last executing test programs: 2m46.046463565s ago: executing program 0 (id=287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2m45.060244738s ago: executing program 0 (id=296): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x2c2, 0x8, 0x3, 0x1, {0xb0000000, 0x1, 0x565, 0x69, 0xf4b, 0x2, 0xfffe, 0x8bc6, 0x4130, 0xe150, 0x1c, 0x7, 0xb2bf, 0x3, "fe1d000034130000000000bd047fad000000090000000000000004b427184010"}}) 2m44.969354989s ago: executing program 0 (id=299): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000180)=@other={0x2030000200000345, &(0x7f0000000280)}) 2m44.721172945s ago: executing program 0 (id=304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 2m42.752656764s ago: executing program 0 (id=334): r0 = syz_open_dev$video(&(0x7f0000000180), 0x7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000380)={0x0, 0x2, 0x300}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) 2m42.660298128s ago: executing program 0 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 204', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 2m27.265598628s ago: executing program 32 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 204', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 2m25.636472996s ago: executing program 4 (id=446): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 2m24.619033353s ago: executing program 4 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000540)={0x0, 0x674, 0xfffc}, 0x8) 2m23.543580567s ago: executing program 4 (id=459): syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioperm(0x6, 0x9, 0x824) r0 = syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740)=0x0, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000001bc0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b80)=@any_dev={0x2, 0x954, 0x0, 0x0, 0x1000, 0x10001, 0x0, 0x0, 0x160}}}, 0xfffffffffffffffe) 2m23.348860818s ago: executing program 4 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m23.223374691s ago: executing program 4 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000b9042abd701e3000000000000000", @ANYRES32=r2, @ANYBLOB="011802003537a9401800128008000100677265000c0002800600020023"], 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2m22.79648295s ago: executing program 4 (id=464): r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m22.549964863s ago: executing program 33 (id=464): r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m40.34116257s ago: executing program 2 (id=792): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1m40.242686419s ago: executing program 2 (id=795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m39.948533139s ago: executing program 2 (id=796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x2b1b1983) close_range(r0, r1, 0x0) 1m38.316412021s ago: executing program 2 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 1m38.275176406s ago: executing program 2 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) 1m37.717862691s ago: executing program 2 (id=829): fsopen(0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m37.426538643s ago: executing program 34 (id=829): fsopen(0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 20.116554327s ago: executing program 5 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd7000110000000100000008000100", @ANYRES32=r3, @ANYBLOB="0800020000000000f500"], 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) 19.67213449s ago: executing program 5 (id=1769): fcntl$getflags(0xffffffffffffffff, 0x1) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 19.464557315s ago: executing program 5 (id=1770): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 19.31420622s ago: executing program 5 (id=1771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x12141, 0x0) close(0x4) 19.149498342s ago: executing program 5 (id=1772): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 18.964659731s ago: executing program 5 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 5.370793536s ago: executing program 3 (id=1885): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 5.215049152s ago: executing program 3 (id=1889): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x8, {0x20000, 0xcbfb, 0x0, {0x1, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) 4.99181344s ago: executing program 3 (id=1892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/71, 0x47}], 0x1, 0x9, 0x1) 4.207021656s ago: executing program 7 (id=1895): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.609820878s ago: executing program 35 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 1.385552984s ago: executing program 3 (id=1907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}, {0x1}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000540)=""/145, 0x50, 0x91, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.35306046s ago: executing program 6 (id=1908): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x9) 1.136324411s ago: executing program 6 (id=1910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 958.435151ms ago: executing program 1 (id=1912): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) 953.764292ms ago: executing program 7 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 928.002835ms ago: executing program 6 (id=1914): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) openat(r0, &(0x7f0000000240)='./file1\x00', 0x103a02, 0x60) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 768.075579ms ago: executing program 7 (id=1915): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 747.02255ms ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x300, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 654.352374ms ago: executing program 6 (id=1917): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r3, 0x0, r4}) 581.873901ms ago: executing program 7 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 560.066044ms ago: executing program 1 (id=1919): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 475.64507ms ago: executing program 6 (id=1920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x100408c0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5f, 0x3}) 445.549015ms ago: executing program 1 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0xff, 0xe4, 0x0, 0x6, 0x70, 0x8, 0x3, 0x9, 0x9, 0xc, 0x2, 0x0, 0xc, 0x4, 0x10}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 316.81989ms ago: executing program 1 (id=1922): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r0, 0x101) 305.060274ms ago: executing program 6 (id=1923): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 212.952435ms ago: executing program 3 (id=1924): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x90) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{0x0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, 0x4, 0x1}) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 181.363512ms ago: executing program 1 (id=1925): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r1) close(r0) 175.256779ms ago: executing program 7 (id=1926): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000387, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000400), &(0x7f0000000600)}, 0x20) 46.677228ms ago: executing program 7 (id=1927): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) 0s ago: executing program 3 (id=1928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40840}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/153, 0x99}], 0x1}, 0x0) kernel console output (not intermixed with test programs): tem_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.410799][ T5708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 169.429722][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.431009][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 169.446496][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.468696][ T5708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 169.500194][ T5708] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 169.516575][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.517397][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.538193][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.545183][ T5708] usb 4-1: Product: syz [ 169.552510][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.557200][ T5708] usb 4-1: Manufacturer: syz [ 169.584658][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.607595][ T5708] usb 4-1: SerialNumber: syz [ 169.621589][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 169.628924][ T5708] usb 4-1: config 0 descriptor?? [ 169.639323][ T8401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.647532][ T8401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.656034][ T5708] usb 4-1: ucan: probing device on interface #0 [ 169.739079][ T8317] hsr_slave_0: entered promiscuous mode [ 169.748688][ T8317] hsr_slave_1: entered promiscuous mode [ 169.755137][ T8317] debugfs: 'hsr0' already exists in 'hsr' [ 169.766475][ T8317] Cannot create hsr debugfs directory [ 169.800761][ T5709] usb 2-1: USB disconnect, device number 13 [ 169.883065][ T5709] Unregistered device Abilis Systems DVB-Titan [ 169.886589][ T5625] Bluetooth: hci4: command tx timeout [ 169.928663][ T5709] as10x_usb: device has been disconnected [ 170.138982][ T5708] usb 4-1: ucan: failed to retrieve device info [ 170.152626][ T5708] usb 4-1: ucan: probe failed; try to update the device firmware [ 170.180114][ T5708] usb 4-1: USB disconnect, device number 10 [ 170.324528][ T8448] input: syz0 as /devices/virtual/input/input17 [ 170.433891][ T8317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 170.468907][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.499884][ T8317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 170.506013][ T30] audit: type=1400 audit(1785803026.428:638): avc: denied { write } for pid=8438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.551754][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.570993][ T8317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.623110][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.634375][ T8317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.651140][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.657158][ T30] audit: type=1400 audit(1785803026.578:639): avc: denied { write } for pid=8461 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.739395][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 170.806861][ T5709] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 170.822172][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.875130][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.892718][ T30] audit: type=1326 audit(1785803026.818:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.5.862" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f603579e019 code=0x0 [ 170.924408][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.931576][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.942857][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.949980][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.960264][ T5709] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.974016][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.982569][ T5709] usb 2-1: Product: syz [ 170.993207][ T5709] usb 2-1: Manufacturer: syz [ 171.002682][ T5709] usb 2-1: SerialNumber: syz [ 171.019004][ T5709] usb 2-1: config 0 descriptor?? [ 171.127477][ T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.239743][ T5709] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 171.286883][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 171.299874][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 171.314344][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.322140][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.331953][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.345575][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.356061][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.369165][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.378598][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.595869][ T8317] veth0_vlan: entered promiscuous mode [ 171.601062][ T29] usb 4-1: usb_control_msg returned -32 [ 171.608892][ T29] usbtmc 4-1:16.0: can't read capabilities [ 171.611738][ T8317] veth1_vlan: entered promiscuous mode [ 171.649764][ T8317] veth0_macvtap: entered promiscuous mode [ 171.658292][ T8317] veth1_macvtap: entered promiscuous mode [ 171.673620][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.686076][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.719706][ T2989] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.749525][ T739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.759707][ T739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.779266][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 171.833895][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.841847][ T739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.857302][ T5709] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 171.870865][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.881435][ T5709] usb 2-1: USB disconnect, device number 14 [ 171.921939][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.931240][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.956923][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 171.967386][ T5625] Bluetooth: hci4: command tx timeout [ 171.972200][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.994069][ T9] usb 7-1: config 179 has no interface number 0 [ 172.001976][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 172.029749][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 172.031895][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 172.031908][ T30] audit: type=1400 audit(1785803027.958:643): avc: denied { write } for pid=8509 comm="syz.7.830" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.054511][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.101986][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 172.138807][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 172.174740][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 172.194209][ T30] audit: type=1400 audit(1785803028.108:644): avc: denied { name_bind } for pid=8514 comm="syz.7.867" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 172.201810][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.246359][ T8502] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 172.259693][ T30] audit: type=1400 audit(1785803028.188:645): avc: denied { create } for pid=8517 comm="syz.7.