last executing test programs: 9m59.735188092s ago: executing program 32 (id=880): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0xa, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 8m28.307681573s ago: executing program 2 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) syz_clone(0x48a42011, 0x0, 0xfffffffffffffd4a, 0x0, 0x0, 0x0) 8m28.10757406s ago: executing program 3 (id=2190): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 8m27.847062753s ago: executing program 3 (id=2192): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 8m27.780116373s ago: executing program 5 (id=2193): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) setuid(r0) 8m27.615525042s ago: executing program 2 (id=2194): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010000fa0b00000f0f0008000500", @ANYRES32=r1], 0x38}}, 0x0) 8m27.506123418s ago: executing program 5 (id=2195): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'hsr0\x00', {}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00'}) 8m27.107686729s ago: executing program 2 (id=2198): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 8m27.082646861s ago: executing program 5 (id=2199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 8m26.874415881s ago: executing program 3 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m26.808953934s ago: executing program 2 (id=2202): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 8m26.645501834s ago: executing program 5 (id=2203): unshare(0x600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) 8m26.48816264s ago: executing program 2 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032abd7000fbdbdf2516"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) 8m26.451532309s ago: executing program 3 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r1, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) 8m26.362433277s ago: executing program 5 (id=2208): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') 8m26.19966746s ago: executing program 3 (id=2209): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) 8m26.163753776s ago: executing program 2 (id=2210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0xb28}], 0x1, &(0x7f00000002c0)=""/202, 0xca}, 0x4}], 0x1, 0x40000121, 0x0) 8m22.782255923s ago: executing program 3 (id=2212): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[]) 7m53.744649287s ago: executing program 5 (id=2213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0xfb7f, 0x0, &(0x7f00007cf000/0x2000)=nil}) 4m34.283086755s ago: executing program 33 (id=2211): timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$usbfs(r0, &(0x7f0000000100)=""/129, 0x81) 4m15.58897629s ago: executing program 34 (id=2207): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 4m12.697846993s ago: executing program 35 (id=2210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0xb28}], 0x1, &(0x7f00000002c0)=""/202, 0xca}, 0x4}], 0x1, 0x40000121, 0x0) 4m12.580787465s ago: executing program 36 (id=2212): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[]) 4m12.511353628s ago: executing program 37 (id=2213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0xfb7f, 0x0, &(0x7f00007cf000/0x2000)=nil}) 3m28.248302992s ago: executing program 7 (id=2815): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x80000, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) 3m28.193794412s ago: executing program 7 (id=2816): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x14, 0x905, 0x70bd25, 0x25dfdbfb, {0xa, 0x6, 0x3, 0x0, {0x4e26, 0x4e23, [0x0, 0x2c000000, 0x6, 0x1], [0xfffffffe, 0x5, 0x1, 0x8a67], 0x0, [0x3, 0x1002]}, 0x4, 0xffffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) close_range(r0, 0xffffffffffffffff, 0x0) 3m28.112426597s ago: executing program 7 (id=2819): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x700, 0x0, 0x2, 0xc3d8ae45ce03ecd3, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@local, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x300, 0x0, 0x1, 0x0, 0x6, 0xf}, 0x20) 3m28.012102784s ago: executing program 7 (id=2822): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(0x0, 0x0, 0x0) 3m27.593783504s ago: executing program 7 (id=2830): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') 3m27.49669119s ago: executing program 7 (id=2833): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0xffff, 0xa, 0x89}) 3m12.437400503s ago: executing program 38 (id=2833): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0xffff, 0xa, 0x89}) 2m59.059558766s ago: executing program 9 (id=3260): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m58.960968638s ago: executing program 9 (id=3261): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 2m58.147154382s ago: executing program 9 (id=3276): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbed, {0x7, 0x0, 0x0, r1, 0x80, 0x24, 0x1}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) 2m58.041107716s ago: executing program 9 (id=3279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de20000040"]) 2m57.820753898s ago: executing program 9 (id=3281): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 2m57.71836228s ago: executing program 9 (id=3282): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x20000000}, 0x4008098) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000003c0)=""/153) 2m42.674641709s ago: executing program 39 (id=3282): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x20000000}, 0x4008098) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000003c0)=""/153) 3.357336749s ago: executing program 8 (id=5898): gettid() timer_create(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3.013580999s ago: executing program 8 (id=5905): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 2.868906894s ago: executing program 8 (id=5908): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000400)={0x0, 0x16, 0x2, "b5a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="20820300"], 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0xb6998e82a6317473, 0x15, 0x2, "a755"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.845306894s ago: executing program 6 (id=5909): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'vxcan1\x00'}}, 0x1e) 2.69624702s ago: executing program 6 (id=5910): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 2.634993843s ago: executing program 1 (id=5912): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400f07000000a3"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.549795903s ago: executing program 6 (id=5913): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) exit(0x0) 2.022196935s ago: executing program 0 (id=5917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.944770931s ago: executing program 0 (id=5918): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x1, 0x0) 1.904099729s ago: executing program 0 (id=5919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff36bf}], 0x1, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) close(0x3) 1.797904189s ago: executing program 0 (id=5920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x100, 0x30, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{0x40, 0x1, [@m_ipt={0x3c, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "e2ebd2e0185a4d308803e9306e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xac, 0x1, [@m_ipt={0xa8, 0x806, 0x0, 0x0, {{0x8}, {0x4}, {0x7d, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x100}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.655153987s ago: executing program 6 (id=5921): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.563989409s ago: executing program 6 (id=5922): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 1.563429028s ago: executing program 6 (id=5923): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x12, @string={0x12, 0x3, "f0bee750e9de4063448479b86b214101"}}, 0x0, 0x0}, 0x0) 1.030891406s ago: executing program 4 (id=5929): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r3 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000d40)="01", 0x1) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 945.801815ms ago: executing program 4 (id=5930): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 902.933464ms ago: executing program 0 (id=5931): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x835) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="faab78d5e4201d43a65d20ccf9", 0xd}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) 741.008715ms ago: executing program 4 (id=5932): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x4, 0x1, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0xfffffffffffffffe) 670.877636ms ago: executing program 4 (id=5933): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x2b81, 0x38c1, 0x1, 0x15e}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_pidfd_open(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 558.080762ms ago: executing program 4 (id=5934): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x80000000, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, &(0x7f00000002c0)="0fc79f4300000066baa00066edc4c1fc2ec10f239666b84f000f00d0ea0030000026010f0011643e650f01c326660f388230670f06", 0x35}], 0x1, 0x1d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 508.462894ms ago: executing program 4 (id=5935): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 466.921401ms ago: executing program 8 (id=5936): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xa, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 364.87601ms ago: executing program 1 (id=5937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 289.455568ms ago: executing program 1 (id=5938): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 