995][ T5734] usb 6-1: Product: syz [ 180.663204][ T5734] usb 6-1: Manufacturer: syz [ 180.667888][ T5734] usb 6-1: SerialNumber: syz [ 180.965142][ T2161] usb 5-1: USB disconnect, device number 13 [ 181.009813][ T2161] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 181.040726][ T2161] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 181.054775][ T2161] ti_usb_3410_5052 5-1:2.0: device disconnected [ 181.084734][ T5734] legousbtower 6-1:14.57: interrupt endpoints not found [ 181.284020][ T5734] legousbtower 6-1:14.228: interrupt endpoints not found [ 181.427526][ T24] usb 1-1: USB disconnect, device number 11 [ 181.444420][ T24] usblp0: removed [ 181.485585][ T2161] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.542374][ T30] audit: type=1400 audit(1786969731.705:534): avc: denied { create } for pid=7323 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.546271][ T7320] netlink: 84 bytes leftover after parsing attributes in process `syz.1.446'. [ 181.575261][ T30] audit: type=1400 audit(1786969731.735:535): avc: denied { connect } for pid=7323 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.683823][ T2161] usb 5-1: Using ep0 maxpacket: 32 [ 181.757495][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.447'. [ 181.769792][ T2161] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 181.900964][ T2161] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 182.003884][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 182.106268][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 182.179950][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 182.306564][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 182.405632][ T30] audit: type=1400 audit(1786969731.755:536): avc: denied { ioctl } for pid=7323 comm="syz.0.447" path="socket:[14369]" dev="sockfs" ino=14369 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.442338][ T2161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.477934][ T2161] usb 5-1: Product: syz [ 182.507132][ T2161] usb 5-1: Manufacturer: syz [ 182.534879][ T2161] usb 5-1: SerialNumber: syz [ 182.557856][ T2161] usb 5-1: config 0 descriptor?? [ 182.593322][ T7336] netlink: 176 bytes leftover after parsing attributes in process `syz.1.450'. [ 182.630957][ T7340] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 182.692917][ T30] audit: type=1400 audit(1786969732.855:537): avc: denied { bind } for pid=7341 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.007806][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 183.017098][ T2161] input input9: Device does not respond to id packet M [ 183.033863][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 183.046949][ T2161] input input9: Device does not respond to id packet P [ 183.059507][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 183.066820][ T2161] input input9: Device does not respond to id packet B [ 183.075640][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 183.081802][ T2161] input input9: Device does not respond to id packet N [ 183.089377][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 183.099849][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 183.107906][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 183.117678][ T2161] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 183.134815][ T2161] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 183.303975][ T29] usb 6-1: USB disconnect, device number 2 [ 184.240998][ T7360] program syz.2.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.250773][ T7360] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.209955][ T2161] usb 5-1: USB disconnect, device number 14 [ 185.521673][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.462'. [ 186.416037][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 186.416053][ T30] audit: type=1400 audit(1786969736.575:542): avc: denied { read write } for pid=7359 comm="syz.4.460" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.548219][ T30] audit: type=1400 audit(1786969736.575:543): avc: denied { open } for pid=7359 comm="syz.4.460" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.676246][ T7384] netlink: 'syz.5.465': attribute type 4 has an invalid length. [ 186.824574][ T30] audit: type=1400 audit(1786969736.985:544): avc: denied { ioctl } for pid=7359 comm="syz.4.460" path="socket:[14451]" dev="sockfs" ino=14451 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.054356][ T2161] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.143925][ T30] audit: type=1400 audit(1786969737.305:545): avc: denied { read } for pid=7399 comm="syz.2.472" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.172059][ T30] audit: type=1400 audit(1786969737.305:546): avc: denied { open } for pid=7399 comm="syz.2.472" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.174874][ T983] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.223144][ T2161] usb 2-1: Using ep0 maxpacket: 32 [ 187.241585][ T2161] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.252299][ T2161] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 187.278084][ T2161] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 187.290140][ T2161] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 187.298662][ T2161] usb 2-1: config 14 has no interface number 0 [ 187.304923][ T2161] usb 2-1: config 14 has no interface number 1 [ 187.325699][ T2161] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 187.403534][ T983] usb 6-1: Using ep0 maxpacket: 32 [ 187.419289][ T983] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 187.470628][ T983] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 187.485432][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 187.497998][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 187.508268][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 187.595765][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 187.631704][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.640440][ T983] usb 6-1: Product: syz [ 187.703542][ T983] usb 6-1: Manufacturer: syz [ 187.729738][ T983] usb 6-1: SerialNumber: syz [ 187.813531][ T983] usb 6-1: config 0 descriptor?? [ 188.034366][ T2161] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 188.045688][ T2161] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 188.057043][ T2161] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.070267][ T2161] usb 2-1: config 14 interface 57 has no altsetting 0 [ 188.077094][ T2161] usb 2-1: config 14 interface 228 has no altsetting 0 [ 188.087315][ T2161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.101355][ T2161] usb 2-1: Product: syz [ 188.112117][ T2161] usb 2-1: Manufacturer: syz [ 188.126238][ T2161] usb 2-1: SerialNumber: syz [ 188.282159][ T983] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 188.288710][ T983] input input10: Device does not respond to id packet M [ 188.296753][ T983] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 188.353394][ T983] input input10: Device does not respond to id packet P [ 188.367012][ T983] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 188.384989][ T983] input input10: Device does not respond to id packet B [ 188.394977][ T983] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 188.402088][ T983] input input10: Device does not respond to id packet N [ 188.410839][ T983] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 188.422008][ T983] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 188.428851][ T983] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 188.440783][ T983] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 188.449683][ T983] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 [ 188.477402][ T983] usb 6-1: USB disconnect, device number 3 [ 188.496462][ T5713] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.549842][ T2161] legousbtower 2-1:14.57: interrupt endpoints not found [ 188.671988][ T5713] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 188.692798][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.731387][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.746881][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.756988][ T2161] legousbtower 2-1:14.228: interrupt endpoints not found [ 188.769641][ T5713] usb 3-1: Product: syz [ 188.775945][ T5713] usb 3-1: Manufacturer: syz [ 188.787830][ T5713] usb 3-1: SerialNumber: syz [ 188.909007][ T7424] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 189.022213][ T5713] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 189.537848][ T7438] program syz.0.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.548404][ T7438] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 190.102776][ T5817] usb 2-1: USB disconnect, device number 6 [ 190.993687][ T30] audit: type=1400 audit(1786969741.155:547): avc: denied { append } for pid=7450 comm="syz.5.490" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.027564][ T30] audit: type=1400 audit(1786969741.185:548): avc: denied { ioctl } for pid=7450 comm="syz.5.490" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.081415][ T5817] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.232261][ T5817] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 191.246430][ T5817] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.259649][ T5817] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.273448][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.281706][ T5817] usb 1-1: Product: syz [ 191.285971][ T5817] usb 1-1: Manufacturer: syz [ 191.290690][ T5817] usb 1-1: SerialNumber: syz [ 191.314042][ T5817] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 191.345440][ T983] usb 3-1: USB disconnect, device number 14 [ 191.376229][ T5817] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 191.382589][ T7458] netlink: 'syz.2.492': attribute type 4 has an invalid length. [ 191.404111][ T983] usblp0: removed [ 191.451589][ T5817] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 191.606984][ T30] audit: type=1400 audit(1786969741.765:549): avc: denied { name_connect } for pid=7463 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 191.951349][ T5720] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 192.111314][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 192.119073][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.127448][ T5720] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 192.137782][ T5720] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 192.146960][ T5720] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 192.155472][ T5720] usb 2-1: config 14 has no interface number 0 [ 192.161833][ T5720] usb 2-1: config 14 has no interface number 1 [ 192.168042][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 192.179358][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 192.190669][ T5720] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 192.202043][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.215175][ T5720] usb 2-1: config 14 interface 57 has no altsetting 0 [ 192.221977][ T5720] usb 2-1: config 14 interface 228 has no altsetting 0 [ 192.231174][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.239244][ T5720] usb 2-1: Product: syz [ 192.243425][ T5720] usb 2-1: Manufacturer: syz [ 192.247995][ T5720] usb 2-1: SerialNumber: syz [ 192.663973][ T5720] legousbtower 2-1:14.57: interrupt endpoints not found [ 192.703304][ T30] audit: type=1400 audit(1786969742.865:550): avc: denied { mounton } for pid=7478 comm="syz.4.500" path="/proc/271/task" dev="proc" ino=14678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 192.863748][ T5720] legousbtower 2-1:14.228: interrupt endpoints not found [ 192.931645][ T5713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.013734][ T30] audit: type=1400 audit(1786969743.175:551): avc: denied { append } for pid=7490 comm="syz.4.504" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.043024][ T30] audit: type=1400 audit(1786969743.195:552): avc: denied { map } for pid=7490 comm="syz.4.504" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.068464][ T30] audit: type=1400 audit(1786969743.195:553): avc: denied { execute } for pid=7490 comm="syz.4.504" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.121973][ T5713] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 193.135940][ T5713] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.146388][ T5713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.163686][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.172163][ T5713] usb 6-1: Product: syz [ 193.176374][ T5713] usb 6-1: Manufacturer: syz [ 193.180984][ T5713] usb 6-1: SerialNumber: syz [ 193.403785][ T5713] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 193.861336][ T5713] usb 1-1: USB disconnect, device number 12 [ 193.917886][ T5713] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 193.956743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.963132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.977980][ T5713] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 194.003220][ T5713] ti_usb_3410_5052 1-1:2.0: device disconnected [ 194.405140][ T30] audit: type=1400 audit(1786969744.565:554): avc: denied { mounton } for pid=7515 comm="syz.4.514" path="/106/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.801838][ T5713] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 194.832596][ T5817] usb 2-1: USB disconnect, device number 7 [ 195.611824][ T5713] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 195.629418][ T5713] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.659277][ T5713] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.770022][ T5734] usb 6-1: USB disconnect, device number 4 [ 195.829295][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.840435][ T5734] usblp0: removed [ 195.879254][ T5713] usb 5-1: Product: syz [ 195.901972][ T5713] usb 5-1: Manufacturer: syz [ 195.931983][ T5713] usb 5-1: SerialNumber: syz [ 196.898431][ T5713] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 196.909953][ T5713] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 196.983587][ T5713] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 197.614057][ T7548] netlink: 'syz.5.527': attribute type 4 has an invalid length. [ 198.340824][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 198.558112][ T983] usb 5-1: USB disconnect, device number 15 [ 198.564290][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 198.656179][ T983] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 198.684375][ T983] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 199.338890][ T983] ti_usb_3410_5052 5-1:2.0: device disconnected [ 199.352067][ T29] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 199.372896][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.384066][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.397008][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.428574][ T29] usb 1-1: Product: syz [ 199.447460][ T29] usb 1-1: Manufacturer: syz [ 199.470050][ T29] usb 1-1: SerialNumber: syz [ 199.527928][ T7591] netlink: 'syz.1.540': attribute type 4 has an invalid length. [ 199.731192][ T29] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 200.109810][ T30] audit: type=1400 audit(1786969750.265:555): avc: denied { setopt } for pid=7596 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.235097][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 201.511429][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 201.518586][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 201.525441][ T5599] Bluetooth: hci2: command 0x0406 tx timeout [ 201.876128][ T5713] usb 1-1: USB disconnect, device number 13 [ 201.939859][ T5713] usblp0: removed [ 202.358840][ T7614] kAFS: bad VL server IP address [ 202.386062][ T30] audit: type=1400 audit(1786969752.505:556): avc: denied { write } for pid=7612 comm="syz.1.548" name="cells" dev="proc" ino=4026533418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 204.596754][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.242089][ T29] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 205.264711][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.290029][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.347292][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.381955][ T29] usb 2-1: Product: syz [ 205.404040][ T29] usb 2-1: Manufacturer: syz [ 205.430715][ T29] usb 2-1: SerialNumber: syz [ 205.463452][ T983] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 205.656818][ T983] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.666719][ T983] usb 6-1: not running at top speed; connect to a high speed hub [ 205.674993][ T983] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 205.796612][ T29] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 206.894804][ T983] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 206.912461][ T983] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 206.931517][ T983] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 206.992933][ T983] usb 6-1: config 14 has no interface number 0 [ 207.018986][ T983] usb 6-1: config 14 has no interface number 1 [ 207.034434][ T983] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 207.084083][ T983] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 207.096076][ T30] audit: type=1400 audit(1786969757.245:557): avc: denied { write } for pid=7666 comm="syz.0.567" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.130053][ T983] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.166780][ T983] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 207.203443][ T983] usb 6-1: config 14 interface 57 has no altsetting 0 [ 207.225771][ T983] usb 6-1: config 14 interface 228 has no altsetting 0 [ 207.319049][ T30] audit: type=1400 audit(1786969757.475:558): avc: denied { read write } for pid=7666 comm="syz.0.567" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.884786][ T5734] usb 2-1: USB disconnect, device number 8 [ 208.261054][ T30] audit: type=1400 audit(1786969757.475:559): avc: denied { open } for pid=7666 comm="syz.0.567" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.409398][ T5734] usblp0: removed [ 208.468257][ T983] usb 6-1: string descriptor 0 read error: -71 [ 208.474632][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.532494][ T983] usb 6-1: can't set config #14, error -71 [ 208.570031][ T983] usb 6-1: USB disconnect, device number 5 [ 209.764773][ T5734] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 209.954591][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.987351][ T5734] usb 5-1: not running at top speed; connect to a high speed hub [ 210.015763][ T5734] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 210.038584][ T5734] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 210.058661][ T5734] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 210.077180][ T5734] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 210.097603][ T5734] usb 5-1: config 14 has no interface number 0 [ 210.113946][ T5734] usb 5-1: config 14 has no interface number 1 [ 210.136533][ T5734] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 210.184453][ T5734] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 210.220720][ T5734] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.251847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 210.371186][ T5734] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 210.415243][ T5734] usb 5-1: config 14 interface 57 has no altsetting 0 [ 210.455416][ T5734] usb 5-1: config 14 interface 228 has no altsetting 0 [ 210.493593][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.514207][ T5734] usb 5-1: Product: syz [ 210.524631][ T30] audit: type=1400 audit(1786969760.685:560): avc: denied { read } for pid=7722 comm="syz.0.587" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 210.530612][ T5734] usb 5-1: Manufacturer: syz [ 210.665773][ T30] audit: type=1400 audit(1786969760.685:561): avc: denied { open } for pid=7722 comm="syz.0.587" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 210.963760][ T5734] usb 5-1: SerialNumber: syz [ 211.133973][ T30] audit: type=1400 audit(1786969761.295:562): avc: denied { write } for pid=7722 comm="syz.0.587" name="functions" dev="configfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.202739][ T30] audit: type=1400 audit(1786969761.295:563): avc: denied { create } for pid=7731 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.315132][ T30] audit: type=1400 audit(1786969761.395:564): avc: denied { bind } for pid=7731 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.387637][ T30] audit: type=1400 audit(1786969761.405:565): avc: denied { setopt } for pid=7731 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.430571][ T5734] legousbtower 5-1:14.57: interrupt endpoints not found [ 211.478961][ T30] audit: type=1400 audit(1786969761.405:566): avc: denied { write } for pid=7731 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.817172][ T5734] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 211.848178][ T5734] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 212.407938][ T7754] usb 5-1: LEGO USB Tower reset control request failed [ 212.443109][ T983] usb 5-1: USB disconnect, device number 16 [ 212.515773][ T983] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 213.191049][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 213.191086][ T30] audit: type=1400 audit(1786969763.345:568): avc: denied { bind } for pid=7765 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.798110][ T7782] netlink: 'syz.5.607': attribute type 4 has an invalid length. [ 213.873178][ T7782] netlink: 'syz.5.607': attribute type 4 has an invalid length. [ 214.402958][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 214.452164][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 214.496211][ T7799] netlink: 'syz.4.613': attribute type 4 has an invalid length. [ 214.536803][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.578907][ T7794] bond1: (slave bond0): making interface the new active one [ 214.595048][ T7794] bond1: (slave bond0): Enslaving as an active interface with an up link [ 214.596129][ T7799] netlink: 152 bytes leftover after parsing attributes in process `syz.4.613'. [ 214.612596][ T5817] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 214.658442][ T7799] .