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.293922][ T30] audit: type=1400 audit(1785803028.208:646): avc: denied { write } for pid=8517 comm="syz.7.869" path="socket:[23858]" dev="sockfs" ino=23858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.326664][ T30] audit: type=1400 audit(1785803028.208:647): avc: denied { getopt } for pid=8517 comm="syz.7.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.422086][ T30] audit: type=1400 audit(1785803028.348:648): avc: denied { bind } for pid=8520 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.451405][ T8519] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 172.468064][ T30] audit: type=1400 audit(1785803028.348:649): avc: denied { node_bind } for pid=8520 comm="syz.5.870" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 172.590249][ T30] audit: type=1400 audit(1785803028.518:650): avc: denied { write } for pid=8526 comm="syz.5.873" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 172.653311][ T7919] usb 4-1: USB disconnect, device number 11 [ 172.768346][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.812677][ T8533] bridge_slave_1 (unregistering): left allmulticast mode [ 172.826192][ T8533] bridge_slave_1 (unregistering): left promiscuous mode [ 172.850116][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.869251][ T7919] usb 7-1: USB disconnect, device number 7 [ 172.869271][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 172.883643][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 172.920801][ T8537] netlink: 432 bytes leftover after parsing attributes in process `syz.5.877'. [ 172.945205][ T30] audit: type=1400 audit(1785803028.868:651): avc: denied { ioctl } for pid=8536 comm="syz.5.877" path="socket:[22847]" dev="sockfs" ino=22847 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.028969][ T30] audit: type=1400 audit(1785803028.958:652): avc: denied { read } for pid=8541 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.091427][ T8544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.188673][ T8544] md: loop0 has zero or unknown size, marking faulty! [ 173.262728][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.7.882'. [ 174.048221][ T5625] Bluetooth: hci4: command tx timeout [ 175.225172][ T8620] gadgetfs: bound to dummy_udc driver [ 175.454586][ T8629] bridge1: entered promiscuous mode [ 175.463093][ T8629] bridge1: entered allmulticast mode [ 175.489071][ T8629] team0: Port device bridge1 added [ 175.521535][ T8630] bridge0: port 3(team0) entered blocking state [ 175.553356][ T8630] bridge0: port 3(team0) entered disabled state [ 175.582304][ T8630] team0: entered allmulticast mode [ 175.609588][ T8630] team_slave_0: entered allmulticast mode [ 175.621836][ T8630] team_slave_1: entered allmulticast mode [ 175.640011][ T8630] team0: entered promiscuous mode [ 175.645138][ T8630] team_slave_0: entered promiscuous mode [ 175.674034][ T8630] team_slave_1: entered promiscuous mode [ 175.683529][ T8630] bridge0: port 3(team0) entered blocking state [ 175.690983][ T8630] bridge0: port 3(team0) entered forwarding state [ 176.076630][ T7919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.084295][ T5736] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 176.126515][ T5709] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 176.237946][ T5736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.248303][ T7919] usb 4-1: config 0 has no interfaces? [ 176.253782][ T5736] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.262864][ T7919] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.272710][ T5736] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 176.281826][ T7919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.290247][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.300544][ T7919] usb 4-1: config 0 descriptor?? [ 176.306524][ T5709] usb 8-1: Using ep0 maxpacket: 8 [ 176.312981][ T5736] usb 6-1: config 0 descriptor?? [ 176.320945][ T5709] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 176.337738][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.348126][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.359328][ T5709] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.374880][ T5709] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.384806][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.528277][ T9] usb 4-1: USB disconnect, device number 12 [ 176.605643][ T5709] usb 8-1: GET_CAPABILITIES returned 0 [ 176.619047][ T5709] usbtmc 8-1:16.0: can't read capabilities [ 176.734553][ T5736] usb 6-1: USB disconnect, device number 5 [ 176.817404][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 176.829365][ T9] usb 8-1: USB disconnect, device number 2 [ 177.518841][ T8664] syzkaller1: entered promiscuous mode [ 177.541148][ T8664] syzkaller1: entered allmulticast mode [ 177.855283][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 177.855299][ T30] audit: type=1400 audit(1785803033.778:672): avc: denied { create } for pid=8683 comm="syz.7.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.291754][ T8702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.333031][ T30] audit: type=1400 audit(1785803034.258:673): avc: denied { ioctl } for pid=8703 comm="syz.7.936" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.366594][ T5708] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.555341][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.595811][ T5708] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.631803][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.672791][ T5708] usb 2-1: config 0 descriptor?? [ 178.709807][ T30] audit: type=1400 audit(1785803034.638:674): avc: denied { name_bind } for pid=8723 comm="syz.5.944" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 178.808236][ T7919] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.874235][ T8732] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 178.948362][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 178.965636][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.989458][ T5708] usb 2-1: USB disconnect, device number 15 [ 179.015566][ T7919] usb 4-1: Using ep0 maxpacket: 32 [ 179.032825][ T7919] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 179.042695][ T7919] usb 4-1: config 0 has no interface number 0 [ 179.051104][ T7919] usb 4-1: config 0 interface 184 has no altsetting 0 [ 179.063984][ T7919] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 179.075960][ T7919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.088717][ T7919] usb 4-1: Product: syz [ 179.092923][ T7919] usb 4-1: Manufacturer: syz [ 179.097910][ T7919] usb 4-1: SerialNumber: syz [ 179.104638][ T7919] usb 4-1: config 0 descriptor?? [ 179.276580][ T5709] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.438424][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 179.451549][ T5709] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 179.466159][ T5709] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 179.478459][ T5709] usb 6-1: config 166 has no interface number 0 [ 179.484747][ T5709] usb 6-1: config 166 has no interface number 1 [ 179.491561][ T5709] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 179.497548][ T5708] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.503032][ T5709] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 179.524935][ T5709] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 179.536132][ T5709] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 179.549899][ T5709] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 179.563020][ T5709] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 179.579370][ T5709] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 179.592154][ T5709] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 179.598729][ T8759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.602571][ T5709] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.625228][ T5709] usb 6-1: config 166 interface 177 has no altsetting 0 [ 179.634150][ T5709] usb 6-1: config 166 interface 34 has no altsetting 0 [ 179.643876][ T5709] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 179.654275][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.662670][ T5709] usb 6-1: Product: syz [ 179.667745][ T5709] usb 6-1: Manufacturer: syz [ 179.672388][ T5709] usb 6-1: SerialNumber: syz [ 179.673002][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 179.695657][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.706815][ T5708] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 179.715881][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.727396][ T5708] usb 2-1: config 0 descriptor?? [ 179.735709][ T5708] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.754105][ T5708] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 179.889681][ T5709] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 179.972861][ T5709] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 180.009186][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 180.038702][ T5709] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 180.049756][ T5709] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 180.058199][ T5709] uvcvideo 6-1:166.34: No valid video chain found. [ 180.075301][ T5709] usb 6-1: USB disconnect, device number 6 [ 180.252606][ T30] audit: type=1400 audit(1785803036.178:675): avc: denied { read } for pid=8766 comm="syz.6.960" path="socket:[24492]" dev="sockfs" ino=24492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.315373][ T30] audit: type=1400 audit(1785803036.238:676): avc: denied { mount } for pid=8768 comm="syz.7.961" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 180.343947][ T30] audit: type=1400 audit(1785803036.268:677): avc: denied { unmount } for pid=8317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 180.353279][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 180.391964][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 180.403473][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 180.420037][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 180.434901][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 180.448405][ T7919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 180.466498][ T7919] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 180.485516][ T7919] usb 4-1: USB disconnect, device number 13 [ 180.730366][ T30] audit: type=1400 audit(1785803036.658:678): avc: denied { create } for pid=8779 comm="syz.7.966" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.763229][ T30] audit: type=1400 audit(1785803036.688:679): avc: denied { mounton } for pid=8779 comm="syz.7.966" path="/30/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.835982][ T30] audit: type=1400 audit(1785803036.758:680): avc: denied { set_context_mgr } for pid=8781 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.858743][ T8782] binder: 8781:8782 ioctl c0306201 200000000040 returned -14 [ 180.869673][ T30] audit: type=1400 audit(1785803036.788:681): avc: denied { write } for pid=8781 comm="syz.5.967" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.187607][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 181.356470][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 181.369284][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.397454][ T5709] usb 2-1: USB disconnect, device number 16 [ 181.405076][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.419929][ T5709] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 181.431923][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 181.445175][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.458805][ T9] usb 6-1: config 0 descriptor?? [ 181.681229][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.981'. [ 181.894998][ T9] koneplus 0003:1E7D:2D51.000F: unknown main item tag 0x0 [ 181.929641][ T9] koneplus 0003:1E7D:2D51.000F: unknown main item tag 0x0 [ 181.963808][ T9] koneplus 0003:1E7D:2D51.000F: item fetching failed at offset 2/5 [ 181.997257][ T9] koneplus 0003:1E7D:2D51.000F: parse failed [ 182.012265][ T9] koneplus 0003:1E7D:2D51.000F: probe with driver koneplus failed with error -22 [ 182.118279][ T9] usb 6-1: USB disconnect, device number 7 [ 182.196693][ T5708] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.330456][ T8838] netlink: 72 bytes leftover after parsing attributes in process `syz.1.988'. [ 182.335212][ T8840] netlink: 27 bytes leftover after parsing attributes in process `syz.6.989'. [ 182.367966][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.389303][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.414355][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.441245][ T5708] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.487575][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.524546][ T5708] usb 4-1: config 0 descriptor?? [ 182.777299][ T5736] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 182.910552][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 182.910583][ T30] audit: type=1400 audit(1785803038.838:687): avc: denied { mount } for pid=8866 comm="syz.7.996" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 182.915587][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 182.979706][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.995141][ T30] audit: type=1400 audit(1785803038.908:688): avc: denied { unmount } for pid=8317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 183.020714][ T5736] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.033402][ T5708] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 183.055964][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.066301][ T30] audit: type=1400 audit(1785803038.948:689): avc: denied { write } for pid=8849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.104435][ T5736] usb 2-1: config 0 descriptor?? [ 183.213192][ T30] audit: type=1400 audit(1785803039.138:690): avc: denied { write } for pid=8877 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.259883][ T24] usb 4-1: USB disconnect, device number 14 [ 183.329798][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.351953][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.371661][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.386737][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.388238][ T5708] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 183.412969][ T5736] usbhid 2-1:0.0: can't add hid device: -71 [ 183.429193][ T5736] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.446232][ T5736] usb 2-1: USB disconnect, device number 17 [ 183.579490][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.606274][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.617742][ T5708] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.633671][ T5708] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.643826][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.661800][ T5708] usb 8-1: config 0 descriptor?? [ 183.761197][ T30] audit: type=1400 audit(1785803039.688:691): avc: denied { write } for pid=8885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.841248][ T30] audit: type=1400 audit(1785803039.768:692): avc: denied { write } for pid=8899 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.998516][ T5736] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 184.145390][ T5708] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 184.183262][ T5736] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 184.220431][ T5736] usb 2-1: config 8 has no interface number 0 [ 184.248328][ T5736] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 184.281408][ T5736] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 184.317718][ T5736] usb 2-1: config 8 interface 177 has no altsetting 0 [ 184.334910][ T5736] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 184.369121][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.419255][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 184.436887][ T7914] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.463370][ T9] usb 8-1: USB disconnect, device number 3 [ 184.477422][ T8876] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -19 [ 184.496810][ T8876] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -19 [ 184.563043][ T30] audit: type=1400 audit(1785803040.488:693): avc: denied { write } for pid=8906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.618134][ T7914] usb 4-1: Using ep0 maxpacket: 32 [ 184.635701][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.661230][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.688608][ T7914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.714569][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.748311][ T7914] usb 4-1: config 0 descriptor?? [ 184.761773][ T30] audit: type=1400 audit(1785803040.688:694): avc: denied { write } for pid=8924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.773562][ T7914] hub 4-1:0.0: USB hub found [ 184.936478][ T5736] ir_toy 2-1:8.177: could not write reset command: -110 [ 184.946774][ T5736] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 184.970614][ T5736] usb 2-1: USB disconnect, device number 18 [ 184.976593][ T7914] hub 4-1:0.0: 1 port detected [ 185.121900][ T8933] netlink: 'syz.7.1007': attribute type 15 has an invalid length. [ 185.133158][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1007'. [ 185.165051][ T8933] netlink: 'syz.7.1007': attribute type 15 has an invalid length. [ 185.182540][ T739] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 185.192351][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1007'. [ 185.194863][ T8935] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.209147][ T739] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 185.218407][ T739] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 185.238942][ T739] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 185.496339][ T739] Bluetooth: hci6: Frame reassembly failed (-84) [ 185.655535][ T7914] hub 4-1:0.0: activate --> -90 [ 185.697170][ T5617] block nbd1: Receive control failed (result -107) [ 185.767240][ T8957] nbd1: detected capacity change from 0 to 8589934592 [ 185.797112][ T4941] block nbd1: Dead connection, failed to find a fallback [ 185.806884][ T4941] block nbd1: shutting down sockets [ 185.812979][ T4941] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.828351][ T4941] buffer_io_error: 8 callbacks suppressed [ 185.828366][ T4941] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.845346][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.855782][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.865777][ T4941] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.875469][ T4941] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.885834][ T4941] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.890342][ T8962] syzkaller1: entered promiscuous mode [ 185.895693][ T4941] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.903136][ T8962] syzkaller1: entered allmulticast mode [ 185.909167][ T4941] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.924195][ T4941] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.932250][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.942075][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.953558][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.963432][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.973877][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.984012][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.991840][ T6912] ldm_validate_partition_table(): Disk read failed. [ 185.999312][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.008877][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.016849][ T1735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.027422][ T1735] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.035935][ T6912] Dev nbd1: unable to read RDB block 0 [ 186.042756][ T6912] nbd1: unable to read partition table [ 186.057655][ T6912] ldm_validate_partition_table(): Disk read failed. [ 186.066004][ T5708] usb 4-1: USB disconnect, device number 15 [ 186.077384][ T6912] Dev nbd1: unable to read RDB block 0 [ 186.085420][ T6912] nbd1: unable to read partition table [ 186.203045][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1022'. [ 186.407270][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 186.558633][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 186.571891][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.584837][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 186.594480][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 186.604066][ T9] usb 2-1: Manufacturer: syz [ 186.622837][ T9] usb 2-1: config 0 descriptor?? [ 186.707379][ T9] rc_core: IR keymap rc-hauppauge not found [ 186.729294][ T9] Registered IR keymap rc-empty [ 186.741517][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 186.756301][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 186.771143][ T5736] kernel read not supported for file /tomoyo/profile (pid: 5736 comm: kworker/1:6) [ 186.870097][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.905822][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.134639][ C0] igorplugusb 2-1:0.0: receive overflow, at least 21 lost [ 187.145387][ T8986] rc rc0: two consecutive events of type pulse [ 187.345673][ T7914] usb 2-1: USB disconnect, device number 19 [ 187.414419][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.568947][ T5617] Bluetooth: hci6: command 0x1003 tx timeout [ 187.576756][ T5625] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 187.616578][ T5736] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 187.776634][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 187.783930][ T5736] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 187.802407][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.824385][ T5736] usb 4-1: config 0 descriptor?? [ 187.832197][ T5736] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 188.070425][ T5708] usb 4-1: USB disconnect, device number 16 [ 188.159654][ T5736] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 188.327979][ T5736] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.353168][ T5736] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.366505][ T5736] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 188.379510][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.401465][ T5736] usb 7-1: config 0 descriptor?? [ 188.406531][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.576645][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 188.593665][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.615795][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.642192][ T24] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.681432][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.693921][ T24] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 188.703641][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.712328][ T24] usb 2-1: Product: syz [ 188.743143][ T24] usb 2-1: Manufacturer: syz [ 188.764949][ T24] usb 2-1: SerialNumber: syz [ 188.819722][ T9038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.844906][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.859754][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.867854][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.874953][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.884260][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.896118][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.903644][ T5736] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 188.924449][ T5736] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 189.002805][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 189.018244][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 189.045087][ T24] usb 2-1: USB disconnect, device number 20 [ 189.059813][ T5736] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 189.477648][ T9054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.665902][ T5736] cp2112 0003:10C4:EA90.0012: error reading lock byte: -71 [ 189.700327][ T5736] usb 7-1: USB disconnect, device number 8 [ 189.835733][ T9061] input: syz1 as /devices/virtual/input/input20 [ 190.363607][ T30] audit: type=1400 audit(1785803046.288:695): avc: denied { append } for pid=9069 comm="syz.1.1065" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.448654][ T30] audit: type=1400 audit(1785803046.308:696): avc: denied { ioctl } for pid=9069 comm="syz.1.1065" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.243426][ T30] audit: type=1400 audit(1785803047.168:697): avc: denied { sys_module } for pid=9099 comm="syz.6.1077" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 191.335892][ T9096] binder: 9094:9096 ioctl 4018620d 0 returned -22 [ 191.599528][ T30] audit: type=1400 audit(1785803047.528:698): avc: denied { getopt } for pid=9116 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.882875][ T30] audit: type=1400 audit(1785803047.798:699): avc: denied { mount } for pid=9125 comm="syz.1.1087" name="/" dev="hugetlbfs" ino=26288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 192.096766][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 192.258714][ T24] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 192.276748][ T24] usb 7-1: config 0 has no interface number 0 [ 192.289244][ T24] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.331533][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 192.364476][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.414978][ T24] usb 7-1: Product: syz [ 192.439733][ T24] usb 7-1: Manufacturer: syz [ 192.449935][ T24] usb 7-1: SerialNumber: syz [ 192.468826][ T24] usb 7-1: config 0 descriptor?? [ 192.493536][ T24] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 192.751833][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 193.129595][ T9161] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 193.264587][ T24] usb 7-1: USB disconnect, device number 9 [ 193.306793][ T24] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 193.556645][ T5709] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 193.619153][ T9179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 193.688957][ T30] audit: type=1400 audit(1785803049.618:700): avc: denied { map } for pid=9178 comm="syz.6.1111" path="socket:[25577]" dev="sockfs" ino=25577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 193.736532][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 193.743502][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 193.769078][ T5709] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.784619][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.793038][ T5709] usb 6-1: Product: syz [ 193.797477][ T5709] usb 6-1: Manufacturer: syz [ 193.802092][ T5709] usb 6-1: SerialNumber: syz [ 193.812140][ T5709] usb 6-1: config 0 descriptor?? [ 193.822887][ T5709] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.849189][ T5709] em28xx 6-1:0.0: DVB interface 0 found: isoc [ 193.998724][ T6359] Bluetooth: (null): Invalid header checksum [ 194.039963][ T9197] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 194.088644][ T5709] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 194.103095][ T3362] Bluetooth: (null): Invalid header checksum [ 194.120959][ T9197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.180163][ T9203] bond2: (slave geneve3): making interface the new active one [ 194.197714][ T5709] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.211989][ T5709] em28xx 6-1:0.0: board has no eeprom [ 194.221923][ T9207] IPv4: Oversized IP packet from 172.20.20.24 [ 194.228983][ T9203] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 194.230319][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 194.245442][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 194.276607][ T5709] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.310891][ T5709] em28xx 6-1:0.0: dvb set to isoc mode. [ 194.328229][ T9] em28xx 6-1:0.0: Binding DVB extension [ 194.381556][ T5709] usb 6-1: USB disconnect, device number 8 [ 194.403687][ T5709] em28xx 6-1:0.0: Disconnecting em28xx [ 194.548770][ T9] em28xx 6-1:0.0: Registering input extension [ 194.558597][ T9218] loop4: detected capacity change from 0 to 2640 [ 194.570203][ T5709] em28xx 6-1:0.0: Closing input extension [ 194.580198][ T9218] buffer_io_error: 23 callbacks suppressed [ 194.580213][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.628812][ T30] audit: type=1400 audit(1785803050.558:701): avc: denied { map } for pid=9217 comm="syz.7.1126" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.635269][ T9222] Buffer I/O error on dev loop4, logical block 73, async page read [ 194.671417][ T5709] em28xx 6-1:0.0: Freeing device [ 194.707772][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.711878][ T30] audit: type=1400 audit(1785803050.558:702): avc: denied { execute } for pid=9217 comm="syz.7.1126" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.756218][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.759397][ T9222] Buffer I/O error on dev loop4, logical block 73, async page read [ 194.784507][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.838695][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.850557][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.859931][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.870807][ T9218] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.879389][ T9218] ldm_validate_partition_table(): Disk read failed. [ 194.889227][ T9218] Dev loop4: unable to read RDB block 0 [ 194.900825][ T9218] loop4: unable to read partition table [ 194.955809][ T9218] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 195.677040][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 195.772856][ T30] audit: type=1400 audit(1785803051.698:703): avc: denied { mounton } for pid=9271 comm="syz.5.1149" path="/134/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 195.803942][ T9272] capability: warning: `syz.5.1149' uses deprecated v2 capabilities in a way that may be insecure [ 195.848945][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.859976][ T5709] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 195.869677][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.881385][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 195.889160][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.902560][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.926472][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.947592][ T10] usb 8-1: config 0 descriptor?? [ 196.026996][ T5709] usb 7-1: Using ep0 maxpacket: 32 [ 196.048453][ T5709] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 196.058277][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.067106][ T5709] usb 7-1: Product: syz [ 196.071803][ T5709] usb 7-1: Manufacturer: syz [ 196.076961][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 196.087638][ T5709] usb 7-1: SerialNumber: syz [ 196.092667][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.105491][ T5709] usb 7-1: config 0 descriptor?? [ 196.112377][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.130835][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 196.140834][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 196.158861][ T9] usb 4-1: Product: syz [ 196.163338][ T9] usb 4-1: Manufacturer: syz [ 196.173646][ T9264] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 196.185922][ T9] usb_debug 4-1:1.0: debug converter detected [ 196.199719][ T9] usb 4-1: debug converter now attached to ttyUSB0 [ 196.333025][ T5709] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 010 [ 196.367593][ T10] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 196.413492][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 196.460307][ T10] usb 4-1: USB disconnect, device number 17 [ 196.479005][ T10] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 196.492181][ T10] usb_debug 4-1:1.0: device disconnected [ 196.590985][ T9294] overlayfs: failed to clone upperpath [ 196.629137][ T9] usb 8-1: USB disconnect, device number 4 [ 196.783860][ T9305] bridge2: entered promiscuous mode [ 196.791008][ T9305] bridge2: entered allmulticast mode [ 196.803320][ T9305] team0: Port device bridge2 added [ 196.814278][ T10] usb 7-1: USB disconnect, device number 10 [ 196.817783][ T9305] bridge0: port 2(team0) entered blocking state [ 196.820354][ T9262] i2c i2c-1: failure sending STOP [ 196.833799][ T9305] bridge0: port 2(team0) entered disabled state [ 196.843139][ T9305] team0: entered allmulticast mode [ 196.852356][ T9305] team_slave_0: entered allmulticast mode [ 196.860433][ T9305] team_slave_1: entered allmulticast mode [ 196.871259][ T9305] team0: entered promiscuous mode [ 196.878989][ T9305] team_slave_0: entered promiscuous mode [ 196.888734][ T9305] team_slave_1: entered promiscuous mode [ 196.895288][ T9305] bridge0: port 2(team0) entered blocking state [ 196.901654][ T9305] bridge0: port 2(team0) entered forwarding state [ 197.075953][ T30] audit: type=1400 audit(1785803052.998:704): avc: denied { cmd } for pid=9311 comm="syz.3.1166" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 197.122740][ T9315] overlayfs: failed to clone upperpath [ 197.258150][ T30] audit: type=1400 audit(1785803053.188:705): avc: denied { write } for pid=9316 comm="syz.7.1169" name="instances" dev="tracefs" ino=3659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 197.335340][ T30] audit: type=1400 audit(1785803053.188:706): avc: denied { add_name } for pid=9316 comm="syz.7.1169" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 197.416464][ T30] audit: type=1400 audit(1785803053.188:707): avc: denied { create } for pid=9316 comm="syz.7.1169" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 197.836492][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.017994][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.039989][ T24] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 198.055265][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.072972][ T24] usb 4-1: Product: syz [ 198.079466][ T24] usb 4-1: Manufacturer: syz [ 198.086821][ T24] usb 4-1: SerialNumber: syz [ 198.117752][ T24] symbolserial 4-1:1.0: symbol converter detected [ 198.170469][ T24] usb 4-1: symbol converter now attached to ttyUSB0 [ 198.395259][ T5709] usb 4-1: USB disconnect, device number 18 [ 198.432218][ T5709] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 198.449702][ T5709] symbolserial 4-1:1.0: device disconnected [ 198.638316][ T9354] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1183'. [ 198.647439][ T5708] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 198.660706][ T9354] bridge0: port 3(team0) entered disabled state [ 198.667326][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.674813][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.703617][ T9354] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1183'. [ 198.798148][ T5708] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.816685][ T5708] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.853319][ T5708] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.872545][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.109332][ T5708] usb 7-1: GET_CAPABILITIES returned 0 [ 199.109375][ T5708] usbtmc 7-1:16.0: can't read capabilities [ 199.142939][ T9378] fuse: Bad value for 'fd' [ 199.356691][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 199.536678][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 199.546192][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.559669][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.590541][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.611775][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.629260][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.645420][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.659918][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.669490][ T10] usb 8-1: Manufacturer: syz [ 199.685155][ T10] usb 8-1: config 0 descriptor?? [ 199.883623][ T5708] usb 7-1: USB disconnect, device number 11 [ 199.980690][ T9411] smpboot: CPU 1 is now offline [ 199.996872][ T10] rc_core: IR keymap rc-hauppauge not found [ 200.020222][ T10] Registered IR keymap rc-empty [ 200.038486][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.087949][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.158979][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 200.205942][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input23 [ 200.272773][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.300224][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.335425][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.345220][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.386617][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.427904][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.476883][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.516545][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.563079][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.598195][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.637699][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.667103][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 200.686798][ T5709] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.698080][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 200.734421][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.775222][ T10] usb 8-1: USB disconnect, device number 5 [ 200.856546][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 200.878334][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.921634][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.990342][ T5709] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.058255][ T5709] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.110408][ T5709] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 201.149937][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.199350][ T5709] usb 4-1: Product: syz [ 201.225627][ T5709] usb 4-1: Manufacturer: syz [ 201.247785][ T5709] usb 4-1: SerialNumber: syz [ 201.317763][ T9453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.449077][ T30] audit: type=1326 audit(1785803057.378:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.7.1227" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01b259e019 code=0x0 [ 201.493998][ T5709] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 201.522373][ T5709] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.892838][ T5709] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 201.975404][ T9474] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.076821][ T9470] Process accounting resumed [ 202.233265][ T5709] usb 4-1: USB disconnect, device number 19 [ 202.420270][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1237'. [ 202.607856][ T9493] netlink: 'syz.7.1242': attribute type 19 has an invalid length. [ 203.023095][ T9503] raw_sendmsg: syz.6.1246 forgot to set AF_INET. Fix it! [ 203.386292][ T30] audit: type=1400 audit(1785803059.268:709): avc: denied { setattr } for pid=9515 comm="syz.5.1252" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 203.424706][ T739] rpcbind: server 127.0.0.1 not responding, timed out [ 203.616474][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 203.729571][ T9532] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 203.772165][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1260'. [ 203.786511][ T30] audit: type=1400 audit(1785803059.708:710): avc: denied { append } for pid=9531 comm="syz.6.1259" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 203.832301][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.889410][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.938245][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.974840][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.011905][ T9] usb 8-1: config 0 descriptor?? [ 204.157243][ T5709] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 204.337770][ T5709] usb 7-1: Using ep0 maxpacket: 8 [ 204.353849][ T5709] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 204.386640][ T5709] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.448423][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.485564][ T30] audit: type=1326 audit(1785803060.408:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5399e019 code=0x7ffc0000 [ 204.535703][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.604004][ T5709] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 204.650641][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.667126][ T30] audit: type=1326 audit(1785803060.448:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5399e019 code=0x7ffc0000 [ 204.704637][ T9] usb 8-1: string descriptor 0 read error: -22 [ 204.741226][ T5709] usb 7-1: Product: syz [ 204.764476][ T5709] usb 7-1: Manufacturer: syz [ 204.781250][ T5709] usb 7-1: SerialNumber: syz [ 204.823993][ T5709] usb 7-1: config 0 descriptor?? [ 204.854424][ T30] audit: type=1326 audit(1785803060.448:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5399e019 code=0x7ffc0000 [ 204.892047][ T9541] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 204.921279][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0014/input/input25 [ 204.948030][ T9561] fuse: Bad value for 'fd' [ 205.070860][ T30] audit: type=1326 audit(1785803060.448:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3a5399e019 code=0x7ffc0000 [ 205.128658][ T9] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 205.204260][ T5709] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 205.248667][ T9] usb 8-1: USB disconnect, device number 6 [ 205.257381][ T5709] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 205.334855][ T30] audit: type=1326 audit(1785803060.458:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5399e019 code=0x7ffc0000 [ 205.423031][ T5716] IPVS: starting estimator thread 0... [ 205.440927][ T9564] fido_id[9564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 205.474027][ C0] powermate: config urb returned -71 [ 205.481311][ C0] powermate: config urb returned -71 [ 205.486926][ C0] powermate: config urb returned -71 [ 205.492337][ C0] powermate: config urb returned -71 [ 205.532953][ T5716] usb 7-1: USB disconnect, device number 12 [ 205.532989][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 205.608078][ T9567] IPVS: using max 78 ests per chain, 187200 per kthread [ 205.619924][ T30] audit: type=1326 audit(1785803060.518:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a5395e84e code=0x7ffc0000 [ 205.740618][ T30] audit: type=1326 audit(1785803060.518:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.1.1268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a5395e84e code=0x7ffc0000 [ 206.069308][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 206.137629][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 206.159857][ T9590] input: syz0 as /devices/virtual/input/input27 [ 206.434912][ T9607] netlink: 'syz.6.1288': attribute type 10 has an invalid length. [ 206.480275][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1288'. [ 206.823191][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1294'. [ 207.510840][ T9636] evm: overlay not supported [ 207.674188][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 207.674198][ T30] audit: type=1400 audit(1785803063.598:727): avc: denied { map } for pid=9644 comm="syz.6.1302" path="/dev/ublkc2" dev="devtmpfs" ino=3259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.036649][ T9663] binder: 9662:9663 ioctl c0306201 200000000c00 returned -22 [ 208.766280][ T9682] netlink: 'syz.7.1316': attribute type 16 has an invalid length. [ 208.774618][ T9682] netlink: 'syz.7.1316': attribute type 17 has an invalid length. [ 208.785698][ T9682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.074712][ T30] audit: type=1326 