279.241049ms ago: executing program 8 (id=5939): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 207.592515ms ago: executing program 1 (id=5940): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) 94.098128ms ago: executing program 1 (id=5941): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x2, 0x930, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "c075bfebcd0ba27d0241591616a6b1cb67d98ec29b60126a252d15082816668e112528aec50cd3705b13923c6b01ee331a6f97344bf7669085864df306abfaa0"}}, 0x80}}, 0x11) 84.754608ms ago: executing program 8 (id=5942): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x2, "4f06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.904732ms ago: executing program 1 (id=5943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)="92bf9971b5f9753ab708948b023168fd4a1400000000cb765b8f8c74751431a23d542747fe3b6e87981e4bce093fce9d4dd996f8be7482552c77352e702cfb582f453301127fc6a184265146c7cc845a91cbda88ab78aa3d544b3af79c42976272c85064e1e07f5b6a04bfce4cf26c615028af4463fbfcc8a2b8cc5294589fdef1", 0xffffffc7}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0xc812) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 0s ago: executing program 0 (id=5944): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.4.4617'. [ 643.542728][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.558971][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.573569][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.582552][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.594299][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.608807][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 643.913281][T11096] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 643.942960][ T5968] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 643.943362][ T6040] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 644.102179][T11096] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.122018][T11096] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.138175][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.142320][ T6040] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.158318][ T5968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 644.172361][T11096] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.182137][ T5968] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 644.198762][ T6040] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.202846][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.218960][T11096] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.231987][ T5968] usb 5-1: config 0 descriptor?? [ 644.238727][ T6040] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.268055][T11096] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.276714][ T6040] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.289952][T11096] usb 9-1: config 0 descriptor?? [ 644.295246][ T6040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.318465][ T6040] usb 2-1: config 0 descriptor?? [ 644.674096][ T5968] kovaplus 0003:1E7D:2D50.0055: unknown main item tag 0x0 [ 644.693366][ T5968] kovaplus 0003:1E7D:2D50.0055: unknown main item tag 0x0 [ 644.700662][ T5968] kovaplus 0003:1E7D:2D50.0055: unknown main item tag 0x0 [ 644.718262][ T5968] kovaplus 0003:1E7D:2D50.0055: unknown main item tag 0x0 [ 644.728822][ T5968] kovaplus 0003:1E7D:2D50.0055: unknown main item tag 0x0 [ 644.739775][ T5968] kovaplus 0003:1E7D:2D50.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 644.758488][ T6040] plantronics 0003:047F:FFFF.0056: reserved main item tag 0xd [ 644.768442][T11096] plantronics 0003:047F:FFFF.0057: reserved main item tag 0xd [ 644.797748][T11096] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 644.913119][ T6040] plantronics 0003:047F:FFFF.0056: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 644.995127][ T6040] usb 9-1: USB disconnect, device number 27 [ 645.006361][T11096] usb 2-1: USB disconnect, device number 47 [ 645.077356][ T5968] kovaplus 0003:1E7D:2D50.0055: couldn't init struct kovaplus_device [ 645.109581][ T5968] kovaplus 0003:1E7D:2D50.0055: couldn't install mouse [ 645.117924][ T5968] kovaplus 0003:1E7D:2D50.0055: probe with driver kovaplus failed with error -5 [ 645.324510][ T5968] usb 5-1: USB disconnect, device number 34 [ 645.422907][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 645.583600][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 645.607153][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 645.625192][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.638961][ T9] usb 1-1: Product: syz [ 645.652950][ T9] usb 1-1: Manufacturer: syz [ 645.673032][ T9] usb 1-1: SerialNumber: syz [ 645.713734][ T9] usb 1-1: config 0 descriptor?? [ 646.002406][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 646.041502][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 646.107257][ T9] usb 1-1: USB disconnect, device number 48 [ 646.851467][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 646.851484][ T30] audit: type=1400 audit(1159.815:10289): avc: denied { prog_load } for pid=16736 comm="syz.4.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 646.942957][ T30] audit: type=1400 audit(1159.815:10290): avc: denied { bpf } for pid=16736 comm="syz.4.4644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 646.943287][T16737] bond_slave_0: entered promiscuous mode [ 646.969239][T16737] bond_slave_1: entered promiscuous mode [ 646.974911][T16737] batadv_slave_0: entered promiscuous mode [ 647.021176][ T30] audit: type=1400 audit(1159.985:10291): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.048398][T16737] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 647.112869][ T30] audit: type=1400 audit(1160.015:10292): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.177117][ T30] audit: type=1400 audit(1160.015:10293): avc: denied { ioctl } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.233967][ T30] audit: type=1400 audit(1160.095:10294): avc: denied { mounton } for pid=16738 comm="syz.0.4645" path="/351/file0" dev="tmpfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 647.312995][ T30] audit: type=1400 audit(1160.125:10295): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.362991][ T30] audit: type=1400 audit(1160.125:10296): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.412886][ T30] audit: type=1400 audit(1160.125:10297): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 647.484399][ T30] audit: type=1400 audit(1160.155:10298): avc: denied { map_create } for pid=16740 comm="syz.4.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.608045][T16747] PM: Enabling pm_trace changes system date and time during resume. [ 647.608045][T16747] PM: Correct system time has to be restored manually after resume. [ 647.872968][ T5968] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 648.030959][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 648.041619][ T5968] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 648.059952][ T5968] usb 5-1: config 0 has no interface number 0 [ 648.071968][ T5968] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 648.091414][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.115400][ T5968] usb 5-1: Product: syz [ 648.119567][ T5968] usb 5-1: Manufacturer: syz [ 648.142914][ T5968] usb 5-1: SerialNumber: syz [ 648.157541][ T5968] usb 5-1: config 0 descriptor?? [ 648.180638][ T5968] smsc95xx v2.0.0 [ 648.280674][T16715] Set syz1 is full, maxelem 65536 reached [ 649.031597][ T5968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 649.101531][T16788] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 649.233327][ T5968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 649.261051][ T5968] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 649.282768][ T5968] usb 5-1: USB disconnect, device number 35 [ 650.012699][T11095] Bluetooth: hci4: Frame reassembly failed (-84) [ 650.033106][T11096] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 650.112938][ T5968] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 650.211862][T11096] usb 9-1: Using ep0 maxpacket: 8 [ 650.229863][T11096] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 650.239483][T11096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.248325][T11096] usb 9-1: Product: syz [ 650.252575][T11096] usb 9-1: Manufacturer: syz [ 650.257211][T11096] usb 9-1: SerialNumber: syz [ 650.268929][T11096] usb 9-1: config 0 descriptor?? [ 650.276567][T11096] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 650.322925][ T5968] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.342130][ T5968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.357037][ T5968] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 650.383024][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 650.391113][ T5968] usb 5-1: SerialNumber: syz [ 650.626534][T16831] loop8: detected capacity change from 0 to 7 [ 650.633190][ T5968] usb 5-1: 0:2 : does not exist [ 650.641032][T16831] Dev loop8: unable to read RDB block 7 [ 650.647841][T16831] loop8: unable to read partition table [ 650.658974][ T5968] usb 5-1: USB disconnect, device number 36 [ 650.665118][T16831] loop8: partition table beyond EOD, truncated [ 650.672172][T16831] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 650.736343][T16832] Dev loop8: unable to read RDB block 7 [ 650.742060][T16832] loop8: unable to read partition table [ 650.750284][T16832] loop8: partition table beyond EOD, truncated [ 650.757738][T16832] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 651.374655][ T5968] usb 9-1: USB disconnect, device number 28 [ 651.555486][T16863] netlink: 'syz.1.4699': attribute type 12 has an invalid length. [ 