`: renamed from bond0 (while UP) [ 214.806892][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.850405][ T5817] usb 3-1: not running at top speed; connect to a high speed hub [ 214.879798][ T5817] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.909196][ T5817] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.951340][ T5817] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.998783][ T5817] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 215.037942][ T30] audit: type=1400 audit(1786969765.195:569): avc: denied { getopt } for pid=7812 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.068250][ T5817] usb 3-1: config 14 has no interface number 0 [ 215.091690][ T5817] usb 3-1: config 14 has no interface number 1 [ 215.106127][ T5817] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 215.127358][ T5817] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 215.153963][ T5817] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.187160][ T5817] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 215.215680][ T5817] usb 3-1: config 14 interface 57 has no altsetting 0 [ 215.234843][ T5817] usb 3-1: config 14 interface 228 has no altsetting 0 [ 215.272340][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.294801][ T5817] usb 3-1: Product: syz [ 215.312426][ T5817] usb 3-1: Manufacturer: syz [ 215.337773][ T5817] usb 3-1: SerialNumber: syz [ 215.425043][ T7821] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 215.456880][ T7821] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 215.771210][ T7832] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 215.787097][ T5817] legousbtower 3-1:14.57: interrupt endpoints not found [ 215.794491][ T30] audit: type=1400 audit(1786969765.955:570): avc: denied { relabelto } for pid=7831 comm="syz.4.629" name="130" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 215.798311][ T7832] team0: Cannot enslave team device to itself [ 215.873451][ T30] audit: type=1400 audit(1786969765.955:571): avc: denied { associate } for pid=7831 comm="syz.4.629" name="130" dev="tmpfs" ino=698 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 216.160350][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 216.182522][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 216.194432][ T5817] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 216.222846][ T7844] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 216.231080][ T7844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.630'. [ 216.233465][ T5817] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 216.776755][ T7859] usb 3-1: LEGO USB Tower reset control request failed [ 216.795306][ T5720] usb 3-1: USB disconnect, device number 15 [ 216.830987][ T5720] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 217.709714][ T7869] program syz.0.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.720076][ T7869] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 217.889325][ T7873] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 217.931813][ T7873] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 218.250197][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 218.283046][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 218.300553][ T7884] netlink: 'syz.1.644': attribute type 4 has an invalid length. [ 218.308591][ T7884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.644'. [ 219.085649][ T7901] syzkaller0: entered promiscuous mode [ 219.099648][ T7901] syzkaller0: entered allmulticast mode [ 219.376051][ T7849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.751198][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 220.577088][ T7914] netlink: 'syz.5.653': attribute type 4 has an invalid length. [ 220.628054][ T7915] netlink: 'syz.5.653': attribute type 4 has an invalid length. [ 220.722362][ T30] audit: type=1400 audit(1786969770.885:572): avc: denied { map } for pid=7916 comm="syz.2.654" path="socket:[15966]" dev="sockfs" ino=15966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.759748][ T30] audit: type=1400 audit(1786969770.905:573): avc: denied { read } for pid=7916 comm="syz.2.654" path="socket:[15966]" dev="sockfs" ino=15966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.107064][ T7926] program syz.1.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.116759][ T7926] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 221.999562][ T30] audit: type=1400 audit(1786969772.155:574): avc: denied { connect } for pid=7933 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.990515][ T7948] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 223.057649][ T7953] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 223.219031][ T30] audit: type=1326 audit(1786969773.375:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.222146][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 223.281434][ T30] audit: type=1326 audit(1786969773.415:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.365412][ T30] audit: type=1326 audit(1786969773.435:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.388644][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 223.438337][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 223.460862][ T7971] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 223.492300][ T7971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.669'. [ 223.566090][ T30] audit: type=1326 audit(1786969773.435:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.675043][ T30] audit: type=1326 audit(1786969773.435:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.791437][ T30] audit: type=1326 audit(1786969773.435:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 223.843909][ T30] audit: type=1326 audit(1786969773.435:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x7ffc0000 [ 224.795652][ T7997] netlink: 'syz.4.680': attribute type 4 has an invalid length. [ 224.852981][ T7997] netlink: 'syz.4.680': attribute type 4 has an invalid length. [ 225.505655][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 225.525130][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.689'. [ 225.904108][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 225.904126][ T30] audit: type=1326 audit(1786969776.065:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 225.943870][ T30] audit: type=1326 audit(1786969776.065:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 225.984053][ T30] audit: type=1326 audit(1786969776.095:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.057245][ T30] audit: type=1326 audit(1786969776.095:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.147197][ T30] audit: type=1326 audit(1786969776.095:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.166103][ T8036] program syz.5.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.222701][ T30] audit: type=1326 audit(1786969776.095:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.319441][ T30] audit: type=1326 audit(1786969776.095:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.446228][ T30] audit: type=1326 audit(1786969776.105:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 226.651813][ T30] audit: type=1326 audit(1786969776.105:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8028 comm="syz.5.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa39819e0d9 code=0x7ffc0000 [ 227.043554][ T30] audit: type=1400 audit(1786969776.535:606): avc: denied { write } for pid=8024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.483372][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.702'. [ 227.757697][ T8079] kAFS: bad VL server IP address [ 229.747712][ T8124] veth3: entered allmulticast mode [ 229.770126][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.718'. [ 229.869819][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 231.305912][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 231.305930][ T30] audit: type=1400 audit(1786969781.465:616): avc: denied { write } for pid=8161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.440932][ T30] audit: type=1400 audit(1786969781.595:617): avc: denied { write } for pid=8180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.496866][ T7987] Set syz1 is full, maxelem 65536 reached [ 231.751965][ T8196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.736'. [ 232.143367][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.744'. [ 232.365968][ T8226] netlink: 52 bytes leftover after parsing attributes in process `syz.1.746'. [ 233.017032][ T8235] syzkaller0: entered promiscuous mode [ 233.033332][ T8235] syzkaller0: entered allmulticast mode [ 233.079627][ T30] audit: type=1400 audit(1786969783.235:618): avc: denied { write } for pid=8202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.304406][ T30] audit: type=1400 audit(1786969783.375:619): avc: denied { write } for pid=8243 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.438410][ T8250] openvswitch: netlink: IP tunnel TTL not specified. [ 233.833796][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.751'. [ 234.249796][ T8268] capability: warning: `syz.5.758' uses deprecated v2 capabilities in a way that may be insecure [ 234.312036][ T8269] kAFS: bad VL server IP address [ 234.401140][ T30] audit: type=1401 audit(1786969784.535:620): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 235.555351][ T30] audit: type=1400 audit(1786969785.715:621): avc: denied { write } for pid=8253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.756407][ T30] audit: type=1400 audit(1786969785.915:622): avc: denied { write } for pid=8301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.989189][ T30] audit: type=1400 audit(1786969786.145:623): avc: denied { mounton } for pid=8312 comm="syz.0.767" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 236.023833][ T30] audit: type=1400 audit(1786969786.175:624): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.066048][ T30] audit: type=1400 audit(1786969786.205:625): avc: denied { write } for pid=8303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.310680][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 236.333589][ T8325] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 237.643730][ T36] rpcbind: server 127.0.0.1 not responding, timed out [ 237.759216][ T8358] 9p: Could not find request transport: vÓÆñtcp [ 237.856018][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 237.856034][ T30] audit: type=1400 audit(1786969788.015:630): avc: denied { write } for pid=8333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.167304][ T30] audit: type=1400 audit(1786969788.315:631): avc: denied { write } for pid=8378 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.410555][ T30] audit: type=1400 audit(1786969788.535:632): avc: denied { create } for pid=8393 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.866072][ T8421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.795'. [ 239.949283][ T30] audit: type=1400 audit(1786969790.105:633): avc: denied { write } for pid=8392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.266996][ T30] audit: type=1400 audit(1786969790.425:634): avc: denied { write } for pid=8431 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.361712][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.409710][ T8442] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 240.468061][ T8442] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 240.663727][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 240.687241][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.699664][ T30] audit: type=1400 audit(1786969790.855:635): avc: denied { mount } for pid=8439 comm="syz.5.803" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 241.168750][ T9] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 241.185636][ T9] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 241.194269][ T9] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 241.203792][ T9] usb 2-1: config 14 has no interface number 0 [ 241.205319][ T30] audit: type=1400 audit(1786969791.365:636): avc: denied { write } for pid=8461 comm="syz.0.808" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 241.210060][ T9] usb 2-1: config 14 has no interface number 1 [ 241.243015][ T8464] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 241.250920][ T9] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 241.298441][ T30] audit: type=1400 audit(1786969791.365:637): avc: denied { open } for pid=8461 comm="syz.0.808" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 