audit(1785803064.998:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.1323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a5399e019 code=0x0 [ 209.343655][ T9710] binder: 9708:9710 ioctl c0306201 200000000640 returned -22 [ 209.431633][ T9714] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 209.438286][ T9714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.537420][ T9714] vhci_hcd vhci_hcd.0: Device attached [ 209.581577][ T9715] vhci_hcd: connection closed [ 209.592543][ T48] vhci_hcd vhci_hcd.5: stop threads [ 209.640243][ T48] vhci_hcd vhci_hcd.5: release socket [ 209.661294][ T48] vhci_hcd vhci_hcd.5: disconnect device [ 209.746162][ T9730] netlink: 'syz.6.1336': attribute type 7 has an invalid length. [ 209.765331][ T9730] netlink: 'syz.6.1336': attribute type 7 has an invalid length. [ 209.873442][ T9735] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 209.901410][ T30] audit: type=1400 audit(1785803065.828:729): avc: denied { getopt } for pid=9734 comm="syz.7.1339" lport=58973 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 210.160001][ T30] audit: type=1326 audit(1785803066.088:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.7.1344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01b259e019 code=0x0 [ 210.266707][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 210.286925][ T30] audit: type=1400 audit(1785803066.218:731): avc: denied { audit_write } for pid=9752 comm="syz.5.1345" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 210.427696][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 210.440576][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 10228, setting to 64 [ 210.454475][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 210.463735][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.480130][ T9] usb 7-1: config 0 descriptor?? [ 210.694007][ T9] ath6kl: Failed to submit usb control message: -71 [ 210.705011][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 210.712594][ T9] ath6kl: Unable to send get target info: -71 [ 210.727180][ T9] ath6kl: Failed to init ath6kl core: -71 [ 210.739934][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 210.755526][ T9] usb 7-1: USB disconnect, device number 13 [ 211.871656][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 211.947986][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.983270][ T9807] ip6gre1: entered promiscuous mode [ 212.011109][ T9807] ip6gre1: entered allmulticast mode [ 212.036513][ T5709] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 212.207398][ T5709] usb 8-1: Using ep0 maxpacket: 32 [ 212.228519][ T5709] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 212.274483][ T5709] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 212.312270][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 212.341254][ T5709] usb 8-1: Product: syz [ 212.359710][ T5709] usb 8-1: Manufacturer: syz [ 212.391159][ T5709] usb 8-1: SerialNumber: syz [ 212.428054][ T5709] usb 8-1: config 0 descriptor?? [ 212.463597][ T9798] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 212.491360][ T5709] hub 8-1:0.0: bad descriptor, ignoring hub [ 212.502658][ T30] audit: type=1400 audit(1785803068.428:732): avc: denied { accept } for pid=9822 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.535976][ T5709] hub 8-1:0.0: probe with driver hub failed with error -5 [ 212.603520][ T9827] sock: sock_set_timeout: `syz.6.1377' (pid 9827) tries to set negative timeout [ 212.662337][ T9830] SELinux: failed to load policy [ 212.679759][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 212.837505][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 212.845841][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 212.867623][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.913907][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.962667][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.024443][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.105300][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.154871][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.414688][ T9] usb 4-1: usb_control_msg returned -32 [ 213.445673][ T9] usbtmc 4-1:16.0: can't read capabilities [ 213.464376][ T30] audit: type=1400 audit(1785803069.388:733): avc: denied { read } for pid=9838 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.762254][ T12] raw-gadget.0 gadget.7: failed to queue suspend event [ 213.836547][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 213.871406][ T12] raw-gadget.0 gadget.7: failed to queue suspend event [ 213.946534][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 213.969676][ T13] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.047552][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.079254][ T48] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.156467][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.177051][ T739] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.246661][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.267408][ T48] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.350158][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.380493][ T739] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.466480][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.497662][ T13] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.586496][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.617437][ T739] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.696952][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.727729][ T13] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.806870][ T9798] raw-gadget.0 gadget.7: failed to queue resume event [ 214.838474][ T739] raw-gadget.0 gadget.7: failed to queue suspend event [ 214.868967][ T9798] raw-gadget.0 gadget.7: failed to queue disconnect event [ 214.887621][ T9] usb 8-1: USB disconnect, device number 7 [ 214.955869][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1393'. [ 214.977992][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 214.997070][ T9866] netlink: 'syz.7.1393': attribute type 15 has an invalid length. [ 215.025817][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1393'. [ 215.036479][ T3362] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 215.053382][ T3362] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 215.063811][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 215.083199][ T3362] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 215.095145][ T9866] netlink: 'syz.7.1393': attribute type 15 has an invalid length. [ 215.112083][ T3362] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 215.417605][ T9] usb 4-1: USB disconnect, device number 20 [ 215.564483][ T30] audit: type=1400 audit(1785803071.488:734): avc: denied { create } for pid=9869 comm="syz.3.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.638075][ T30] audit: type=1400 audit(1785803071.508:735): avc: denied { write } for pid=9869 comm="syz.3.1396" path="socket:[30042]" dev="sockfs" ino=30042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.579140][ T9] libceph: connect (1)[c::]:6789 error -99 [ 216.601090][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 216.672067][ T9884] ceph: No mds server is up or the cluster is laggy [ 216.745822][ T9893] bridge_slave_0: left allmulticast mode [ 216.809797][ T9893] bridge_slave_0: left promiscuous mode [ 216.891080][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.935712][ T9893] bridge_slave_1: left allmulticast mode [ 216.961168][ T9893] bridge_slave_1: left promiscuous mode [ 216.992030][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.012504][ T30] audit: type=1400 audit(1785803072.928:736): avc: denied { shutdown } for pid=9905 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.056945][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 217.079585][ T9893] bond0: (slave bond_slave_0): Releasing backup interface [ 217.151472][ T9893] bond0: (slave bond_slave_1): Releasing backup interface [ 217.184489][ T9893] team0: Port device team_slave_0 removed [ 217.218434][ T9893] team0: Port device team_slave_1 removed [ 217.236498][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 217.242741][ T9] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 217.252338][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 217.264830][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.283499][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.305882][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.321676][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 217.347993][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.357227][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 217.369748][ T30] audit: type=1400 audit(1785803073.298:737): avc: denied { ioctl } for pid=9924 comm="syz.1.1413" path="socket:[30172]" dev="sockfs" ino=30172 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 217.399903][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.422734][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.437957][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.455834][ T9893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.475816][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.520695][ T9901] syzkaller1: entered promiscuous mode [ 217.526944][ T9901] syzkaller1: entered allmulticast mode [ 217.705842][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 217.712869][ T9] usbtmc 8-1:16.0: can't read capabilities [ 217.779432][ T9938] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.952763][ T5709] usb 8-1: USB disconnect, device number 8 [ 218.039980][ T9944] loop7: detected capacity change from 0 to 2 [ 218.110068][ T9944] loop7: detected capacity change from 2 to 1 [ 218.121118][ T9944] Dev loop7: unable to read RDB block 1 [ 218.131713][ T9944] loop7: unable to read partition table [ 218.141831][ T9944] loop7: partition table beyond EOD, truncated [ 218.154511][ T9944] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 218.181774][ T4978] Dev loop7: unable to read RDB block 1 [ 218.195530][ T4978] loop7: unable to read partition table [ 218.214674][ T4978] loop7: partition table beyond EOD, truncated [ 218.239865][ T30] audit: type=1400 audit(1785803074.168:738): avc: denied { bind } for pid=9947 comm="syz.6.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.572969][ T30] audit: type=1400 audit(1785803074.498:739): avc: denied { read write } for pid=9957 comm="syz.6.1430" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.713365][ T30] audit: type=1400 audit(1785803074.528:740): avc: denied { open } for pid=9957 comm="syz.6.1430" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.833307][ T30] audit: type=1400 audit(1785803074.618:741): avc: denied { write } for pid=9961 comm="syz.5.1428" name="functions" dev="configfs" ino=9995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.416128][ T9989] loop5: detected capacity change from 0 to 3719 [ 219.438979][ T9988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3978288634 (254610472576 ns) > initial count (109740807360 ns). Using initial count to start timer. [ 219.466346][ T9992] loop5: detected capacity change from 3719 to 6567 [ 219.512733][ T6912] buffer_io_error: 13 callbacks suppressed [ 219.512744][ T6912] Buffer I/O error on dev loop5, logical block 820, async page read [ 219.594094][ T6912] Buffer I/O error on dev loop5, logical block 820, async page read [ 219.626477][ T30] audit: type=1400 audit(1785803075.548:742): avc: denied { mount } for pid=9995 comm="syz.7.1445" name="/" dev="ramfs" ino=30474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 219.755692][ T6912] Buffer I/O error on dev loop5, logical block 820, async page read [ 219.899144][ T6912] Buffer I/O error on dev loop5, logical block 820, async page read [ 220.086722][ T5709] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 220.116179][ T9918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.251819][ T5709] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.265997][ T30] audit: type=1400 audit(1785803076.178:743): avc: denied { ioctl } for pid=10010 comm="syz.1.1452" path="socket:[30595]" dev="sockfs" ino=30595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.321367][ T5709] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 220.371875][ T5709] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 220.423769][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.470505][ T5709] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 220.534840][ T5709] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 220.851373][T10003] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 220.873757][T10003] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 220.908657][T10003] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 221.056638][T10002] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 221.089662][ T9] usb 8-1: USB disconnect, device number 9 [ 221.103391][T10037] netlink: 'syz.1.1463': attribute type 11 has an invalid length. [ 221.128897][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 221.179062][ T9] spcp8x5 8-1:1.0: device disconnected [ 221.396787][T10047] loop5: detected capacity change from 0 to 7 [ 221.434132][T10047] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 221.450470][T10047] loop5: partition table partially beyond EOD, truncated [ 221.479654][T10047] loop5: p1 size 1042712361 extends beyond EOD, truncated [ 221.523364][ T30] audit: type=1400 audit(1785803077.448:744): avc: denied { name_bind } for pid=10052 comm="syz.5.1469" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 221.561660][ T4978] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 221.583633][ T4978] loop5: partition table partially beyond EOD, truncated [ 221.617433][ T4978] loop5: p1 size 1042712361 extends beyond EOD, truncated [ 221.625015][T10055] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 221.665840][T10055] bridge0: port 2(team0) entered disabled state [ 221.672230][T10055] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.759319][T10055] bridge0: left promiscuous mode [ 221.791705][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 221.808666][T10055] bridge0: left allmulticast mode [ 221.839037][T10055] bridge0: port 2(team0) entered blocking state [ 221.845355][T10055] bridge0: port 2(team0) entered forwarding state [ 221.851931][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.858997][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.953837][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 221.994497][ T30] audit: type=1400 audit(1785803077.918:745): avc: denied { ioctl } for pid=10074 comm="syz.6.1478" path="socket:[30780]" dev="sockfs" ino=30780 