651.902892][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 651.906185][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 651.906198][ T30] audit: type=1400 audit(1164.875:10650): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 651.961604][ T30] audit: type=1400 audit(1164.875:10651): avc: denied { ioctl } for pid=16864 comm="syz.1.4701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.986618][ T30] audit: type=1400 audit(1164.905:10652): avc: denied { open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.010986][ T30] audit: type=1400 audit(1164.905:10653): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.036471][ T30] audit: type=1400 audit(1164.945:10654): avc: denied { ioctl } for pid=16864 comm="syz.1.4701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.061269][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 652.067004][ T30] audit: type=1400 audit(1164.945:10655): avc: denied { prog_load } for pid=16875 comm="syz.8.4704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.073103][ T5859] Bluetooth: hci4: command 0x1003 tx timeout [ 652.086096][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.086634][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 652.093738][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 652.113239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 652.129705][ T30] audit: type=1400 audit(1164.945:10656): avc: denied { bpf } for pid=16875 comm="syz.8.4704" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.142824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 652.150424][ T30] audit: type=1400 audit(1165.035:10657): avc: denied { ioctl } for pid=16864 comm="syz.1.4701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.191081][ T30] audit: type=1400 audit(1165.155:10658): avc: denied { read } for pid=16875 comm="syz.8.4704" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 652.205235][ T9] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 652.251716][ T30] audit: type=1400 audit(1165.155:10659): avc: denied { read open } for pid=16875 comm="syz.8.4704" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 652.255028][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.466016][ T9] usb 2-1: Product: syz [ 652.472970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 652.481371][ T9] usb 2-1: Manufacturer: syz [ 652.492316][ T9] usb 2-1: SerialNumber: syz [ 652.521499][ T9] usb 2-1: config 0 descriptor?? [ 652.593930][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 652.599852][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 652.612545][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.641170][T16884] __nla_validate_parse: 42 callbacks suppressed [ 652.641186][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4707'. [ 653.302986][ T5847] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 653.456533][ T5847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.478992][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 653.526219][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 653.567692][ T5847] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 653.595372][ T5847] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.604750][ T5847] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.612976][ T5847] usb 9-1: Manufacturer: syz [ 653.619974][ T5847] usb 9-1: config 0 descriptor?? [ 653.941931][T16919] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.003121][ T5847] rc_core: IR keymap rc-hauppauge not found [ 654.009072][ T5847] Registered IR keymap rc-empty [ 654.022838][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.054748][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.084115][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 654.114624][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input53 [ 654.129495][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.141752][T16928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4724'. [ 654.165042][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.182528][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4725'. [ 654.193367][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.236291][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.263646][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.295908][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.320503][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.343099][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.373841][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.393168][ T5847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 654.424481][ T5847] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 654.437012][ T5847] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 654.450321][ T5847] usb 9-1: USB disconnect, device number 29 [ 654.646107][ T6040] usb 2-1: USB disconnect, device number 48 [ 654.776263][ T5968] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 654.947374][ T5968] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 654.962106][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.971675][ T5968] usb 5-1: Product: syz [ 654.976471][ T5968] usb 5-1: Manufacturer: syz [ 654.981207][ T5968] usb 5-1: SerialNumber: syz [ 654.988661][ T5968] usb 5-1: config 0 descriptor?? [ 655.106979][T16966] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 655.107008][T16966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.036829][ T5968] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 656.059350][ T5968] dm9601 5-1:0.0 eth4: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 7e:a1:8a:d2:7b:3e [ 656.092149][ T5968] usb 5-1: USB disconnect, device number 37 [ 656.120102][ T5968] dm9601 5-1:0.0 eth4: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 656.300871][T17005] netlink: 'syz.1.4758': attribute type 39 has an invalid length. [ 656.928672][ T30] kauditd_printk_skb: 438 callbacks suppressed [ 656.928689][ T30] audit: type=1400 audit(1169.895:11098): avc: denied { create } for pid=17030 comm="syz.0.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.002070][ T30] audit: type=1400 audit(1169.895:11099): avc: denied { bind } for pid=17030 comm="syz.0.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.053152][ T30] audit: type=1400 audit(1169.895:11100): avc: denied { name_bind } for pid=17030 comm="syz.0.4771" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 657.112895][ T30] audit: type=1400 audit(1169.895:11101): avc: denied { node_bind } for pid=17030 comm="syz.0.4771" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 657.134789][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.172891][ T30] audit: type=1400 audit(1169.895:11102): avc: denied { create } for pid=17030 comm="syz.0.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.236248][ T30] audit: type=1400 audit(1169.895:11103): avc: denied { bind } for pid=17030 comm="syz.0.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.255803][ T30] audit: type=1400 audit(1169.895:11104): avc: denied { node_bind } for pid=17030 comm="syz.0.4771" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 657.277451][ T30] audit: type=1400 audit(1169.925:11105): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 657.301981][ T30] audit: type=1400 audit(1169.925:11106): avc: denied { create } for pid=17028 comm="syz.8.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 657.321485][ T30] audit: type=1400 audit(1169.925:11107): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 657.352872][ T5847] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 657.523224][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 657.540869][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.555336][ T5847] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 657.574431][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.595177][ T5847] usb 2-1: config 0 descriptor?? [ 657.649911][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4780'. [ 657.661517][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.048436][ T5847] hid-multitouch 0003:0EEF:72C4.0058: unknown main item tag 0x0 [ 658.073456][ T5847] hid-multitouch 0003:0EEF:72C4.0058: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 658.271485][ T5968] usb 2-1: USB disconnect, device number 49 [ 658.412893][ T5847] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 658.576806][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.598688][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.618756][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 658.628688][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.645788][ T5847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.672902][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.693470][ T5847] usb 5-1: config 0 descriptor?? [ 658.794040][ T5968] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 658.956133][ T5968] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.979311][ T5968] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 659.010649][ T5968] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 659.030484][ T5968] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 659.068240][ T5968] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.093242][ T5968] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.132037][ T5968] usb 9-1: Product: syz [ 659.138571][ T5847] plantronics 0003:047F:FFFF.0059: ignoring exceeding usage max [ 659.152959][ T5968] usb 9-1: Manufacturer: syz [ 659.184714][ T5968] cdc_wdm 9-1:1.0: skipping garbage [ 659.191983][ T5847] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 659.204426][ T5968] cdc_wdm 9-1:1.0: skipping garbage [ 659.210248][ T5968] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 