241.306946][ T9] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 241.447015][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 241.462556][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 241.492551][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 241.526742][ T9] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.549631][ T9] usb 2-1: config 14 interface 57 has no altsetting 0 [ 241.562494][ T9] usb 2-1: config 14 interface 228 has no altsetting 0 [ 241.576315][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.595204][ T9] usb 2-1: Product: syz [ 241.602757][ T9] usb 2-1: Manufacturer: syz [ 241.611508][ T9] usb 2-1: SerialNumber: syz [ 241.744524][ T5720] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 241.929085][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 241.944501][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.964699][ T5720] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 242.012571][ T5720] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 242.040115][ T5720] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 242.047889][ T9] legousbtower 2-1:14.57: interrupt endpoints not found [ 242.074564][ T5720] usb 3-1: config 14 has no interface number 0 [ 242.088466][ T5720] usb 3-1: config 14 has no interface number 1 [ 242.109206][ T5720] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 242.149373][ T5720] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 242.192339][ T5720] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 242.231283][ T5720] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 242.289639][ T5720] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 242.341110][ T5720] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.387109][ T5720] usb 3-1: config 14 interface 57 has no altsetting 0 [ 242.413032][ T5720] usb 3-1: config 14 interface 228 has no altsetting 0 [ 242.451926][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.459259][ T9] legousbtower 2-1:14.228: get version request failed: -32 [ 242.473902][ T5720] usb 3-1: Product: syz [ 242.490994][ T5720] usb 3-1: Manufacturer: syz [ 242.509053][ T5720] usb 3-1: SerialNumber: syz [ 242.509185][ T9] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 242.524632][ T30] audit: type=1400 audit(1786969792.685:638): avc: granted { setsecparam } for pid=8490 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 243.178533][ T5720] legousbtower 3-1:14.57: interrupt endpoints not found [ 243.755653][ T5720] legousbtower 3-1:14.228: get version request failed: -71 [ 243.781049][ T5720] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 243.862825][ T5720] usb 3-1: USB disconnect, device number 16 [ 244.760132][ T5817] usb 2-1: USB disconnect, device number 9 [ 244.922793][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.828'. [ 245.514218][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.834'. [ 246.879509][ T30] audit: type=1400 audit(1786969797.025:639): avc: denied { ioctl } for pid=8555 comm="syz.2.842" path="socket:[18589]" dev="sockfs" ino=18589 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.071482][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.338050][ T30] audit: type=1400 audit(1786969797.085:640): avc: denied { create } for pid=8555 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.421902][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 247.452493][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.476007][ T29] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 247.510271][ T29] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 247.528080][ T29] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 247.538065][ T29] usb 6-1: config 14 has no interface number 0 [ 247.544947][ T29] usb 6-1: config 14 has no interface number 1 [ 247.556670][ T29] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 247.578480][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 247.592169][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 247.609788][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 247.665248][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 247.678475][ T29] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.693017][ T29] usb 6-1: config 14 interface 57 has no altsetting 0 [ 247.699935][ T29] usb 6-1: config 14 interface 228 has no altsetting 0 [ 247.729791][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.742120][ T29] usb 6-1: Product: syz [ 247.753865][ T29] usb 6-1: Manufacturer: syz [ 247.780849][ T29] usb 6-1: SerialNumber: syz [ 248.656411][ T8588] syzkaller0: entered promiscuous mode [ 248.698657][ T8588] syzkaller0: entered allmulticast mode [ 248.726576][ T29] legousbtower 6-1:14.57: interrupt endpoints not found [ 248.864297][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 248.881743][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 249.061349][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.127093][ T29] legousbtower 6-1:14.228: get version request failed: -32 [ 249.142120][ T29] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -32 [ 249.243882][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 249.307003][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 249.370656][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.450177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.553378][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 249.746923][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 249.822104][ T9] usb 2-1: Manufacturer: syz [ 249.948101][ T9] usb 2-1: config 0 descriptor?? [ 250.437429][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 250.525989][ T8624] Illegal XDP return value 4294967294 on prog (id 44) dev N/A, expect packet loss! [ 250.526828][ T9] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 250.671586][ T8629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.802507][ T5706] usb 2-1: USB disconnect, device number 10 [ 250.864165][ T5720] usb 6-1: USB disconnect, device number 6 [ 251.730890][ T8658] program syz.0.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.740582][ T8658] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 252.441359][ T30] audit: type=1400 audit(1786969802.515:641): avc: denied { write } for pid=8663 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 252.745830][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 253.245792][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.891'. [ 255.175475][ T30] audit: type=1400 audit(1786969805.335:642): avc: denied { connect } for pid=8703 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.201747][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 255.285270][ T30] audit: type=1400 audit(1786969805.375:643): avc: denied { getopt } for pid=8703 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.395096][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.407871][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.567685][ T30] audit: type=1400 audit(1786969805.725:644): avc: denied { append } for pid=8708 comm="syz.0.901" name="v4l-subdev6" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.835039][ T30] audit: type=1400 audit(1786969805.995:645): avc: denied { write } for pid=8708 comm="syz.0.901" name="functions" dev="configfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.425655][ T8719] block nbd0: NBD_DISCONNECT [ 256.512748][ T8719] block nbd0: Send disconnect failed -32 [ 256.523230][ T8719] block nbd0: Disconnected due to user request. [ 256.533926][ T8719] block nbd0: shutting down sockets [ 256.575416][ T30] audit: type=1400 audit(1786969806.735:646): avc: denied { bind } for pid=8727 comm="syz.4.905" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.649613][ T30] audit: type=1400 audit(1786969806.735:647): avc: denied { name_bind } for pid=8727 comm="syz.4.905" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 256.725939][ T30] audit: type=1400 audit(1786969806.735:648): avc: denied { node_bind } for pid=8727 comm="syz.4.905" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 257.213507][ T30] audit: type=1400 audit(1786969807.375:649): avc: denied { read write } for pid=8743 comm="syz.4.914" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 257.258806][ T8744] Bluetooth: MGMT ver 1.23 [ 258.269148][ T30] audit: type=1400 audit(1786969807.405:650): avc: denied { open } for pid=8743 comm="syz.4.914" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 258.899502][ T8755] program syz.2.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.039709][ T8755] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.148912][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.916'. [ 259.185255][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 259.215121][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 259.244504][ T8760] netlink: 'syz.5.916': attribute type 4 has an invalid length. [ 259.280188][ T8760] netlink: 152 bytes leftover after parsing attributes in process `syz.5.916'. [ 259.352954][ T8760] .`: renamed from bond0 [ 261.202055][ T4917] Bluetooth: hci2: unexpected event for opcode 0x080d [ 261.227239][ T30] audit: type=1400 audit(1786969811.365:651): avc: denied { read write } for pid=8801 comm="syz.1.933" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 261.266211][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.934'. [ 261.554979][ T30] audit: type=1400 audit(1786969811.365:652): avc: denied { open } for pid=8801 comm="syz.1.933" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 261.999656][ T8811] program syz.4.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.104038][ T8811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 262.274824][ T30] audit: type=1400 audit(1786969812.435:653): avc: denied { mount } for pid=8816 comm="syz.1.936" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 262.706259][ T30] audit: type=1400 audit(1786969812.835:654): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.484318][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.948'. [ 265.252750][ T4917] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 265.263757][ T4917] Bluetooth: hci2: Injecting HCI hardware error event [ 265.272283][ T4917] Bluetooth: hci2: hardware error 0x00 [ 265.453433][ T8860] syzkaller0: entered promiscuous mode [ 265.459001][ T8860] syzkaller0: entered allmulticast mode [ 265.676706][ T30] audit: type=1400 audit(1786969815.835:655): avc: denied { setopt } for pid=8861 comm="syz.5.