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.082676][T10055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.152701][T10061] bridge0: port 2(team0) entered disabled state [ 222.169949][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.222258][T10065] lo: entered promiscuous mode [ 222.229805][T10065] tunl0: entered promiscuous mode [ 222.250968][T10065] gre0: entered promiscuous mode [ 222.258393][T10065] gretap0: entered promiscuous mode [ 222.263840][T10065] erspan0: entered promiscuous mode [ 222.269569][T10065] ip_vti0: entered promiscuous mode [ 222.275123][T10065] ip6_vti0: entered promiscuous mode [ 222.281868][T10065] sit0: entered promiscuous mode [ 222.287843][T10065] ip6tnl0: entered promiscuous mode [ 222.293675][T10065] ip6gre0: entered promiscuous mode [ 222.299577][T10065] bridge0: entered promiscuous mode [ 222.305319][T10065] bond0: entered promiscuous mode [ 222.310661][T10065] bond_slave_0: entered promiscuous mode [ 222.319234][T10065] bond_slave_1: entered promiscuous mode [ 222.325875][T10065] dummy0: entered promiscuous mode [ 222.331905][T10065] nlmon0: entered promiscuous mode [ 222.337524][T10065] batadv0: entered promiscuous mode [ 222.343181][T10065] vxcan0: entered promiscuous mode [ 222.349587][T10065] vxcan1: entered promiscuous mode [ 222.355082][T10065] veth0: entered promiscuous mode [ 222.361563][T10065] veth1: entered promiscuous mode [ 222.367687][T10065] wg0: entered promiscuous mode [ 222.372917][T10065] wg1: entered promiscuous mode [ 222.378591][T10065] wg2: entered promiscuous mode [ 222.383758][T10065] veth0_to_bridge: entered promiscuous mode [ 222.391854][T10065] veth0_to_bond: entered promiscuous mode [ 222.398293][T10065] veth1_to_bond: entered promiscuous mode [ 222.404710][T10065] veth0_to_team: entered promiscuous mode [ 222.411248][T10065] veth1_to_team: entered promiscuous mode [ 222.417945][T10065] veth0_to_batadv: entered promiscuous mode [ 222.424137][T10065] batadv_slave_0: entered promiscuous mode [ 222.432691][T10065] veth1_to_batadv: entered promiscuous mode [ 222.444708][T10065] batadv_slave_1: entered promiscuous mode [ 222.460685][T10065] xfrm0: entered promiscuous mode [ 222.471558][T10065] veth0_to_hsr: entered promiscuous mode [ 222.477940][T10065] veth1_to_hsr: entered promiscuous mode [ 222.483967][T10065] hsr0: entered promiscuous mode [ 222.489782][T10065] veth1_virt_wifi: entered promiscuous mode [ 222.495882][T10065] veth0_virt_wifi: entered promiscuous mode [ 222.502596][T10065] virt_wifi0: entered promiscuous mode [ 222.509154][T10065] vlan0: entered promiscuous mode [ 222.514636][T10065] vlan1: entered promiscuous mode [ 222.520208][T10065] macvlan0: entered promiscuous mode [ 222.525896][T10065] macvlan1: entered promiscuous mode [ 222.534076][T10065] ipvlan0: entered promiscuous mode [ 222.542970][T10065] ipvlan1: entered promiscuous mode [ 222.549141][T10065] macvtap0: entered promiscuous mode [ 222.555490][T10065] macsec0: entered promiscuous mode [ 222.561239][T10065] geneve0: entered promiscuous mode [ 222.567025][T10065] geneve1: entered promiscuous mode [ 222.572471][T10065] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 222.582423][T10065] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 222.590377][T10065] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 222.598322][T10065] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 222.606224][T10065] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 222.614982][T10065] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 222.622802][T10065] sit1: entered promiscuous mode [ 222.628262][T10065] sit2: entered promiscuous mode [ 222.633818][T10065] bridge1: entered promiscuous mode [ 222.640049][T10065] ip6tnl1: entered promiscuous mode [ 222.645496][T10065] bond1: entered promiscuous mode [ 222.656836][T10065] geneve2: entered promiscuous mode [ 222.663051][T10065] mac80211_hwsim hwsim18 wlan2: entered promiscuous mode [ 222.671047][T10065] bond2: entered promiscuous mode [ 222.676126][T10065] geneve3: entered promiscuous mode [ 223.287403][T10113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.446573][ T5709] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 223.613722][T10130] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 223.624684][ T5709] usb 7-1: Using ep0 maxpacket: 32 [ 223.641777][ T5709] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.672545][ T5709] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.692992][T10130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.706448][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.729535][ T5709] usb 7-1: Product: syz [ 223.744510][ T5709] usb 7-1: Manufacturer: syz [ 223.762520][ T5709] usb 7-1: SerialNumber: syz [ 223.768639][T10135] bond1: (slave geneve2): making interface the new active one [ 223.782458][ T5709] usb 7-1: config 0 descriptor?? [ 223.814504][T10107] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 223.832867][ T5709] hub 7-1:0.0: bad descriptor, ignoring hub [ 223.842474][T10135] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.856085][ T5709] hub 7-1:0.0: probe with driver hub failed with error -5 [ 224.029390][T10139] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 224.264758][ T5709] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 224.341696][ T5709] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.379075][ T30] audit: type=1400 audit(1785803080.298:746): avc: denied { create } for pid=10105 comm="syz.6.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 224.478468][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.646643][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 224.691861][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.713361][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 224.736334][ T10] usb 4-1: can't read configurations, error -71 [ 224.839338][T10107] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 224.890974][T10107] usb 7-1: device reset changed ep0 maxpacket size! [ 224.931135][ T9] usb 7-1: USB disconnect, device number 14 [ 225.096560][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 225.246783][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 225.285902][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 225.328569][ T30] audit: type=1326 audit(1785803081.258:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.7.1528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01b259e019 code=0x0 [ 225.367447][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 225.382403][ T9] usb 7-1: can't read configurations, error -71 [ 225.421386][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.745191][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054a95000: rx timeout, send abort [ 225.753702][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054a95000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.849814][ T30] audit: type=1400 audit(1785803081.768:748): avc: denied { append } for pid=10200 comm="syz.5.1529" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.289718][T10220] bridge1: entered promiscuous mode [ 226.304424][T10220] bridge1: entered allmulticast mode [ 226.457397][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 226.473623][ T30] audit: type=1400 audit(1785803082.388:749): avc: denied { write } for pid=10225 comm="syz.3.1540" name="dlm" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.632619][ T30] audit: type=1400 audit(1785803082.428:750): avc: denied { write } for pid=10225 comm="syz.3.1540" name="comms" dev="configfs" ino=31429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.688213][ T9] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 226.728022][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.778907][T10235] SELinux: failed to load policy [ 226.799599][ T9] usb 7-1: config 0 has no interface number 0 [ 226.824928][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 226.869581][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.922795][ T9] usb 7-1: Product: syz [ 226.947943][ T9] usb 7-1: Manufacturer: syz [ 226.974347][ T9] usb 7-1: SerialNumber: syz [ 226.996837][T10242] kvm: user requested TSC rate below hardware speed [ 227.011711][ T9] usb 7-1: config 0 descriptor?? [ 227.034262][ T9] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 227.192253][T10248] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 227.223124][T10250] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1549'. [ 227.250422][ T10] usb 7-1: USB disconnect, device number 16 [ 227.259599][T10248] bond2: entered promiscuous mode [ 227.287671][T10248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.382941][T10252] bond2: (slave veth3): making interface the new active one [ 227.414107][T10252] veth3: entered promiscuous mode [ 227.456034][T10252] bond2: (slave veth3): Enslaving as an active interface with an up link [ 227.652351][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.659703][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.697724][ T30] audit: type=1400 audit(1785803083.628:751): avc: denied { ioctl } for pid=10263 comm="syz.3.1556" path="socket:[31681]" dev="sockfs" ino=31681 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.833390][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.865664][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.967241][ T6359] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.003618][ T6359] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.051390][ T6359] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.119143][ T6359] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.179289][ T6359] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.233986][ T6359] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.292684][ T6359] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.354129][ T6359] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.631444][T10295] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 228.786161][ T30] audit: type=1400 audit(1785803084.708:752): avc: denied { relabelto } for pid=10294 comm="syz.5.1568" name="syz1" dev="cgroup2" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 228.912966][T10308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.934637][ T30] audit: type=1400 audit(1785803084.748:753): avc: denied { associate } for pid=10294 comm="syz.5.1568" name="syz1" dev="cgroup2" ino=318 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 229.083621][ T30] audit: type=1400 audit(1785803084.798:754): avc: denied { write } for pid=10294 comm="syz.5.1568" name="syz1" dev="cgroup2" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 229.238094][ T30] audit: type=1400 audit(1785803084.858:755): avc: denied { add_name } for pid=10294 comm="syz.5.1568" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 229.357993][T10324] overlayfs: failed to clone upperpath [ 229.543400][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 229.543412][ T30] audit: type=1400 audit(1785803085.468:759): avc: denied { read } for pid=10327 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.711922][ T30] audit: type=1400 audit(1785803085.508:760): avc: denied { bpf } for pid=10330 comm="syz.6.1581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.150849][ T30] audit: type=1400 audit(1785803086.078:761): avc: denied { read } for pid=10361 comm="syz.3.1594" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.188912][ T7914] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 230.244885][ T5709] IPVS: starting estimator thread 0... [ 230.269170][ T30] audit: type=1400 audit(1785803086.078:762): avc: denied { open } for pid=10361 comm="syz.3.1594" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.312700][T10368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.341422][T10368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.357622][T10366] IPVS: using max 79 ests per chain, 189600 per kthread [ 230.371617][T10368] bond0 (unregistering): Released all slaves [ 230.389964][ T7914] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.429175][ T7914] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 230.462980][ T7914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 230.495922][ T7914] usb 7-1: Product: syz [ 230.515413][ T7914] usb 7-1: Manufacturer: syz [ 230.549926][ T7914] usb 7-1: SerialNumber: syz [ 230.775008][ T7914] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 231.082029][ C0] usblp0: nonzero write bulk status received: -71 [ 231.090126][ T5709] usb 7-1: USB disconnect, device number 17 [ 231.141327][T10351] usblp0: removed [ 231.307973][T10409] netlink: 'syz.3.1614': attribute type 4 has an invalid length. [ 231.357458][T10409] netlink: 'syz.3.1614': attribute type 4 has an invalid length. [ 231.459808][T10411] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 231.834529][ T30] audit: type=1326 audit(1785803087.758:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.6.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64bb99e019 code=0x0 [ 232.081181][T10449] fuse: Bad value for 'fd' [ 232.853201][ T30] audit: type=1400 audit(1785803088.778:764): avc: denied { write } for pid=10470 comm="syz.6.1637" lport=41433 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 232.994349][T10477] sctp: [Deprecated]: syz.7.1639 (pid 10477) Use of int in maxseg socket option. [ 232.994349][T10477] Use struct sctp_assoc_value instead [ 233.338461][ T30] audit: type=1400 audit(1785803089.258:765): avc: denied { setopt } for pid=10487 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.363492][T10485] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 233.478711][T10491] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1829905768 (58556984576 ns) > initial count (3218844672 ns). Using initial count to start timer. [ 233.505322][ T30] audit: type=1400 audit(1785803089.358:766): avc: denied { recv } for pid=10483 comm="syz.5.1642" saddr=10.128.0.169 src=30006 daddr=10.128.1.141 dest=37856 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.049732][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 234.086662][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 234.165678][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 234.174849][ T739] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.213989][ T739] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.230538][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 234.264065][ T739] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.314920][ T739] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.780122][ T30] audit: type=1400 audit(1785803090.688:767): avc: denied { read write } for pid=10523 comm="syz.6.1657" name="file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.989434][ T30] audit: type=1400 audit(1785803090.688:768): avc: denied { open } for pid=10523 comm="syz.6.1657" path="/240/file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.150921][T10532] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1661'. [ 235.163971][ T30] audit: type=1400 audit(1785803090.688:769): avc: denied { ioctl } for pid=10523 comm="syz.6.1657" path="/240/file0" dev="tmpfs" ino=1258 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.300189][T10538] Cannot find add_set index 4 as target [ 235.362128][ T30] audit: type=1400 audit(1785803090.768:770): avc: denied { accept } for pid=10525 comm="syz.7.