659.351838][ T5968] usb 5-1: USB disconnect, device number 38 [ 659.491102][T17104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input54 [ 659.569576][ T5847] usb 9-1: USB disconnect, device number 30 [ 659.709825][T17117] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4808'. [ 660.461381][T17152] hsr0: entered promiscuous mode [ 660.493304][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'. [ 660.528358][T17152] hsr_slave_0: left promiscuous mode [ 660.556283][T17152] hsr_slave_1: left promiscuous mode [ 660.592737][T17152] hsr0 (unregistering): left promiscuous mode [ 661.059991][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4839'. [ 661.068419][T17189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17189 comm=syz.8.4840 [ 661.300595][T17203] netlink: 'syz.1.4848': attribute type 29 has an invalid length. [ 661.328206][T17196] SELinux: ebitmap: truncated map [ 661.336415][T17203] netlink: 'syz.1.4848': attribute type 29 has an invalid length. [ 661.361217][T17203] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4848'. [ 661.391222][T17206] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4850'. [ 661.450670][T17196] SELinux: failed to load policy [ 661.626070][T17206] syz.6.4850 (17206) used greatest stack depth: 19384 bytes left [ 661.816562][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 661.950573][ T30] kauditd_printk_skb: 543 callbacks suppressed [ 661.950590][ T30] audit: type=1400 audit(1174.915:11651): avc: denied { module_request } for pid=17235 comm="syz.0.4863" kmod="crypto-gcm(aria)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 661.998883][ T30] audit: type=1400 audit(1174.965:11652): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.048400][ T30] audit: type=1400 audit(1174.985:11653): avc: denied { module_request } for pid=17235 comm="syz.0.4863" kmod="crypto-gcm(aria)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 662.089901][ T30] audit: type=1400 audit(1174.995:11654): avc: denied { read write open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.123265][ T30] audit: type=1400 audit(1174.995:11655): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.166692][ T30] audit: type=1400 audit(1175.045:11656): avc: denied { allowed } for pid=17241 comm="syz.4.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 662.198775][ T30] audit: type=1400 audit(1175.045:11657): avc: denied { create } for pid=17241 comm="syz.4.4864" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 662.226644][ T30] audit: type=1400 audit(1175.045:11658): avc: denied { map } for pid=17241 comm="syz.4.4864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 662.255000][ T30] audit: type=1400 audit(1175.065:11659): avc: denied { read write } for pid=17241 comm="syz.4.4864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 662.288087][ T30] audit: type=1400 audit(1175.075:11661): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.746017][T17259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input55 [ 662.992995][T17266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 663.007981][T17265] IPVS: stopping master sync thread 17266 ... [ 663.922900][ T5847] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 664.094678][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.112885][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.122637][ T5847] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 664.162849][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.203747][ T5847] usb 9-1: config 0 descriptor?? [ 664.280666][T17288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input56 [ 664.498846][T11096] IPVS: starting estimator thread 0... [ 664.505197][T17294] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 664.612886][T17298] IPVS: using max 41 ests per chain, 98400 per kthread [ 664.653500][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.663360][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.670326][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.682954][ T5859] Bluetooth: hci4: command 0x1003 tx timeout [ 664.683229][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 664.695693][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.713201][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.720164][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.753958][ T5847] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 664.775231][ T5847] cp2112 0003:10C4:EA90.005A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 664.869589][ T5847] cp2112 0003:10C4:EA90.005A: Part Number: 0x00 Device Version: 0x00 [ 665.276118][ T5847] cp2112 0003:10C4:EA90.005A: error setting SMBus config [ 665.310606][ T5847] cp2112 0003:10C4:EA90.005A: probe with driver cp2112 failed with error -71 [ 665.345654][ T5847] usb 9-1: USB disconnect, device number 31 [ 666.268673][T17355] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 666.283581][T17355] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 666.645047][ T5923] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 666.707315][T17378] netlink: 'syz.8.4923': attribute type 29 has an invalid length. [ 666.719975][T17378] netlink: 'syz.8.4923': attribute type 29 has an invalid length. [ 666.729618][T17378] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4923'. [ 666.742074][T17378] unsupported nla_type 58 [ 666.817631][ T5923] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 666.829771][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.843734][ T5923] usb 5-1: config 0 descriptor?? [ 666.856399][ T5923] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 666.917697][T17386] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4927'. [ 666.962284][ T30] kauditd_printk_skb: 425 callbacks suppressed [ 666.962301][ T30] audit: type=1400 audit(1179.925:12086): avc: denied { read } for pid=17387 comm="syz.8.4928" dev="nsfs" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 666.971707][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4928'. [ 667.002272][ T30] audit: type=1400 audit(1179.925:12087): avc: denied { read open } for pid=17387 comm="syz.8.4928" path="net:[4026533037]" dev="nsfs" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 667.031974][ T30] audit: type=1400 audit(1179.925:12088): avc: denied { create } for pid=17387 comm="syz.8.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.052907][ T30] audit: type=1400 audit(1179.945:12089): avc: denied { write } for pid=17387 comm="syz.8.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.079397][ T30] audit: type=1400 audit(1179.945:12090): avc: denied { read } for pid=17387 comm="syz.8.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.099533][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.109670][ T30] audit: type=1400 audit(1180.005:12091): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.133476][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.139875][ T30] audit: type=1400 audit(1180.005:12092): avc: denied { read write open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.165701][ T30] audit: type=1400 audit(1180.005:12093): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.191220][ T30] audit: type=1400 audit(1180.025:12094): avc: denied { create } for pid=17389 comm="syz.8.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.211587][ T30] audit: type=1400 audit(1180.025:12095): avc: denied { write } for pid=17389 comm="syz.8.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.280568][ T5923] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 667.685523][ T5923] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 667.903906][ T5923] usb 5-1: USB disconnect, device number 39 [ 668.953303][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 669.125985][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 669.136746][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.147944][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.161340][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 669.170458][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.184415][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.192058][ T9] usb 2-1: invalid MIDI out EP 0 [ 669.227614][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 669.363717][T17455] netlink: 'syz.0.4958': attribute type 10 has an invalid length. [ 669.371902][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.379200][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.395752][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.402893][T17455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.406707][ T5847] usb 2-1: USB disconnect, device number 50 [ 669.410279][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.423112][T17455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.438158][T17455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 671.036980][T17523] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4989'. [ 671.078772][T17523] nbd: must specify at least one socket [ 671.212894][ T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 671.237592][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4990'. [ 671.382894][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 671.394323][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.422685][ T9] usb 9-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 671.440894][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.470397][ T9] usb 9-1: config 0 descriptor?? [ 671.913816][ T9] sunplus 0003:04FC:05D8.005B: reserved main item tag 0xd [ 671.921182][ T9] sunplus 0003:04FC:05D8.005B: unexpected long global item [ 671.943426][ T9] sunplus 0003:04FC:05D8.005B: probe with driver sunplus failed with error -22 [ 672.132391][ T5968] usb 9-1: USB disconnect, device number 32 [ 672.309661][ T30] kauditd_printk_skb: 420 callbacks suppressed [ 672.309677][ T30] audit: type=1400 audit(1185.265:12516): avc: denied { read write } for pid=15826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.386319][ T30] audit: type=1400 audit(1185.265:12517): avc: denied { read write open } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.414404][ T30] audit: type=1400 audit(1185.265:12518): avc: denied { ioctl } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.463148][ T30] audit: type=1400 audit(1185.415:12519): avc: denied { create } for pid=17538 comm="syz.4.