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.318366][ T8882] syzkaller0: entered promiscuous mode [ 267.334771][ T8882] syzkaller0: entered allmulticast mode [ 267.403768][ T4917] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 267.447260][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 267.970454][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.961'. [ 268.968480][ T8910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.962'. [ 269.239923][ T29] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 270.189842][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.215349][ T29] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 270.236759][ T29] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 270.246880][ T29] usb 2-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 270.258245][ T29] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.276174][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 270.290141][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 270.302810][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.317262][ T29] usb 2-1: Product: syz [ 270.321843][ T29] usb 2-1: Manufacturer: syz [ 270.337417][ T29] usb 2-1: SerialNumber: syz [ 270.547634][ T4917] Bluetooth: hci3: unexpected event for opcode 0x080d [ 270.745736][ T30] audit: type=1400 audit(1786969820.905:656): avc: denied { create } for pid=8941 comm="syz.4.976" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.802410][ T30] audit: type=1400 audit(1786969820.905:657): avc: denied { mounton } for pid=8941 comm="syz.4.976" path="/214/file0" dev="tmpfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.979479][ T30] audit: type=1400 audit(1786969821.135:658): avc: denied { unlink } for pid=5600 comm="syz-executor" name="file0" dev="tmpfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.082591][ T29] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 272.097732][ T29] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 272.190469][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.191766][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.981'. [ 272.228361][ T29] usb 2-1: USB disconnect, device number 11 [ 272.283045][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.846814][ T8999] syzkaller0: entered promiscuous mode [ 273.894518][ T8999] syzkaller0: entered allmulticast mode [ 274.601382][ T4917] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 274.613405][ T4917] Bluetooth: hci3: Injecting HCI hardware error event [ 274.628337][ T5602] Bluetooth: hci3: hardware error 0x00 [ 276.831631][ T5602] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 276.875840][ T9056] program syz.1.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.903303][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1013'. [ 276.995493][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'. [ 278.021271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 278.992378][ T30] audit: type=1400 audit(1786969829.155:659): avc: denied { ioctl } for pid=9098 comm="syz.0.1030" path="socket:[20030]" dev="sockfs" ino=20030 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.134169][ T30] audit: type=1400 audit(1786969829.185:660): avc: denied { setopt } for pid=9099 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.217137][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'. [ 279.218433][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1033'. [ 279.393391][ T30] audit: type=1400 audit(1786969829.555:661): avc: denied { mount } for pid=9115 comm="syz.1.1037" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 279.455671][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 279.466419][ T30] audit: type=1400 audit(1786969829.555:662): avc: denied { mounton } for pid=9115 comm="syz.1.1037" path="/196/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 279.484794][ T9122] netlink: 'syz.5.1039': attribute type 3 has an invalid length. [ 279.500914][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 279.535571][ T30] audit: type=1400 audit(1786969829.605:663): avc: denied { name_bind } for pid=9119 comm="syz.4.1038" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 279.601135][ T30] audit: type=1400 audit(1786969829.625:664): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 279.821429][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 281.626930][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 281.827092][ T9169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.853990][ T30] audit: type=1326 audit(1786969832.015:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.1057" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4119e0d9 code=0x0 [ 281.939544][ T5720] team_slave_0: entered promiscuous mode [ 281.946226][ T5720] team_slave_1: entered promiscuous mode [ 283.481638][ T9192] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1065'. [ 283.597440][ T9196] 8021q: adding VLAN 0 to HW filter on device .` [ 283.870158][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.234682][ T30] audit: type=1400 audit(1786969834.395:666): avc: denied { getopt } for pid=9209 comm="syz.2.1075" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.918900][ T30] audit: type=1400 audit(1786969835.075:667): avc: denied { bind } for pid=9223 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.950090][ T30] audit: type=1400 audit(1786969835.095:668): avc: denied { listen } for pid=9223 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.992625][ T30] audit: type=1400 audit(1786969835.095:669): avc: denied { write } for pid=9223 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.086936][ T30] audit: type=1400 audit(1786969835.245:670): avc: denied { read } for pid=9223 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.885245][ T9278] program syz.5.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.921492][ T9283] kAFS: bad VL server IP address [ 291.059559][ T30] audit: type=1400 audit(1786969841.215:671): avc: denied { getopt } for pid=9324 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 292.050325][ T9336] syzkaller0: entered promiscuous mode [ 292.126825][ T9336] syzkaller0: entered allmulticast mode [ 294.782991][ T9368] program syz.1.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.131616][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 299.694594][ T9424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1137'. [ 301.107406][ T9439] syzkaller0: entered promiscuous mode [ 301.124708][ T9439] syzkaller0: entered allmulticast mode [ 302.191571][ T9459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1148'. [ 304.398909][ T30] audit: type=1400 audit(1786969854.555:672): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 305.054680][ T9526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438865345 (156087382080 ns) > initial count (116419789056 ns). Using initial count to start timer. [ 305.323817][ T9533] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1171'. [ 305.424604][ T9535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1172'. [ 305.710538][ T9538] syzkaller0: entered promiscuous mode [ 305.730139][ T9538] syzkaller0: entered allmulticast mode [ 305.748897][ T9541] bond0: option mode: invalid value (bal) [ 306.383358][ T30] audit: type=1400 audit(1786969856.545:673): avc: denied { map } for pid=9568 comm="syz.4.1184" path="socket:[22272]" dev="sockfs" ino=22272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 307.322596][ T9585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1185'. [ 308.561514][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 308.722077][ T5720] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 308.732669][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.743390][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.761538][ T5720] as10x_usb: device has been detected [ 308.785788][ T5720] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 308.882245][ T5720] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 309.107115][ T30] audit: type=1400 audit(1786969859.265:674): avc: denied { firmware_load } for pid=5720 comm="kworker/1:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 309.107954][ T5720] as10x_usb: error during firmware upload part1 [ 309.145665][ T5720] Registered device Abilis Systems DVB-Titan [ 310.288393][ T9641] syzkaller0: entered promiscuous mode [ 310.310758][ T9641] syzkaller0: entered allmulticast mode [ 310.445953][ T30] audit: type=1400 audit(1786969860.595:675): avc: denied { write } for pid=9650 comm="syz.1.1211" name="functions" dev="configfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.604418][ T30] audit: type=1400 audit(1786969860.755:676): avc: denied { write } for pid=9650 comm="syz.1.1211" name="extensions" dev="configfs" ino=22433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.631876][ T9658] FAULT_INJECTION: forcing a failure. [ 310.631876][ T9658] name fail_futex, interval 1, probability 0, space 0, times 1 [ 310.646814][ T9] usb 1-1: USB disconnect, device number 14 [ 310.654040][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.5.1214 Not tainted syzkaller #0 PREEMPT(full) [ 310.654073][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.654092][ T9658] Call Trace: [ 310.654100][ T9658] [ 310.654109][ T9658] dump_stack_lvl+0x100/0x190 [ 310.654155][ T9658] should_fail_ex.cold+0x5/0xa [ 310.654185][ T9658] get_futex_key+0x1d2/0x14f0 [ 310.654222][ T9658] ? __pfx_get_futex_key+0x10/0x10 [ 310.654258][ T9658] ? enqueue_task+0x1dc/0x4f0 [ 310.654285][ T9658] futex_wait_setup+0x91/0x540 [ 310.654319][ T9658] __futex_wait+0x19f/0x300 [ 310.654346][ T9658] ? __pfx___futex_wait+0x10/0x10 [ 310.654369][ T9658] ? __pfx_try_to_wake_up+0x10/0x10 [ 310.654400][ T9658] ? futex_hash+0x311/0x400 [ 310.654432][ T9658] ? __pfx_futex_wake_mark+0x10/0x10 [ 310.654461][ T9658] ? find_held_lock+0x2b/0x80 [ 310.654482][ T9658] ? futex_wake+0x4ea/0x5e0 [ 310.654513][ T9658] futex_wait+0xe6/0x370 [ 310.654538][ T9658] ? __pfx_futex_wait+0x10/0x10 [ 310.654569][ T9658] ? rcu_read_lock_any_held+0x6a/0xa0 [ 310.654593][ T9658] ? find_held_lock+0x2b/0x80 [ 310.654613][ T9658] ? ksys_write+0x190/0x250 [ 310.654634][ T9658] ? ksys_write+0x190/0x250 [ 310.654667][ T9658] do_futex+0x265/0x440 [ 310.654702][ T9658] ? __pfx_do_futex+0x10/0x10 [ 310.654738][ T9658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 310.654772][ T9658] __x64_sys_futex+0x34f/0x4d0 [ 310.654807][ T9658] ? fput+0x79/0x100 [ 310.654834][ T9658] ? __pfx___x64_sys_futex+0x10/0x10 [ 310.654867][ T9658] ? ksys_write+0x1ac/0x250 [ 310.654889][ T9658] ? __pfx_ksys_write+0x10/0x10 [ 310.654920][ T9658] do_syscall_64+0x115/0x870 [ 310.654945][ T9658] ? clear_bhb_loop+0x70/0xc0 [ 310.654972][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.654996][ T9658] RIP: 0033:0x7fa39819e0d9 [ 310.655019][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.655046][ T9658] RSP: 002b:00007fa3990ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.655073][ T9658] RAX: ffffffffffffffda RBX: 00007fa398425fa8 RCX: 00007fa39819e0d9 [ 310.655090][ T9658] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa398425fa8 [ 310.655105][ T9658] RBP: 00007fa398425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 310.655119][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.655133][ T9658] R13: 00007fa398426038 R14: 00007fffe34ec5b0 R15: 00007fffe34ec698 [ 310.655165][ T9658] [ 311.207248][ T9] Unregistered device Abilis Systems DVB-Titan [ 311.211015][ T9] as10x_usb: device has been disconnected [ 312.291418][ T9679] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1221'. [ 312.293767][ T9674] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 312.403874][ T9681] netlink: 'syz.2.1222': attribute type 2 has an invalid length. [ 312.437562][ T30] audit: type=1400 audit(1786969862.595:677): avc: denied { ioctl } for pid=9682 comm="syz.0.1223" path="socket:[23190]" dev="sockfs" ino=23190 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.464462][ T9681] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 312.764626][ T9690] FAULT_INJECTION: forcing a failure. [ 312.764626][ T9690] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 312.778047][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.2.1226 Not tainted syzkaller #0 PREEMPT(full) [ 312.778085][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 312.778101][ T9690] Call Trace: [ 312.778110][ T9690] [ 312.778120][ T9690] dump_stack_lvl+0x100/0x190 [ 312.778161][ T9690] should_fail_ex.cold+0x5/0xa [ 312.778191][ T9690] _copy_from_user+0x2e/0xd0 [ 312.778224][ T9690] get_timespec64+0x8d/0x240 [ 312.778250][ T9690] ? __pfx_get_timespec64+0x10/0x10 [ 312.778280][ T9690] ? __pfx_do_futex+0x10/0x10 [ 312.778313][ T9690] do_pselect.constprop.0+0xc8/0x270 [ 312.778341][ T9690] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 312.778364][ T9690] ? __x64_sys_futex+0x358/0x4d0 [ 312.778399][ T9690] ? xfd_validate_state+0x129/0x190 [ 312.778433][ T9690] __x64_sys_pselect6+0x149/0x1c0 [ 312.778461][ T9690] do_syscall_64+0x115/0x870 [ 312.778502][ T9690] ? clear_bhb_loop+0x70/0xc0 [ 312.778531][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.778555][ T9690] RIP: 0033:0x7f0a1a39e0d9 [ 312.778573][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.778594][ T9690] RSP: 002b:00007f0a185f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 312.778617][ T9690] RAX: ffffffffffffffda RBX: 00007f0a1a625fa0 RCX: 00007f0a1a39e0d9 [ 312.778632][ T9690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.778645][ T9690] RBP: 00007f0a1a435024 R08: 00002000000001c0 R09: 0000000000000000 [ 312.778659][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.778672][ T9690] R13: 00007f0a1a626038 R14: 00007f0a1a625fa0 R15: 00007fffe9737968 [ 312.778703][ T9690] [ 313.476490][ T5602] Bluetooth: hci0: command 0x0401 tx timeout [ 314.310198][ T9676] ªªªªªª: renamed from vlan0 (while UP) [ 314.745301][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1237'. [ 314.777850][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 314.797876][ T9732] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 314.807711][ T9732] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1237'. [ 315.054572][ T9734] program syz.5.