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.506284][ T30] audit: type=1400 audit(1785803091.208:771): avc: denied { block_suspend } for pid=10533 comm="syz.1.1664" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.876535][ T7914] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 235.914248][ T30] audit: type=1400 audit(1785803091.838:772): avc: denied { link } for pid=10559 comm="syz.7.1675" name="#1f" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.025784][ T30] audit: type=1400 audit(1785803091.868:773): avc: denied { rename } for pid=10559 comm="syz.7.1675" name="#20" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.084774][ T7914] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 236.126335][ T7914] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 236.209931][ T7914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 236.244592][ T7914] usb 4-1: string descriptor 0 read error: -22 [ 236.259406][ T7914] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.306616][ T7914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.774899][ T7914] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 236.840494][ T7914] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0017/input/input28 [ 236.917968][ T5709] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 237.040407][ T30] audit: type=1326 audit(1785803092.968:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.5.1687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f603579e019 code=0x0 [ 237.086024][ T7914] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 237.101017][ T5709] usb 7-1: Using ep0 maxpacket: 16 [ 237.135723][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.184733][ T7914] usb 4-1: USB disconnect, device number 23 [ 237.196771][ T5709] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.265550][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.282617][T10600] fido_id[10600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 237.316269][ T5709] usb 7-1: config 0 descriptor?? [ 237.742483][ T5709] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 237.799911][T10608] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 237.915905][T10608] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1829905768 (58556984576 ns) > initial count (3218844672 ns). Using initial count to start timer. [ 238.209721][ T5716] usb 7-1: USB disconnect, device number 18 [ 238.363973][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 238.681826][T10639] binder: 10637:10639 ioctl c0306201 0 returned -14 [ 238.691766][T10640] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1702'. [ 239.079594][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 239.120566][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1710'. [ 239.164117][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 239.195229][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1710'. [ 239.604077][T10676] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.011499][ T30] audit: type=1400 audit(1785803095.938:775): avc: denied { create } for pid=10690 comm="syz.7.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.816626][ T7914] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 240.996433][ T7914] usb 4-1: Using ep0 maxpacket: 32 [ 241.023638][ T7914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.060517][ T7914] usb 4-1: config 8 has an invalid interface number: 94 but max is 0 [ 241.100354][T10723] netlink: 'syz.7.1736': attribute type 4 has an invalid length. [ 241.108183][ T7914] usb 4-1: config 8 has no interface number 0 [ 241.129050][ T7914] usb 4-1: config 8 interface 94 has no altsetting 0 [ 241.141286][T10723] netlink: 'syz.7.1736': attribute type 4 has an invalid length. [ 241.168044][ T7914] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 241.198440][ T7914] usb 4-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 241.261725][ T7914] usb 4-1: Product: syz [ 241.288951][ T7914] usb 4-1: Manufacturer: syz [ 241.309443][T10727] fuse: fd is not a fuse device [ 241.320623][ T7914] usb 4-1: SerialNumber: syz [ 241.449659][T10734] ipt_REJECT: TCP_RESET invalid for non-tcp [ 241.644802][ T30] audit: type=1400 audit(1785803097.568:776): avc: denied { create } for pid=10738 comm="syz.7.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 241.770803][ T7914] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 241.970388][ T7914] gspca_sn9c2028: read1 error -32 [ 242.000997][ T7914] gspca_sn9c2028: read1 error -32 [ 242.045680][T10754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.298162][ T7914] usb 4-1: USB disconnect, device number 24 [ 242.495678][T10771] overlayfs: failed to resolve './cgroup': -2 [ 242.677426][ T30] audit: type=1400 audit(1785803098.608:777): avc: denied { watch } for pid=10780 comm="syz.1.1761" path="/424/file0" dev="tmpfs" ino=2241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.770005][ T30] audit: type=1400 audit(1785803098.628:778): avc: denied { watch_sb } for pid=10780 comm="syz.1.1761" path="/424/file0" dev="tmpfs" ino=2241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.795035][ T5716] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 242.949764][ T30] audit: type=1400 audit(1785803098.878:779): avc: denied { bind } for pid=10788 comm="syz.1.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.997286][ T5716] usb 7-1: Using ep0 maxpacket: 32 [ 243.024838][ T5716] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 243.055095][ T5716] usb 7-1: config 0 has no interface number 0 [ 243.068359][ T30] audit: type=1400 audit(1785803098.898:780): avc: denied { name_bind } for pid=10788 comm="syz.1.1766" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 243.102887][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1763'. [ 243.113440][ T5716] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.156812][ T5716] usb 7-1: config 0 interface 89 has no altsetting 0 [ 243.183128][ T30] audit: type=1400 audit(1785803098.898:781): avc: denied { node_bind } for pid=10788 comm="syz.1.1766" saddr=172.20.20.170 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 243.219871][ T5716] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 243.243304][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.269747][ T5716] usb 7-1: Product: syz [ 243.289089][ T5716] usb 7-1: Manufacturer: syz [ 243.302469][ T5716] usb 7-1: SerialNumber: syz [ 243.319327][ T5716] usb 7-1: config 0 descriptor?? [ 243.339746][ T5716] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 243.365736][T10800] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1769'. [ 243.378158][ T5716] em28xx 7-1:0.89: Video interface 89 found: [ 243.446454][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 243.612948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.655022][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.710180][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.753485][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.776268][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.813905][ T9] usb 4-1: config 0 descriptor?? [ 243.943851][ T5716] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 244.039075][ T30] audit: type=1400 audit(1785803099.968:782): avc: denied { mount } for pid=10810 comm="syz.5.1774" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 244.162240][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.240790][ T30] audit: type=1400 audit(1785803100.168:783): avc: denied { ioctl } for pid=10817 comm="syz.7.1777" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.290125][ T9] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 244.325329][ T9] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 244.344294][ T30] audit: type=1400 audit(1785803100.238:784): avc: denied { prog_load } for pid=10819 comm="syz.7.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.396578][ T5716] em28xx 7-1:0.89: AC97 command still being executed: not handled properly! [ 244.578000][ T10] usb 4-1: USB disconnect, device number 25 [ 244.585159][ T5716] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 244.620944][ T5716] em28xx 7-1:0.89: board has no eeprom [ 244.687363][ T5716] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 244.712318][ T5716] em28xx 7-1:0.89: analog set to bulk mode. [ 244.733906][ T9] em28xx 7-1:0.89: Registering V4L2 extension [ 244.752556][ T5716] usb 7-1: USB disconnect, device number 19 [ 244.808303][ T5716] em28xx 7-1:0.89: Disconnecting em28xx [ 244.866574][ T9] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 244.884243][ T9] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 244.899332][ T9] em28xx 7-1:0.89: No AC97 audio processor [ 244.916336][ T9] usb 7-1: Decoder not found [ 244.926233][ T9] em28xx 7-1:0.89: failed to create media graph [ 244.940405][ T9] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 244.955243][ T9] em28xx 7-1:0.89: Registering snapshot button... [ 244.992998][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input30 [ 245.050257][ T9] em28xx 7-1:0.89: Remote control support is not available for this card. [ 245.067312][ T5716] em28xx 7-1:0.89: Closing input extension [ 245.082786][ T5716] em28xx 7-1:0.89: Deregistering snapshot button [ 245.097321][ T7914] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 245.270913][ T7914] usb 8-1: unable to get BOS descriptor or descriptor too short [ 245.321832][ T7914] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.380662][ T7914] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.434900][ T7914] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 245.480388][ T5716] em28xx 7-1:0.89: Freeing device [ 245.502005][ T7914] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 245.586064][ T7914] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 245.664384][ T7914] usb 8-1: config 1 interface 1 has no altsetting 0 [ 245.722056][ T7914] usb 8-1: string descriptor 0 read error: -22 [ 245.761189][ T7914] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 245.770894][T10854] overlayfs: failed to clone upperpath [ 245.815430][ T7914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.831254][T10854] overlayfs: failed to clone upperpath [ 245.893007][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 245.893018][ T30] audit: type=1400 audit(1785803101.818:788): avc: denied { setopt } for pid=10855 comm="syz.3.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.095813][ T30] audit: type=1400 audit(1785803102.018:789): avc: denied { write } for pid=10861 comm="syz.1.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 246.289501][ T7914] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 246.321517][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 246.332068][ T7914] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 246.357368][ T7914] usb 8-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 246.876488][ T5716] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 246.900280][ T7914] usb 8-1: USB disconnect, device number 10 [ 247.047741][ T5716] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 247.056703][ T5716] usb 4-1: config 179 has no interface number 0 [ 247.063074][ T5716] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 247.074660][ T5716] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 247.085276][ T5716] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 8 [ 247.098123][ T5716] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.112230][ T5716] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 247.121655][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.139197][T10877] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.161331][ T5716] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 247.173091][ T5716] xpad 4-1:179.65: probe with driver xpad failed with error -90 [ 247.228576][ T30] audit: type=1400 audit(1785803103.158:790): avc: denied { map } for pid=10879 comm="syz.6.1805" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 247.363908][ T5716] usb 4-1: USB disconnect, device number 26 [ 247.837875][T10898] syzkaller1: entered promiscuous mode [ 247.853382][T10898] syzkaller1: entered allmulticast mode [ 247.864910][ T30] audit: type=1400 audit(1785803103.788:791): avc: denied { mmap_zero } for pid=10899 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 248.066553][ T5716] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 248.119118][ T30] audit: type=1400 audit(1785803104.048:792): avc: denied { append } for pid=10906 comm="syz.7.1816" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.228593][ T5716] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.245483][ T30] audit: type=1400 audit(1785803104.078:793): avc: denied { open } for pid=10906 comm="syz.7.1816" path="/208/file0/file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.279828][ T5716] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.342745][ T5716] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 248.371905][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.422433][ T5716] usb 7-1: config 0 descriptor?? [ 248.556993][ T30] audit: type=1400 audit(1785803104.488:794): avc: denied { watch_sb } for pid=10928 comm="syz.1.1822" path="/447" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 248.692618][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'. [ 248.737983][T10936] netlink: 'syz.1.1825': attribute type 7 has an invalid length. [ 248.755256][T10938] netlink: 'syz.7.1826': attribute type 21 has an invalid length. [ 248.769370][T10936] netlink: 'syz.1.1825': attribute type 8 has an invalid length. [ 248.780738][T10938] netlink: 'syz.7.1826': attribute type 21 has an invalid length. [ 248.794451][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'. [ 248.864158][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 248.881086][T10939] netlink: 'syz.1.1825': attribute type 7 has an invalid length. [ 248.911506][T10939] netlink: 'syz.1.1825': attribute type 8 has an invalid length. [ 248.929434][T10941] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 248.941027][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 249.000731][ T5716] ath6kl: Failed to submit usb control message: -71 [ 249.026188][ T5716] ath6kl: unable to send the bmi data to the device: -71 [ 249.060942][ T5716] ath6kl: Unable to send get target info: -71 [ 249.094819][ T5716] ath6kl: Failed to init ath6kl core: -71 [ 249.115418][ T5716] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 249.160747][ T5716] usb 7-1: USB disconnect, device number 20 [ 249.714242][ T30] audit: type=1800 audit(1785803105.638:795): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1834" name="idVendor" dev="configfs" ino=34540 res=0 errno=0 [ 249.912517][ T30] audit: type=1400 audit(1785803105.718:796): avc: denied { mount } for pid=10954 comm="syz.1.1833" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 250.142744][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.149106][ T30] audit: type=1400 audit(1785803106.058:797): avc: denied { egress } for pid=7914 comm="kworker/0:9" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 250.250292][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 250.321509][T10971] netlink: 'syz.1.1839': attribute type 29 has an invalid length. [ 250.363053][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 250.445009][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 250.498554][T10977] netlink: 'syz.1.1839': attribute type 29 has an invalid length. [ 250.568252][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 251.083120][T10992] ip6gre1: left promiscuous mode [ 251.201922][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 251.201933][ T30] audit: type=1400 audit(1785803107.128:799): avc: denied { getopt } for pid=10997 comm="syz.3.