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 672.482380][ T30] audit: type=1400 audit(1185.415:12520): avc: denied { write } for pid=17538 comm="syz.4.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 672.502190][ T30] audit: type=1400 audit(1185.415:12521): avc: denied { getopt } for pid=17538 comm="syz.4.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 672.551175][ T30] audit: type=1400 audit(1185.425:12522): avc: denied { read } for pid=17537 comm="syz.1.4996" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 672.615773][ T30] audit: type=1400 audit(1185.425:12523): avc: denied { open } for pid=17537 comm="syz.1.4996" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 672.644116][T17544] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4999'. [ 672.668531][ T30] audit: type=1400 audit(1185.425:12524): avc: denied { ioctl } for pid=17537 comm="syz.1.4996" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 672.707983][ T30] audit: type=1400 audit(1185.475:12525): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.195234][T17614] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5031'. [ 674.482963][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 674.532940][ T5847] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 674.645181][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 674.655045][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 674.668169][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 674.677258][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.682924][ T5847] usb 9-1: Using ep0 maxpacket: 8 [ 674.685484][ T9] usb 5-1: Product: syz [ 674.696823][ T5847] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 674.696840][ T9] usb 5-1: Manufacturer: syz [ 674.708284][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.710428][ T9] usb 5-1: SerialNumber: syz [ 674.717867][ T9] usb 5-1: config 0 descriptor?? [ 674.719018][ T5847] usb 9-1: Product: syz [ 674.724489][T17620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 674.730572][ T5847] usb 9-1: Manufacturer: syz [ 674.732658][T17620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 674.741068][ T5847] usb 9-1: SerialNumber: syz [ 674.757694][ T5847] usb 9-1: config 0 descriptor?? [ 674.766859][ T5847] usb_ehset_test 9-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 674.973402][T17620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 674.980631][T17620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 674.984230][T17624] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5036'. [ 675.008452][T11096] usb 9-1: USB disconnect, device number 33 [ 675.411892][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 675.824803][ T9] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 675.847301][ T9] usb 5-1: USB disconnect, device number 40 [ 676.735535][T17668] block nbd6: NBD_DISCONNECT [ 676.742638][T17668] block nbd6: Send disconnect failed -22 [ 676.770934][T17667] block nbd6: Disconnected due to user request. [ 676.792071][T17667] block nbd6: shutting down sockets [ 676.847490][T17672] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5058'. [ 676.931893][T17678] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.5060'. [ 677.268152][T17700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5070'. [ 677.313982][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5066'. [ 677.331502][ T30] kauditd_printk_skb: 432 callbacks suppressed [ 677.331517][ T30] audit: type=1400 audit(1190.295:12958): avc: denied { read write } for pid=15826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.334767][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5066'. [ 677.338568][ T30] audit: type=1400 audit(1190.305:12959): avc: denied { open } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.423683][T11096] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 677.484992][ T30] audit: type=1400 audit(1190.335:12960): avc: denied { ioctl } for pid=17689 comm="syz.4.5067" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 677.513519][ T30] audit: type=1400 audit(1190.365:12961): avc: denied { ioctl } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.538697][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.585157][T11096] usb 5-1: Using ep0 maxpacket: 16 [ 677.591352][ T30] audit: type=1400 audit(1190.385:12962): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.616529][T11096] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 677.634123][T11096] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.649541][ T30] audit: type=1400 audit(1190.385:12963): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.673247][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.682499][T11096] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.741006][ T30] audit: type=1400 audit(1190.385:12964): avc: denied { ioctl } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.800118][T17712] block nbd2: server does not support multiple connections per device. [ 677.828629][ T30] audit: type=1400 audit(1190.405:12965): avc: denied { ioctl } for pid=17689 comm="syz.4.5067" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 677.839003][T11096] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.853138][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.853563][T17712] block nbd2: shutting down sockets [ 677.899363][T11096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.913068][ T30] audit: type=1400 audit(1190.425:12966): avc: denied { read write } for pid=17704 comm="syz.0.5073" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 677.936964][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.969352][T11096] usb 5-1: Product: syz [ 677.985743][T11096] usb 5-1: Manufacturer: syz [ 677.990345][T11096] usb 5-1: SerialNumber: syz [ 678.027939][ T30] audit: type=1400 audit(1190.425:12967): avc: denied { open } for pid=17704 comm="syz.0.5073" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 678.036709][T17723] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 678.051754][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.513809][T11096] usb 5-1: 0:2 : does not exist [ 679.131321][T11096] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 679.163319][T11096] usb 5-1: USB disconnect, device number 41 [ 679.240871][T17752] pim6reg1: entered promiscuous mode [ 679.271164][T17752] pim6reg1: entered allmulticast mode [ 680.306495][T17794] netlink: 'syz.8.5112': attribute type 4 has an invalid length. [ 681.562950][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 681.755038][ T5968] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 681.937203][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.948199][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.958089][ T5968] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 681.967210][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.979631][ T5968] usb 5-1: config 0 descriptor?? [ 682.345032][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 682.345048][ T30] audit: type=1400 audit(1195.305:13299): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.401401][ T30] audit: type=1400 audit(1195.315:13300): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.436192][ T30] audit: type=1400 audit(1195.315:13301): avc: denied { ioctl } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.467291][ T30] audit: type=1400 audit(1195.345:13302): avc: denied { read write } for pid=11113 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.491082][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.497866][ T5968] cm6533_jd 0003:0D8C:0022.005C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 682.504170][ T30] audit: type=1400 audit(1195.345:13303): avc: denied { open } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.536916][ T30] audit: type=1400 audit(1195.345:13304): avc: denied { ioctl } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.617068][ T30] audit: type=1400 audit(1195.365:13305): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.656565][ T5968] usb 5-1: USB disconnect, device number 42 [ 682.688641][ T30] audit: type=1400 audit(1195.365:13306): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.695467][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5137'. [ 682.739602][ T30] audit: type=1400 audit(1195.365:13307): avc: denied { ioctl } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.818880][ T30] audit: type=1400 audit(1195.395:13308): avc: denied { ioctl } for pid=17810 comm="syz.4.5119" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.904088][T17856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.415115][T17875] pim6reg1: entered promiscuous mode [ 683.439973][T17875] pim6reg1: entered allmulticast mode [ 683.982908][T11096] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 684.143310][T11096] usb 9-1: Using ep0 maxpacket: 32 [ 684.150044][T11096] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.162598][T11096] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.175449][T11096] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 