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.064030][ T9734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.099916][ T9739] FAULT_INJECTION: forcing a failure. [ 315.099916][ T9739] name fail_futex, interval 1, probability 0, space 0, times 0 [ 315.113777][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.2.1242 Not tainted syzkaller #0 PREEMPT(full) [ 315.113808][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 315.113822][ T9739] Call Trace: [ 315.113829][ T9739] [ 315.113838][ T9739] dump_stack_lvl+0x100/0x190 [ 315.113871][ T9739] should_fail_ex.cold+0x5/0xa [ 315.113900][ T9739] get_futex_key+0x1d2/0x14f0 [ 315.113936][ T9739] ? __pfx_get_futex_key+0x10/0x10 [ 315.113969][ T9739] ? enqueue_task+0x1dc/0x4f0 [ 315.113996][ T9739] futex_wait_setup+0x91/0x540 [ 315.114029][ T9739] __futex_wait+0x19f/0x300 [ 315.114057][ T9739] ? __pfx___futex_wait+0x10/0x10 [ 315.114080][ T9739] ? __pfx_try_to_wake_up+0x10/0x10 [ 315.114110][ T9739] ? futex_hash+0x311/0x400 [ 315.114143][ T9739] ? __pfx_futex_wake_mark+0x10/0x10 [ 315.114175][ T9739] ? find_held_lock+0x2b/0x80 [ 315.114197][ T9739] ? futex_wake+0x4ea/0x5e0 [ 315.114227][ T9739] futex_wait+0xe6/0x370 [ 315.114252][ T9739] ? __pfx_futex_wait+0x10/0x10 [ 315.114283][ T9739] ? rcu_read_lock_any_held+0x6a/0xa0 [ 315.114306][ T9739] ? find_held_lock+0x2b/0x80 [ 315.114326][ T9739] ? ksys_write+0x190/0x250 [ 315.114346][ T9739] ? ksys_write+0x190/0x250 [ 315.114369][ T9739] do_futex+0x265/0x440 [ 315.114409][ T9739] ? __pfx_do_futex+0x10/0x10 [ 315.114443][ T9739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.114478][ T9739] __x64_sys_futex+0x34f/0x4d0 [ 315.114512][ T9739] ? fput+0x79/0x100 [ 315.114538][ T9739] ? __pfx___x64_sys_futex+0x10/0x10 [ 315.114570][ T9739] ? ksys_write+0x1ac/0x250 [ 315.114590][ T9739] ? __pfx_ksys_write+0x10/0x10 [ 315.114620][ T9739] do_syscall_64+0x115/0x870 [ 315.114644][ T9739] ? clear_bhb_loop+0x70/0xc0 [ 315.114671][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.114695][ T9739] RIP: 0033:0x7f0a1a39e0d9 [ 315.114714][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.114737][ T9739] RSP: 002b:00007f0a185f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.114760][ T9739] RAX: ffffffffffffffda RBX: 00007f0a1a625fa8 RCX: 00007f0a1a39e0d9 [ 315.114776][ T9739] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a1a625fa8 [ 315.114790][ T9739] RBP: 00007f0a1a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.114804][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.114818][ T9739] R13: 00007f0a1a626038 R14: 00007fffe9737880 R15: 00007fffe9737968 [ 315.114850][ T9739] [ 315.453602][ T9743] team0: Port device vlan0 added [ 315.674521][ T5734] IPVS: starting estimator thread 0... [ 315.754826][ T5602] Bluetooth: Wrong link type (-71) [ 315.764861][ T5602] Bluetooth: hci0: link tx timeout [ 315.770686][ T5602] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.792146][ T9748] IPVS: using max 41 ests per chain, 98400 per kthread [ 316.206270][ T9762] program syz.4.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.216049][ T9762] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 316.832690][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.839113][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.077263][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1253'. [ 317.873540][ T5602] Bluetooth: hci0: command 0x0401 tx timeout [ 318.001359][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.045822][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.156416][ T9781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.172915][ T9781] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 318.257968][ T5706] IPVS: starting estimator thread 0... [ 318.258347][ T9777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.345719][ T9777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.366093][ T9785] IPVS: using max 42 ests per chain, 100800 per kthread [ 318.441373][ T1113] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.479151][ T30] audit: type=1400 audit(1786969868.635:678): avc: denied { write } for pid=9787 comm="syz.0.1261" name="functions" dev="configfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.487564][ T1113] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.570691][ T30] audit: type=1400 audit(1786969868.665:679): avc: denied { write } for pid=9787 comm="syz.0.1261" name="c.1" dev="configfs" ino=13539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.657573][ T30] audit: type=1400 audit(1786969868.665:680): avc: denied { write } for pid=9787 comm="syz.0.1261" name="c.1" dev="configfs" ino=13539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.807191][ T9796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 319.939511][ T30] audit: type=1400 audit(1786969870.095:681): avc: denied { create } for pid=9829 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 320.970751][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1282'. [ 320.998056][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 321.027250][ T9848] netlink: 'syz.5.1282': attribute type 4 has an invalid length. [ 321.054337][ T9848] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1282'. [ 321.374731][ T9854] netlink: zone id is out of range [ 321.380069][ T9854] netlink: zone id is out of range [ 321.386562][ T9854] netlink: zone id is out of range [ 321.394692][ T9854] netlink: zone id is out of range [ 321.399919][ T9854] netlink: zone id is out of range [ 321.407316][ T9854] netlink: zone id is out of range [ 321.412829][ T9854] netlink: zone id is out of range [ 321.418104][ T9854] netlink: zone id is out of range [ 321.460098][ T9854] netlink: zone id is out of range [ 321.478624][ T9854] netlink: set zone limit has 4 unknown bytes [ 321.769323][ T9865] team0: Port device vlan0 added [ 321.783650][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 321.987177][ T9871] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1294'. [ 322.698627][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 322.752025][ T9885] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 322.809380][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 322.843377][ T9885] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1298'. [ 322.890174][ T9884] program syz.5.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.922896][ T9884] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.122099][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 324.577371][ T9916] syz.0.1311 (9916) used greatest stack depth: 19752 bytes left [ 325.330398][ T30] audit: type=1400 audit(1786969875.485:682): avc: denied { connect } for pid=9938 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.409062][ T5706] IPVS: starting estimator thread 0... [ 325.513917][ T9943] IPVS: using max 40 ests per chain, 96000 per kthread [ 325.861337][ T5706] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 326.023489][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 326.056411][ T5706] usb 2-1: config 0 has no interfaces? [ 326.071867][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.098965][ T5706] usb 2-1: config 0 descriptor?? [ 326.845994][ T9975] fuse: Bad value for 'fd' [ 327.429705][ T9993] overlayfs: overlapping lowerdir path [ 327.504534][ T9996] overlayfs: overlapping lowerdir path [ 327.599346][ T9998] mmap: syz.2.1337 (9998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 328.611371][ T5817] usb 2-1: USB disconnect, device number 12 [ 328.865058][T10014] net_ratelimit: 13 callbacks suppressed [ 328.865095][T10014] Set syz1 is full, maxelem 65536 reached [ 329.077787][T10018] bridge0: port 3(syz_tun) entered blocking state [ 329.115834][T10018] bridge0: port 3(syz_tun) entered disabled state [ 329.147829][T10018] syz_tun: entered allmulticast mode [ 329.212570][T10018] syz_tun: entered promiscuous mode [ 329.250615][T10018] bridge0: port 3(syz_tun) entered blocking state [ 329.259253][T10018] bridge0: port 3(syz_tun) entered forwarding state [ 329.858104][T10038] program syz.0.1359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.867998][T10038] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 330.575390][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1361'. [ 330.618365][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1361'. [ 330.663873][T10044] netlink: 'syz.5.1361': attribute type 4 has an invalid length. [ 330.712951][T10044] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1361'. [ 331.961586][ T5734] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 331.970922][ T5713] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 332.292241][ T5734] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 332.301734][ T5713] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 332.336040][ T5734] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.349380][ T5713] usb 6-1: config 0 has no interfaces? [ 332.364156][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.391561][ T5734] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 332.408690][ T5713] usb 6-1: config 0 descriptor?? [ 332.419178][ T30] audit: type=1400 audit(1786969882.575:683): avc: denied { write } for pid=10058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.534804][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 332.549004][ T30] audit: type=1400 audit(1786969882.665:684): avc: denied { write } for pid=10094 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.573384][ T5734] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 332.581590][ T5734] usb 1-1: Manufacturer: syz [ 332.589782][ T5734] usb 1-1: config 0 descriptor?? [ 332.613500][ T5734] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 332.786913][T10104] team0: Port device vlan0 added [ 332.928854][T10115] bond1: option mode: unable to set because the bond device has slaves [ 333.001476][T10120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1384'. [ 333.021964][T10120] netlink: 'syz.4.1384': attribute type 4 has an invalid length. [ 333.044966][T10120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1384'. [ 