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.866645][ T30] audit: type=1400 audit(1785803107.788:800): avc: denied { getopt } for pid=11018 comm="syz.3.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.973773][ T30] audit: type=1400 audit(1785803107.818:801): avc: denied { setopt } for pid=11018 comm="syz.3.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.097625][T11024] tipc: Started in network mode [ 252.132831][T11024] tipc: Node identity eef2044d615d, cluster identity 4711 [ 252.168524][T11024] tipc: Enabled bearer , priority 10 [ 252.200446][T11023] tipc: Resetting bearer [ 252.375259][T11023] tipc: Disabling bearer [ 252.695003][T11039] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1865'. [ 253.226128][ T30] audit: type=1400 audit(1785803109.148:802): avc: denied { write } for pid=11047 comm="syz.1.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 254.100864][ T7914] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 254.280546][ T7914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.318306][ T7914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.348856][ T7914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.382040][ T7914] usb 4-1: Product: syz [ 254.403306][ T7914] usb 4-1: Manufacturer: syz [ 254.417106][ T7914] usb 4-1: SerialNumber: syz [ 254.662999][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.723514][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.798450][ T7914] cdc_ether 4-1:1.0: skipping garbage [ 254.839841][ T7914] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 254.902538][ T7914] usb 4-1: USB disconnect, device number 27 [ 255.366998][ T7914] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.494018][T11071] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 255.566191][ T7914] usb 4-1: Using ep0 maxpacket: 8 [ 255.621213][ T7914] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 255.661518][ T7914] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 255.720667][ T7914] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.791747][ T7914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.808112][ T30] audit: type=1400 audit(1785803111.728:803): avc: denied { read } for pid=11073 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.862169][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.896870][ T7914] usbtmc 4-1:16.0: bulk endpoints not found [ 256.171800][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1881'. [ 256.316416][T11082] netlink: 476 bytes leftover after parsing attributes in process `syz.1.1881'. [ 257.560154][ T10] IPVS: starting estimator thread 0... [ 257.608857][ T10] usb 4-1: USB disconnect, device number 28 [ 257.697303][T11090] IPVS: using max 78 ests per chain, 187200 per kthread [ 258.067849][T11110] syzkaller0: entered promiscuous mode [ 258.089683][T11110] syzkaller0: entered allmulticast mode [ 258.765866][ T30] audit: type=1400 audit(1785803114.688:804): avc: denied { ioctl } for pid=11115 comm="syz.6.1894" path="net:[4026533336]" dev="nsfs" ino=4026533336 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 258.942997][T11121] netlink: 'syz.6.1896': attribute type 1 has an invalid length. [ 259.263003][ T30] audit: type=1326 audit(1785803115.188:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.7.1895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b259e019 code=0x0 [ 259.535381][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.550310][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.559518][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.569442][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.578873][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.496076][T11121] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 261.646855][ T5617] Bluetooth: hci6: command tx timeout [ 262.256908][T11177] IPVS: sh: FWM 3 0x00000003 - no destination available [ 262.351342][T11181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.926822][ T31] INFO: task syz.0.336:6699 blocked for more than 143 seconds. [ 262.949053][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.985096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.996083][ T30] audit: type=1400 audit(1785803118.918:806): avc: denied { write } for pid=5596 comm="syz-executor" path="pipe:[5343]" dev="pipefs" ino=5343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 263.051009][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.066438][ T31] task:syz.0.336 state:D stack:27592 pid:6699 tgid:6693 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 263.113691][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.184347][ T31] Call Trace: [ 263.187975][T11130] bridge_slave_0: entered allmulticast mode [ 263.201725][ T30] audit: type=1400 audit(1785803118.958:807): avc: denied { recv } for pid=739 comm="kworker/u8:6" saddr=10.128.0.169 src=39722 daddr=10.128.1.141 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 263.243713][ T31] [ 263.258609][T11130] bridge_slave_0: entered promiscuous mode [ 263.264442][ T31] __schedule+0x125c/0x6730 [ 263.281375][ T31] ? irqentry_exit+0x24d/0xa00 [ 263.296876][ T31] ? __pfx___schedule+0x10/0x10 [ 263.312968][ T31] ? find_held_lock+0x2b/0x80 [ 263.321355][ T31] ? schedule+0x225/0x2c0 [ 263.325733][ T31] schedule+0xdd/0x2c0 [ 263.333626][ T31] schedule_preempt_disabled+0x13/0x30 [ 263.339227][ T31] __mutex_lock+0xccc/0x1bd0 [ 263.343824][ T31] ? write_threads+0x278/0x570 [ 263.350118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 263.355145][ T31] ? simple_strntoull+0xdf/0x170 [ 263.361311][ T31] ? __lock_acquire+0x49f/0x1a40 [ 263.366266][ T31] ? write_threads+0x278/0x570 [ 263.371352][ T31] write_threads+0x278/0x570 [ 263.375945][ T31] ? __pfx_write_threads+0x10/0x10 [ 263.381786][ T31] ? __might_fault+0xc5/0x140 [ 263.386601][ T31] ? _copy_from_user+0x59/0xd0 [ 263.391358][ T31] ? __pfx_write_threads+0x10/0x10 [ 263.396631][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 263.402182][ T31] vfs_write+0x2aa/0x1050 [ 263.406910][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 263.413660][ T31] ? __pfx_vfs_write+0x10/0x10 [ 263.418703][ T31] ? __fget_files+0x215/0x3d0 [ 263.423397][ T31] ? __fget_files+0x21f/0x3d0 [ 263.428317][ T31] ksys_write+0x12a/0x250 [ 263.432654][ T31] ? __pfx_ksys_write+0x10/0x10 [ 263.437689][ T31] do_syscall_64+0x115/0x870 [ 263.442286][ T31] ? clear_bhb_loop+0x40/0x90 [ 263.447181][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.453076][ T31] RIP: 0033:0x7f6b6659e019 [ 263.458975][ T31] RSP: 002b:00007f6b67485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.468596][ T31] RAX: ffffffffffffffda RBX: 00007f6b66826090 RCX: 00007f6b6659e019 [ 263.476802][ T31] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 263.484774][ T31] RBP: 00007f6b6663500c R08: 0000000000000000 R09: 0000000000000000 [ 263.493616][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.501699][ T31] R13: 00007f6b66826128 R14: 00007f6b66826090 R15: 00007ffdb3e277d8 [ 263.509796][ T31] [ 263.590180][ T31] [ 263.590180][ T31] Showing all locks held in the system: [ 263.648338][ T31] 1 lock held by khungtaskd/31: [ 263.682041][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 263.726738][ T5617] Bluetooth: hci6: command tx timeout [ 263.763393][ T31] 2 locks held by getty/5368: [ 263.796194][ T31] #0: ffff8880375ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.888209][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 263.945518][ T31] 3 locks held by kworker/0:7/5809: [ 263.992480][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 264.041112][ T31] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 264.052252][ T31] #2: ffff8880276c3158 (&helper->damage_lock){....}-{3:3}, at: drm_fb_helper_damage_work+0x35f/0xab0 [ 264.063833][ T31] 1 lock held by syz.1.63/5948: [ 264.068999][ T31] #0: ffff88807e2d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 264.079500][ T31] 2 locks held by syz.3.327/6676: [ 264.084528][ T31] #0: ffff88807e2f4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 264.094588][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 264.104727][ T31] 3 locks held by syz.0.336/6694: [ 264.109856][ T31] #0: ffff88807a9f89b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.119017][ T31] #1: ffff88807e434450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.130945][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 264.139926][ T31] 3 locks held by syz.0.336/6699: [ 264.144936][ T31] #0: ffff88807f727b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.156963][ T31] #1: ffff88807e434450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.166024][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 264.175564][ T31] 1 lock held by syz.7.1134/9241: [ 264.180774][ T31] #0: ffff8880525fcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 264.190633][ T31] 3 locks held by syz.5.1774/10811: [ 264.195826][ T31] #0: ffff88807d57b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.205030][ T31] #1: ffff888036d78450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.215481][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 264.224405][ T31] 3 locks held by syz.5.1774/10814: [ 264.230350][ T31] #0: ffff88807d585970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.240731][ T31] #1: ffff888036d78450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.249988][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 264.260211][ T31] 2 locks held by syz-executor/11130: [ 264.265575][ T31] #0: ffff8880508f4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 264.275817][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 264.286148][ T31] 1 lock held by syz.6.1923/11203: [ 264.292083][ T31] #0: ffff88807e218ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 264.325670][ T31] [ 264.335908][ T31] ============================================= [ 264.335908][ T31] [ 264.381782][ T5948] bond0: (slave syz_tun): Releasing backup interface [ 264.390208][ T31] NMI backtrace for cpu 0 [ 264.390219][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 264.390234][ T31] Tainted: [L]=SOFTLOCKUP [ 264.390238][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 264.390250][ T31] Call Trace: [ 264.390254][ T31] [ 264.390258][ T31] dump_stack_lvl+0x100/0x190 [ 264.390276][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 264.390290][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 264.390306][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 264.390319][ T31] sys_info+0x141/0x190 [ 264.390335][ T31] watchdog+0xcb1/0x1030 [ 264.390350][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.390363][ T31] ? __pfx_watchdog+0x10/0x10 [ 264.390375][ T31] ? __kthread_parkme+0x18c/0x230 [ 264.390392][ T31] ? kthread+0x13a/0x450 [ 264.390403][ T31] ? __pfx_watchdog+0x10/0x10 [ 264.390416][ T31] kthread+0x370/0x450 [ 264.390426][ T31] ? __pfx_kthread+0x10/0x10 [ 264.390439][ T31] ret_from_fork+0x72b/0xd50 [ 264.390455][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 264.390471][ T31] ? __switch_to+0x800/0x10f0 [ 264.390482][ T31] ? __pfx_kthread+0x10/0x10 [ 264.390493][ T31] ret_from_fork_asm+0x1a/0x30 [ 264.390516][ T31] [ 264.690666][ T739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.702380][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 264.709223][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 264.719870][ T31] Tainted: [L]=SOFTLOCKUP [ 264.724170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 264.734257][ T31] Call Trace: [ 264.737529][ T31] [ 264.740443][ T31] dump_stack_lvl+0x100/0x190 [ 264.745102][ T31] vpanic+0x552/0x970 [ 264.749058][ T31] ? __pfx_vpanic+0x10/0x10 [ 264.753544][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 264.759679][ T31] panic+0xd1/0xe0 [ 264.763376][ T31] ? __pfx_panic+0x10/0x10 [ 264.767764][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 264.773887][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 264.780022][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 264.786145][ T31] ? watchdog.cold+0x1ec/0x234 [ 264.790879][ T31] ? watchdog+0xcc1/0x1030 [ 264.795274][ T31] watchdog.cold+0x1fd/0x234 [ 264.799843][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.805628][ T31] ? __pfx_watchdog+0x10/0x10 [ 264.810277][ T31] ? __kthread_parkme+0x18c/0x230 [ 264.815279][ T31] ? kthread+0x13a/0x450 [ 264.819502][ T31] ? __pfx_watchdog+0x10/0x10 [ 264.824162][ T31] kthread+0x370/0x450 [ 264.828199][ T31] ? __pfx_kthread+0x10/0x10 [ 264.832758][ T31] ret_from_fork+0x72b/0xd50 [ 264.837323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 264.842408][ T31] ? __switch_to+0x800/0x10f0 [ 264.847056][ T31] ? __pfx_kthread+0x10/0x10 [ 264.851616][ T31] ret_from_fork_asm+0x1a/0x30 [ 264.856374][ T31] [ 264.859404][ T31] Kernel Offset: disabled [ 264.863699][ T31] Rebooting in 86400 seconds..