684.185521][T11096] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.199199][T11096] usb 9-1: config 0 descriptor?? [ 684.264888][T17923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.657826][T11096] savu 0003:1E7D:2D5A.005D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 684.870397][ T5847] usb 9-1: USB disconnect, device number 34 [ 685.341044][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.840045][T17980] syzkaller1: entered promiscuous mode [ 685.845981][T17980] syzkaller1: entered allmulticast mode [ 686.399904][T18005] loop7: detected capacity change from 0 to 7 [ 686.407056][ C1] blk_print_req_error: 5 callbacks suppressed [ 686.407070][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.422295][ C1] buffer_io_error: 21 callbacks suppressed [ 686.422308][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.436343][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.445496][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.457255][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.466420][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.493021][T18006] Invalid logical block size (6) [ 686.500276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.509450][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.517453][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.526613][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.536432][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.545596][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.554590][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.563757][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.571660][T18005] ldm_validate_partition_table(): Disk read failed. [ 686.589010][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.598190][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.607323][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.616485][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.629997][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.639148][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 686.652857][T18005] Dev loop7: unable to read RDB block 0 [ 686.670004][T18005] loop7: unable to read partition table [ 686.685240][T18005] loop7: partition table beyond EOD, truncated [ 686.695441][T18014] overlayfs: failed to clone lowerpath [ 686.704491][T18005] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 686.790050][T18018] mmap: syz.4.5210 (18018): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 687.355389][ T30] kauditd_printk_skb: 503 callbacks suppressed [ 687.355405][ T30] audit: type=1400 audit(1200.325:13812): avc: denied { prog_load } for pid=18048 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.437719][ T30] audit: type=1400 audit(1200.355:13813): avc: denied { read write } for pid=11113 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 687.462456][ T30] audit: type=1400 audit(1200.355:13814): avc: denied { open } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 687.560265][ T30] audit: type=1400 audit(1200.355:13815): avc: denied { ioctl } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 687.610594][ T30] audit: type=1400 audit(1200.365:13816): avc: denied { bpf } for pid=18048 comm="syz.4.5225" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.655766][ T30] audit: type=1400 audit(1200.365:13817): avc: denied { watch watch_reads } for pid=18050 comm="syz.1.5226" path="/197" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 687.718888][ T30] audit: type=1400 audit(1200.365:13818): avc: denied { prog_load } for pid=18048 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.741934][ T30] audit: type=1400 audit(1200.365:13819): avc: denied { perfmon } for pid=18048 comm="syz.4.5225" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.766420][ T30] audit: type=1400 audit(1200.385:13820): avc: denied { bpf } for pid=18048 comm="syz.4.5225" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.786769][ T30] audit: type=1400 audit(1200.385:13821): avc: denied { prog_run } for pid=18048 comm="syz.4.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.841147][ T5968] hid-generic 0005:16BF:5505.005E: unknown main item tag 0x0 [ 687.851159][ T5968] hid-generic 0005:16BF:5505.005E: unknown main item tag 0x0 [ 687.862597][ T5968] hid-generic 0005:16BF:5505.005E: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 687.987677][T18077] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 688.926360][T18108] sctp: [Deprecated]: syz.4.5252 (pid 18108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.926360][T18108] Use struct sctp_sack_info instead [ 688.935981][T18110] veth1_macvtap: left promiscuous mode [ 688.966423][T18110] macsec0: entered promiscuous mode [ 688.979842][T18110] macsec0: entered allmulticast mode [ 689.040183][T18110] veth1_macvtap: entered promiscuous mode [ 689.059487][T18110] veth1_macvtap: entered allmulticast mode [ 689.077950][T18110] macsec0: left promiscuous mode [ 689.097884][T18110] macsec0: left allmulticast mode [ 689.114962][T18110] veth1_macvtap: left allmulticast mode [ 689.270295][T18124] netlink: 212164 bytes leftover after parsing attributes in process `syz.0.5260'. [ 690.413409][T11096] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 690.579159][T11096] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 690.599491][T11096] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.630093][T11096] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.641561][T11096] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.659859][T11096] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.672179][T11096] usb 5-1: Product: syz [ 690.677980][T11096] usb 5-1: Manufacturer: syz [ 690.682691][T11096] usb 5-1: SerialNumber: syz [ 690.694742][T11096] usb 5-1: config 0 descriptor?? [ 690.701208][T11096] hub 5-1:0.0: bad descriptor, ignoring hub [ 690.710484][T11096] hub 5-1:0.0: probe with driver hub failed with error -5 [ 690.722329][T11096] usb 5-1: selecting invalid altsetting 0 [ 691.053127][T11096] usb 5-1: USB disconnect, device number 43 [ 691.417322][ T6040] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 691.593657][ T6040] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 691.601781][ T6040] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 691.619124][ T6040] usb 5-1: config 0 interface 0 has no altsetting 0 [ 691.635916][ T6040] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.645520][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.672857][ T6040] usb 5-1: Product: syz [ 691.677046][ T6040] usb 5-1: Manufacturer: syz [ 691.681626][ T6040] usb 5-1: SerialNumber: syz [ 691.688459][ T6040] usb 5-1: config 0 descriptor?? [ 691.695614][ T6040] hub 5-1:0.0: bad descriptor, ignoring hub [ 691.702434][ T6040] hub 5-1:0.0: probe with driver hub failed with error -5 [ 691.714882][ T6040] usb 5-1: selecting invalid altsetting 0 [ 692.054759][ T6040] usb 5-1: USB disconnect, device number 44 [ 692.273744][T18224] netlink: 14528 bytes leftover after parsing attributes in process `syz.8.5303'. [ 692.414736][ T30] kauditd_printk_skb: 443 callbacks suppressed [ 692.414752][ T30] audit: type=1400 audit(1205.385:14265): avc: denied { read write } for pid=15826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.468182][ T30] audit: type=1400 audit(1205.385:14266): avc: denied { open } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.494747][ T30] audit: type=1400 audit(1205.385:14267): avc: denied { ioctl } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.519953][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.527248][ T30] audit: type=1400 audit(1205.385:14268): avc: denied { create } for pid=18232 comm="syz.1.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 692.550547][ T30] audit: type=1400 audit(1205.385:14269): avc: denied { write } for pid=18232 comm="syz.1.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 692.577865][ T30] audit: type=1400 audit(1205.445:14270): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.623732][ T30] audit: type=1400 audit(1205.445:14271): avc: denied { open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.657467][ T30] audit: type=1400 audit(1205.445:14272): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.682664][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.698026][ T30] audit: type=1400 audit(1205.555:14273): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.721814][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.733826][ T30] audit: type=1400 audit(1205.555:14274): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.113150][ T5968] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 693.184424][T18260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 693.237091][T18260] overlayfs: maximum fs stacking depth exceeded [ 693.377223][ T5968] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 693.394912][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.417166][ T5968] usb 5-1: config 0 descriptor?? [ 693.461823][ T5968] cp210x 5-1:0.0: cp210x converter detected [ 693.665503][T18272] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5325'. [ 693.868834][T18279] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 693.891879][ T5968] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 694.007549][T18285] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5332'. [ 694.127373][ T5968] usb 5-1: cp210x converter now attached to ttyUSB0 [ 694.340002][ T6040] usb 5-1: USB disconnect, device number 45 [ 694.356267][ T6040] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 694.404689][ T6040] cp210x 5-1:0.0: device disconnected [ 694.413033][ T5968] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 