333.191039][ T30] audit: type=1400 audit(1786969883.345:685): avc: denied { write } for pid=10102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.316771][ T30] audit: type=1400 audit(1786969883.475:686): avc: denied { write } for pid=10131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.314576][ T30] audit: type=1400 audit(1786969884.465:687): avc: denied { write } for pid=10139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.467197][ T30] audit: type=1400 audit(1786969884.545:688): avc: denied { write } for pid=10162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.630024][ T5706] usb 6-1: USB disconnect, device number 7 [ 334.783672][ T5713] usb 1-1: USB disconnect, device number 15 [ 334.883841][ T30] audit: type=1400 audit(1786969885.045:689): avc: denied { recv } for pid=10181 comm="syz.0.1399" saddr=10.128.0.169 src=30006 daddr=10.128.1.69 dest=37650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.026991][ T30] audit: type=1400 audit(1786969885.185:690): avc: denied { create } for pid=10187 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.120124][ T30] audit: type=1400 audit(1786969885.215:691): avc: denied { setopt } for pid=10187 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.147958][ T30] audit: type=1400 audit(1786969885.215:692): avc: denied { bind } for pid=10187 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.338241][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1405'. [ 335.813514][T10213] program syz.1.1409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.824971][T10213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 336.289068][T10240] bridge0: port 3(syz_tun) entered blocking state [ 336.296536][T10240] bridge0: port 3(syz_tun) entered disabled state [ 336.332605][T10240] syz_tun: entered allmulticast mode [ 336.366218][T10240] syz_tun: entered promiscuous mode [ 336.399074][T10240] bridge0: port 3(syz_tun) entered blocking state [ 336.405702][T10240] bridge0: port 3(syz_tun) entered forwarding state [ 336.502453][T10240] macsec1: entered promiscuous mode [ 336.508256][T10240] bridge0: entered promiscuous mode [ 337.275804][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1428'. [ 337.832994][T10282] program syz.0.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.843950][T10282] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.781106][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1444'. [ 338.869699][T10296] program syz.2.1437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.906522][T10296] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 339.161266][ T5706] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 339.331302][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 339.362559][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.388398][ T5706] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 339.423309][ T5706] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 339.440379][ T5706] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 339.469110][ T5706] usb 5-1: config 14 has no interface number 0 [ 339.483906][ T5706] usb 5-1: config 14 has no interface number 1 [ 339.500385][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 339.521249][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 339.544447][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 339.580260][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 339.611284][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 339.641239][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.696466][ T5706] usb 5-1: config 14 interface 57 has no altsetting 0 [ 339.711762][ T5706] usb 5-1: config 14 interface 228 has no altsetting 0 [ 339.734781][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.752498][ T5706] usb 5-1: Product: syz [ 339.765180][ T5706] usb 5-1: Manufacturer: syz [ 339.779615][ T5706] usb 5-1: SerialNumber: syz [ 340.441454][ T5706] legousbtower 5-1:14.57: interrupt endpoints not found [ 340.813310][ T5706] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 340.851594][ T5706] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 341.080804][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1463'. [ 341.163360][T10350] fuse: Bad value for 'fd' [ 341.388017][T10355] usb 5-1: LEGO USB Tower reset control request failed [ 341.388699][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 341.388715][ T30] audit: type=1400 audit(1786969891.545:703): avc: denied { write } for pid=10304 comm="syz.4.1446" name="legousbtower0" dev="devtmpfs" ino=3068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 341.589397][ T5706] usb 5-1: USB disconnect, device number 17 [ 341.643271][ T5706] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 342.130047][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'. [ 342.314673][T10382] fuse: Bad value for 'fd' [ 342.582717][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.611498][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.628008][T10391] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 342.658054][T10391] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1481'. [ 343.065996][T10406] program syz.5.1488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.075730][T10406] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.384968][ T30] audit: type=1400 audit(1786969893.545:704): avc: denied { read } for pid=10419 comm="syz.4.1494" path="socket:[27556]" dev="sockfs" ino=27556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 343.670965][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1498'. [ 343.709874][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1498'. [ 343.746665][T10433] netlink: 'syz.5.1498': attribute type 4 has an invalid length. [ 343.838910][T10433] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1498'. [ 344.050961][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 345.256005][T10456] VFS: file-max limit 0 reached [ 345.956891][T10464] program syz.4.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.966334][T10464] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 346.695175][ T4917] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 346.699849][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1522'. [ 347.023186][ T30] audit: type=1400 audit(1786969897.185:705): avc: denied { write } for pid=10504 comm="syz.2.1525" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 347.060262][T10505] 0x000000000000-0x000000020000 : "" [ 347.116785][ T30] audit: type=1400 audit(1786969897.205:706): avc: denied { create } for pid=10498 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.175815][T10505] ftl_cs: FTL header not found. [ 347.214087][ T30] audit: type=1400 audit(1786969897.205:707): avc: denied { open } for pid=10504 comm="syz.2.1525" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 347.327502][ T30] audit: type=1400 audit(1786969897.215:708): avc: denied { ioctl } for pid=10498 comm="syz.0.1524" path="socket:[26535]" dev="sockfs" ino=26535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.458689][ T30] audit: type=1400 audit(1786969897.215:709): avc: denied { ioctl } for pid=10504 comm="syz.2.1525" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 347.586156][ T30] audit: type=1400 audit(1786969897.305:710): avc: denied { write } for pid=10498 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.662559][T10523] fuse: Bad value for 'group_id' [ 347.670956][T10523] fuse: Bad value for 'group_id' [ 347.854969][T10530] VFS: file-max limit 0 reached [ 348.615453][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 348.641690][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 348.970140][T10416] Set syz1 is full, maxelem 65536 reached [ 349.085334][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1545'. [ 349.336137][T10572] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 349.376551][T10572] bridge0: port 3(syz_tun) entered disabled state [ 349.393004][T10572] syz_tun: left allmulticast mode [ 349.402207][T10572] bridge0: port 3(syz_tun) entered disabled state [ 349.505155][T10572] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 349.557995][T10576] program syz.5.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.567490][T10576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 349.711064][T10579] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 349.772866][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 349.784978][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 350.218542][T10602] bond1: option mode: unable to set because the bond device has slaves [ 350.307112][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 350.346922][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 350.358057][T10606] netlink: 'syz.4.1564': attribute type 4 has an invalid length. [ 350.388515][ T30] audit: type=1400 audit(1786969900.545:711): avc: denied { setopt } for pid=10607 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 350.389536][T10606] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1564'. [ 351.121391][ T5734] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 351.303168][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 351.322900][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.345553][ T5734] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 351.377560][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 351.407053][ T5734] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 351.416911][ T5734] usb 5-1: Manufacturer: syz [ 351.428163][ T5734] usb 5-1: config 0 descriptor?? [ 351.441808][ T5734] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 351.763390][T10666] team0: Port device vlan0 added [ 352.008386][ T30] audit: type=1400 audit(1786969902.165:712): avc: denied { write } for pid=10675 comm="syz.5.1597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 353.598877][T10737] overlayfs: missing 'lowerdir' [ 353.916497][ T5734] usb 5-1: USB disconnect, device number 18 [ 354.951373][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.132021][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 355.184881][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.245359][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 355.294582][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 355.340021][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 355.365984][ T9] usb 1-1: Manufacturer: syz [ 355.394154][ T9] usb 1-1: config 0 descriptor?? [ 355.420134][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 355.713846][T10806] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 355.751866][T10806] syz_tun: entered promiscuous mode [ 355.840366][T10806] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 356.648487][T10852] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 357.014044][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 357.050996][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 357.708210][ T5706] usb 1-1: USB disconnect, device number 16 [ 357.711347][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'. [ 357.728873][T10884] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 357.799469][ T30] audit: type=1400 audit(1786969907.955:713): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 357.901757][ T30] audit: type=1400 audit(1786969907.955:714): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 358.149150][ T30] audit: type=1400 audit(1786969908.305:715): avc: denied { read } for pid=10895 comm="syz.0.1689" name="mtd1" dev="devtmpfs" ino=3071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 