694.509997][T18305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18305 comm=syz.8.5341 [ 694.577572][ T5968] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.590388][ T5968] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 694.601410][ T5968] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.614530][ T5968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 694.627744][ T5968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 694.645620][ T5968] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.656648][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.667790][ T5968] usb 2-1: Product: syz [ 694.671987][ T5968] usb 2-1: Manufacturer: syz [ 694.681980][ T5968] cdc_wdm 2-1:1.0: skipping garbage [ 694.688867][ T5968] cdc_wdm 2-1:1.0: skipping garbage [ 694.696861][ T5968] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 694.704445][ T5968] cdc_wdm 2-1:1.0: Unknown control protocol [ 694.873231][ T6040] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 695.033327][ T6040] usb 9-1: Using ep0 maxpacket: 8 [ 695.045833][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.072948][ T6040] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 695.092120][ T6040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.101873][ T6040] usb 9-1: config 0 descriptor?? [ 695.332882][ T5968] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 695.482902][ T5968] usb 5-1: Using ep0 maxpacket: 16 [ 695.489919][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.500916][ T5968] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 695.510057][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.520683][ T5968] usb 5-1: config 0 descriptor?? [ 695.522544][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.535906][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.543190][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.551102][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.559861][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.568716][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.576246][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.583796][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.590995][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.598204][ T6040] megaworld 0003:07B5:0312.005F: unknown main item tag 0x0 [ 695.605526][ T6040] megaworld 0003:07B5:0312.005F: collection stack underflow [ 695.612841][ T6040] megaworld 0003:07B5:0312.005F: item 0 0 0 12 parsing failed [ 695.620659][ T6040] megaworld 0003:07B5:0312.005F: parse failed [ 695.627605][ T6040] megaworld 0003:07B5:0312.005F: probe with driver megaworld failed with error -22 [ 695.746557][ T6040] usb 9-1: USB disconnect, device number 35 [ 695.940760][ T5968] mcp2221 0003:04D8:00DD.0060: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 696.357362][ T5847] usb 5-1: USB disconnect, device number 46 [ 697.218675][ T6040] usb 2-1: USB disconnect, device number 51 [ 697.271933][T18353] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.5364'. [ 697.401157][T18365] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 697.424215][ T30] kauditd_printk_skb: 418 callbacks suppressed [ 697.424229][ T30] audit: type=1400 audit(1210.395:14693): avc: denied { read write } for pid=15826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.459253][ T30] audit: type=1400 audit(1210.395:14694): avc: denied { open } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.492206][ T30] audit: type=1400 audit(1210.395:14695): avc: denied { write } for pid=18364 comm="syz.8.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 697.514196][ T30] audit: type=1400 audit(1210.395:14696): avc: denied { create } for pid=18364 comm="syz.8.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 697.534030][ T30] audit: type=1400 audit(1210.395:14697): avc: denied { getopt } for pid=18364 comm="syz.8.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 697.590834][ T30] audit: type=1400 audit(1210.395:14698): avc: denied { ioctl } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.621983][ T30] audit: type=1400 audit(1210.425:14699): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.650767][ T30] audit: type=1400 audit(1210.425:14700): avc: denied { read write open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.678964][ T30] audit: type=1400 audit(1210.425:14701): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.708773][ T30] audit: type=1400 audit(1210.455:14702): avc: denied { read write } for pid=18369 comm="syz.8.5372" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 697.762882][ T5847] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 697.923307][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 697.932377][ T5847] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 697.940969][ T5847] usb 2-1: config 0 has no interface number 0 [ 697.949719][ T5847] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 697.961120][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.969320][ T5847] usb 2-1: Product: syz [ 697.973633][ T5847] usb 2-1: Manufacturer: syz [ 697.978333][ T5847] usb 2-1: SerialNumber: syz [ 697.985242][ T5847] usb 2-1: config 0 descriptor?? [ 697.994213][ T5847] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 698.201189][ T5847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 698.220895][ T5847] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 698.404320][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 132 [ 698.616781][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 698.624625][ T5923] usb 2-1: USB disconnect, device number 52 [ 698.637864][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 698.679587][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 698.699317][ T5923] quatech2 2-1:0.51: device disconnected [ 698.791560][T18413] syzkaller1: entered promiscuous mode [ 698.803156][T18413] syzkaller1: entered allmulticast mode [ 699.249763][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5399'. [ 699.271554][T18434] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5401'. [ 699.375948][T18436] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5402'. [ 699.402292][T18436] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5402'. [ 699.419760][T18438] evm: overlay not supported [ 700.534751][T18487] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.542266][T18487] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.630779][T18487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.656278][T18487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.770419][T11092] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.799219][T11092] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.827649][T11092] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.854920][T11092] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.325544][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5434'. [ 701.335229][T18517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5434'. [ 701.962897][ T6040] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 702.165069][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.179217][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.189529][ T6040] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.202588][ T6040] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.211860][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.221792][ T6040] usb 5-1: config 0 descriptor?? [ 702.266543][T18559] netlink: 'syz.8.5455': attribute type 22 has an invalid length. [ 702.274590][T18559] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5455'. [ 702.592841][T11377] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 702.655109][ T6040] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 702.744241][T11377] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 702.752408][T11377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 702.763567][T11377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 702.778150][T11377] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.791017][T11377] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.800557][T11377] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.809645][T11377] usb 9-1: config 0 descriptor?? [ 702.815073][T18561] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 702.871234][ T5923] usb 5-1: USB disconnect, device number 47 [ 702.891133][ T30] kauditd_printk_skb: 528 callbacks suppressed [ 702.891147][ T30] audit: type=1400 audit(1215.855:15231): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.921923][ T30] audit: type=1400 audit(1215.855:15232): avc: denied { open } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.946880][ T30] audit: type=1400 audit(1215.855:15233): avc: denied { ioctl } for pid=13179 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.974175][ T30] audit: type=1400 audit(1215.895:15234): avc: denied { create } for pid=18562 comm="syz.0.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 702.993853][ T30] audit: type=1400 audit(1215.895:15235): avc: denied { setopt } for pid=18562 comm="syz.0.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 703.016220][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 703.019477][ T5859] Bluetooth: hci4: command 0x1003 tx timeout [ 703.029848][ T30] audit: type=1400 audit(1215.895:15236): avc: denied { bind } for pid=18562 comm="syz.0.