358.545465][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 358.583995][T10918] netlink: 'syz.1.1697': attribute type 4 has an invalid length. [ 358.612723][T10918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1697'. [ 358.630243][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1698'. [ 358.741333][ T5706] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 358.798315][T10927] 0x000000000000-0x000000020000 : "" [ 358.835305][T10927] ftl_cs: FTL header not found. [ 358.933111][ T5706] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 358.960229][ T5706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 359.000585][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 359.056485][ T5706] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 359.086785][ T5706] usb 1-1: Manufacturer: syz [ 359.122148][ T5706] usb 1-1: config 0 descriptor?? [ 359.162796][ T5706] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 359.430089][T10950] netlink: 'syz.5.1711': attribute type 4 has an invalid length. [ 359.449243][T10950] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1711'. [ 359.704897][T10957] ================================================================== [ 359.712999][T10957] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 359.720730][T10957] Read of size 8 at addr ffff88802caab218 by task syz.1.1715/10957 [ 359.728608][T10957] [ 359.730918][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.1.1715 Not tainted syzkaller #0 PREEMPT(full) [ 359.730945][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 359.730959][T10957] Call Trace: [ 359.730966][T10957] [ 359.730975][T10957] dump_stack_lvl+0x100/0x190 [ 359.731004][T10957] print_report+0x13d/0x4b0 [ 359.731035][T10957] ? __virt_addr_valid+0x239/0x430 [ 359.731062][T10957] ? dvb_device_open+0x33f/0x3b0 [ 359.731087][T10957] kasan_report+0xdf/0x1c0 [ 359.731114][T10957] ? dvb_device_open+0x33f/0x3b0 [ 359.731144][T10957] ? __pfx_dvb_device_open+0x10/0x10 [ 359.731172][T10957] dvb_device_open+0x33f/0x3b0 [ 359.731201][T10957] ? __pfx_dvb_device_open+0x10/0x10 [ 359.731227][T10957] chrdev_open+0x234/0x6a0 [ 359.731251][T10957] ? __pfx_chrdev_open+0x10/0x10 [ 359.731273][T10957] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 359.731304][T10957] do_dentry_open+0x6ab/0x14d0 [ 359.731323][T10957] ? __pfx_chrdev_open+0x10/0x10 [ 359.731348][T10957] vfs_open+0x82/0x3f0 [ 359.731373][T10957] path_openat+0x2873/0x4280 [ 359.731400][T10957] ? __pfx_path_openat+0x10/0x10 [ 359.731425][T10957] do_file_open+0x20e/0x430 [ 359.731446][T10957] ? __pfx_do_file_open+0x10/0x10 [ 359.731477][T10957] ? alloc_fd+0x471/0x7a0 [ 359.731499][T10957] ? do_getname+0x191/0x390 [ 359.731524][T10957] do_sys_openat2+0x10f/0x1e0 [ 359.731549][T10957] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.731577][T10957] __x64_sys_openat+0x12d/0x210 [ 359.731602][T10957] ? __pfx___x64_sys_openat+0x10/0x10 [ 359.731632][T10957] do_syscall_64+0x115/0x870 [ 359.731654][T10957] ? clear_bhb_loop+0x70/0xc0 [ 359.731677][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.731697][T10957] RIP: 0033:0x7fa86ef5e90e [ 359.731714][T10957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.731734][T10957] RSP: 002b:00007fa86fda5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.731754][T10957] RAX: ffffffffffffffda RBX: 00007fa86fda66c0 RCX: 00007fa86ef5e90e [ 359.731768][T10957] RDX: 0000000000000002 RSI: 00007fa86fda5c00 RDI: ffffffffffffff9c [ 359.731781][T10957] RBP: 00007fa86fda5c00 R08: 0000000000000000 R09: 0000000000000000 [ 359.731793][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 359.731805][T10957] R13: 00007fa86f226038 R14: 00007fa86f225fa0 R15: 00007fffa77a3208 [ 359.731826][T10957] [ 359.731833][T10957] [ 359.970172][T10957] Allocated by task 5612: [ 359.974494][T10957] kasan_save_stack+0x30/0x50 [ 359.979162][T10957] kasan_save_track+0x14/0x30 [ 359.983823][T10957] __kasan_kmalloc+0xaa/0xb0 [ 359.988398][T10957] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 359.993751][T10957] inode_doinit_use_xattr+0x54/0x330 [ 359.999024][T10957] inode_doinit_with_dentry+0x10e6/0x1320 [ 360.004734][T10957] selinux_d_instantiate+0x26/0x40 [ 360.009842][T10957] security_d_instantiate+0x14c/0x1b0 [ 360.015198][T10957] d_splice_alias_ops+0xd7/0x15c0 [ 360.020220][T10957] kernfs_iop_lookup+0x23f/0x2d0 [ 360.025149][T10957] __lookup_slow+0x155/0x320 [ 360.029727][T10957] lookup_slow+0x50/0x70 [ 360.033960][T10957] link_path_walk+0x1377/0x1cc0 [ 360.038799][T10957] path_openat+0x1c9/0x4280 [ 360.043286][T10957] do_file_open+0x20e/0x430 [ 360.047773][T10957] do_sys_openat2+0x10f/0x1e0 [ 360.052437][T10957] __x64_sys_openat+0x12d/0x210 [ 360.057275][T10957] do_syscall_64+0x115/0x870 [ 360.061852][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.067734][T10957] [ 360.070034][T10957] Freed by task 5612: [ 360.073992][T10957] kasan_save_stack+0x30/0x50 [ 360.078655][T10957] kasan_save_track+0x14/0x30 [ 360.083317][T10957] kasan_save_free_info+0x3b/0x70 [ 360.088322][T10957] __kasan_slab_free+0x5f/0x80 [ 360.093074][T10957] kfree+0x22b/0x6c0 [ 360.096951][T10957] inode_doinit_use_xattr+0x1e4/0x330 [ 360.102310][T10957] inode_doinit_with_dentry+0x10e6/0x1320 [ 360.108019][T10957] selinux_d_instantiate+0x26/0x40 [ 360.113120][T10957] security_d_instantiate+0x14c/0x1b0 [ 360.118476][T10957] d_splice_alias_ops+0xd7/0x15c0 [ 360.123491][T10957] kernfs_iop_lookup+0x23f/0x2d0 [ 360.128413][T10957] __lookup_slow+0x155/0x320 [ 360.132991][T10957] lookup_slow+0x50/0x70 [ 360.137223][T10957] link_path_walk+0x1377/0x1cc0 [ 360.142062][T10957] path_openat+0x1c9/0x4280 [ 360.146548][T10957] do_file_open+0x20e/0x430 [ 360.151035][T10957] do_sys_openat2+0x10f/0x1e0 [ 360.155701][T10957] __x64_sys_openat+0x12d/0x210 [ 360.160537][T10957] do_syscall_64+0x115/0x870 [ 360.165112][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.170989][T10957] [ 360.173294][T10957] The buggy address belongs to the object at ffff88802caab200 [ 360.173294][T10957] which belongs to the cache kmalloc-256 of size 256 [ 360.187328][T10957] The buggy address is located 24 bytes inside of [ 360.187328][T10957] freed 256-byte region [ffff88802caab200, ffff88802caab300) [ 360.201018][T10957] [ 360.203322][T10957] The buggy address belongs to the physical page: [ 360.209724][T10957] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2caaa [ 360.218470][T10957] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.226949][T10957] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 360.234477][T10957] page_type: f5(slab) [ 360.238441][T10957] raw: 00fff00000000040 ffff88801c022b40 dead000000000100 dead000000000122 [ 360.247011][T10957] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 360.255578][T10957] head: 00fff00000000040 ffff88801c022b40 dead000000000100 dead000000000122 [ 360.264231][T10957] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 360.272889][T10957] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 360.281550][T10957] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 360.290203][T10957] page dumped because: kasan: bad access detected [ 360.296613][T10957] page_owner tracks the page as allocated [ 360.302303][T10957] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14890104607, free_ts 0 [ 360.321997][T10957] post_alloc_hook+0xfd/0x120 [ 360.326661][T10957] get_page_from_freelist+0xf48/0x3530 [ 360.332101][T10957] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 360.337977][T10957] new_slab+0xa2/0x640 [ 360.342029][T10957] refill_objects+0xe3/0x410 [ 360.346601][T10957] __pcs_replace_empty_main+0x376/0x680 [ 360.352129][T10957] __kmalloc_cache_noprof+0x479/0x6c0 [ 360.357486][T10957] bus_add_driver+0x92/0x5b0 [ 360.362060][T10957] driver_register+0x1e2/0x360 [ 360.366813][T10957] usb_register_driver+0x21c/0x3e0 [ 360.371921][T10957] do_one_initcall+0x11d/0x700 [ 360.376677][T10957] kernel_init_freeable+0x6ea/0x7b0 [ 360.381858][T10957] kernel_init+0x1f/0x1e0 [ 360.386175][T10957] ret_from_fork+0x72b/0xd50 [ 360.390758][T10957] ret_from_fork_asm+0x1a/0x30 [ 360.395514][T10957] page_owner free stack trace missing [ 360.400858][T10957] [ 360.403161][T10957] Memory state around the buggy address: [ 360.408787][T10957] ffff88802caab100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 360.416828][T10957] ffff88802caab180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 360.424869][T10957] >ffff88802caab200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.432905][T10957] ^ [ 360.437731][T10957] ffff88802caab280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.445770][T10957] ffff88802caab300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 360.453809][T10957] ================================================================== [ 360.619559][T10957] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.626791][T10957] CPU: 1 UID: 0 PID: 10957 Comm: syz.1.1715 Not tainted syzkaller #0 PREEMPT(full) [ 360.636151][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 360.646188][T10957] Call Trace: [ 360.649448][T10957] [ 360.652363][T10957] dump_stack_lvl+0x100/0x190 [ 360.657033][T10957] vpanic+0x552/0x970 [ 360.660999][T10957] ? __pfx_vpanic+0x10/0x10 [ 360.665484][T10957] ? mark_held_locks+0x40/0x70 [ 360.670239][T10957] ? dvb_device_open+0x33f/0x3b0 [ 360.675172][T10957] panic+0xd1/0xe0 [ 360.678889][T10957] ? __pfx_panic+0x10/0x10 [ 360.683291][T10957] ? dvb_device_open+0x33f/0x3b0 [ 360.688229][T10957] ? preempt_schedule_common+0x42/0xc0 [ 360.693695][T10957] check_panic_on_warn.cold+0x19/0x34 [ 360.699060][T10957] end_report.part.0+0x3a/0x90 [ 360.703822][T10957] kasan_report.cold+0xe/0x18 [ 360.708499][T10957] ? dvb_device_open+0x33f/0x3b0 [ 360.713440][T10957] ? __pfx_dvb_device_open+0x10/0x10 [ 360.718720][T10957] dvb_device_open+0x33f/0x3b0 [ 360.723478][T10957] ? __pfx_dvb_device_open+0x10/0x10 [ 360.728758][T10957] chrdev_open+0x234/0x6a0 [ 360.733164][T10957] ? __pfx_chrdev_open+0x10/0x10 [ 360.738087][T10957] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 360.744415][T10957] do_dentry_open+0x6ab/0x14d0 [ 360.749172][T10957] ? __pfx_chrdev_open+0x10/0x10 [ 360.754100][T10957] vfs_open+0x82/0x3f0 [ 360.758163][T10957] path_openat+0x2873/0x4280 [ 360.762755][T10957] ? __pfx_path_openat+0x10/0x10 [ 360.767689][T10957] do_file_open+0x20e/0x430 [ 360.772184][T10957] ? __pfx_do_file_open+0x10/0x10 [ 360.777211][T10957] ? alloc_fd+0x471/0x7a0 [ 360.781533][T10957] ? do_getname+0x191/0x390 [ 360.786036][T10957] do_sys_openat2+0x10f/0x1e0 [ 360.790705][T10957] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.795900][T10957] __x64_sys_openat+0x12d/0x210 [ 360.800740][T10957] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.806107][T10957] do_syscall_64+0x115/0x870 [ 360.810686][T10957] ? clear_bhb_loop+0x70/0xc0 [ 360.815358][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.821240][T10957] RIP: 0033:0x7fa86ef5e90e [ 360.825644][T10957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.845238][T10957] RSP: 002b:00007fa86fda5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.853644][T10957] RAX: ffffffffffffffda RBX: 00007fa86fda66c0 RCX: 00007fa86ef5e90e [ 360.861602][T10957] RDX: 0000000000000002 RSI: 00007fa86fda5c00 RDI: ffffffffffffff9c [ 360.869569][T10957] RBP: 00007fa86fda5c00 R08: 0000000000000000 R09: 0000000000000000 [ 360.877529][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 360.885487][T10957] R13: 00007fa86f226038 R14: 00007fa86f225fa0 R15: 00007fffa77a3208 [ 360.893456][T10957] [ 360.896707][T10957] Kernel Offset: disabled [ 360.901015][T10957] Rebooting in 86400 seconds..