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 703.057215][ T30] audit: type=1400 audit(1215.895:15237): avc: denied { name_bind } for pid=18562 comm="syz.0.5457" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 703.083644][ T30] audit: type=1400 audit(1215.895:15238): avc: denied { node_bind } for pid=18562 comm="syz.0.5457" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 703.129219][ T30] audit: type=1400 audit(1215.905:15239): avc: denied { write } for pid=18562 comm="syz.0.5457" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 703.180416][ T30] audit: type=1400 audit(1215.905:15240): avc: denied { connect } for pid=18562 comm="syz.0.5457" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 703.233191][T11377] plantronics 0003:047F:FFFF.0062: reserved main item tag 0xd [ 703.256282][T11377] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 703.446473][ T5923] usb 9-1: USB disconnect, device number 36 [ 703.542538][T18594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5470'. [ 703.896354][T18606] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5476'. [ 703.922898][T11377] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 704.097332][T11377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.109206][T11377] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.129615][T11377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.158075][T11377] usb 5-1: config 0 descriptor?? [ 704.230776][T18623] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 704.609829][T11377] keytouch 0003:0926:3333.0063: fixing up Keytouch IEC report descriptor [ 704.724386][T11377] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0063/input/input60 [ 704.832632][T11377] keytouch 0003:0926:3333.0063: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 705.268921][ T5847] usb 5-1: USB disconnect, device number 48 [ 705.410711][T18673] syz.6.5508 (18673): drop_caches: 2 [ 706.123070][ T5923] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 706.289368][ T5923] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 706.298367][ T5923] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 706.311775][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 706.321978][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 706.333199][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 706.345529][ T5923] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.354654][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.362609][ T5923] usb 2-1: Product: syz [ 706.366921][ T5923] usb 2-1: Manufacturer: syz [ 706.375682][ T5923] cdc_wdm 2-1:1.0: skipping garbage [ 706.381052][ T5923] cdc_wdm 2-1:1.0: skipping garbage [ 706.388050][ T5923] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 706.395062][ T5923] cdc_wdm 2-1:1.0: Unknown control protocol [ 707.108875][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5541'. [ 707.120961][T18744] netlink: 'syz.8.5541': attribute type 30 has an invalid length. [ 707.140769][ T36] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.164421][T11095] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.181674][T11095] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.194763][T11095] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.505836][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5547'. [ 707.523876][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 707.550156][T18757] bond0: (slave bond_slave_1): Releasing backup interface [ 707.693010][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 707.703684][ T9] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 707.712655][ T9] usb 9-1: config 1 has no interface number 0 [ 707.724977][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 707.740051][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 707.751432][ T9] usb 9-1: config 1 interface 105 has no altsetting 0 [ 707.764171][ T9] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 707.775351][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.784502][ T9] usb 9-1: Product: syz [ 707.788700][ T9] usb 9-1: Manufacturer: syz [ 707.795302][ T9] usb 9-1: SerialNumber: syz [ 707.805570][T18751] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 707.825046][T18751] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 707.958746][ T30] kauditd_printk_skb: 741 callbacks suppressed [ 707.958763][ T30] audit: type=1400 audit(1220.925:15982): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.989290][ T30] audit: type=1400 audit(1220.925:15983): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.014957][ T30] audit: type=1400 audit(1220.925:15984): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.046326][ T30] audit: type=1400 audit(1220.965:15985): avc: denied { watch } for pid=18775 comm="syz.4.5556" path="/732/file5" dev="tmpfs" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 708.086492][ T30] audit: type=1400 audit(1220.965:15986): avc: denied { watch_sb watch_reads } for pid=18775 comm="syz.4.5556" path="/732/file5" dev="tmpfs" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 708.113999][ T30] audit: type=1400 audit(1220.985:15987): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.138673][ T30] audit: type=1400 audit(1220.985:15988): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.152874][T18782] random: crng reseeded on system resumption [ 708.162957][ T30] audit: type=1400 audit(1220.985:15989): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.193650][ T30] audit: type=1400 audit(1221.015:15990): avc: denied { create } for pid=18777 comm="syz.4.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 708.214093][ T30] audit: type=1400 audit(1221.015:15991): avc: denied { ioctl } for pid=18777 comm="syz.4.5557" path="socket:[73801]" dev="sockfs" ino=73801 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 708.289168][T18751] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 708.296628][T18751] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 708.712161][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 708.726010][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 708.737641][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 708.755593][ T9] aqc111 9-1:1.105 eth4: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:7d:35:4a:fb:48 [ 708.774814][ T9] usb 9-1: USB disconnect, device number 37 [ 708.782222][ T9] aqc111 9-1:1.105 eth4: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 708.834292][ T9] aqc111 9-1:1.105 eth4 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 708.848434][ T9] aqc111 9-1:1.105 eth4 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 708.857844][ T9] aqc111 9-1:1.105 eth4 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 708.898744][ T6040] usb 2-1: USB disconnect, device number 53 [ 708.988595][T18811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5571'. [ 708.998144][T18811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5571'. [ 709.430842][T18830] syzkaller1: entered promiscuous mode [ 709.439302][T18830] syzkaller1: entered allmulticast mode [ 709.632148][T18836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5582'. [ 709.643575][T18834] syzkaller1: entered promiscuous mode [ 709.656701][T18834] syzkaller1: entered allmulticast mode [ 709.928802][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5585'. [ 709.941204][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5585'. [ 711.087517][T18884] input: syz0 as /devices/virtual/input/input61 [ 711.706799][T18918] tipc: Started in network mode [ 711.731506][T18918] tipc: Node identity ac1414aa, cluster identity 4711 [ 711.750943][T18918] tipc: Enabled bearer , priority 10 [ 712.865398][ T5923] tipc: Node number set to 2886997162 [ 712.996052][ T30] kauditd_printk_skb: 401 callbacks suppressed [ 712.996067][ T30] audit: type=1400 audit(1225.965:16393): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.026022][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.059611][ T30] audit: type=1400 audit(1225.965:16394): avc: denied { read write open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.078806][ T5847] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 713.136963][ T30] audit: type=1400 audit(1225.985:16395): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.162178][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.208097][ T30] audit: type=1400 audit(1225.995:16396): avc: denied { ioctl } for pid=18966 comm="syz.4.5623" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.264797][ T30] audit: type=1400 audit(1226.075:16397): avc: denied { read write } for pid=18972 comm="syz.8.5627" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 713.298222][ T5847] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.325658][ T5847] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.374466][ T30] audit: type=1400 audit(1226.075:16398): avc: denied { open } for pid=18972 comm="syz.8.5627" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 713.382978][ T5847] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.471885][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.477245][ T30] audit: type=1400 audit(1226.075:16399): avc: denied { prog_load } for pid=18954 comm="syz.6.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 713.580716][ T30] audit: type=1400 audit(1226.075:16400): avc: denied { bpf } for pid=18954 comm="syz.6.5620" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.638173][ T30] audit: type=1400 audit(1226.075:16401): avc: denied { perfmon } for pid=18954 comm="syz.6.5620" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.709485][ T30] audit: type=1400 audit(1226.075:16402): avc: denied { ioctl } for pid=18972 comm="syz.8.5627" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 713.758737][ T5847] usb 5-1: usb_control_msg returned -32 [ 713.813277][ T5847] usbtmc 5-1:16.0: can't read capabilities [ 713.886584][T18992] netlink: 'syz.1.5634': attribute type 11 has an invalid length. [ 714.198501][T19007] syzkaller1: entered promiscuous mode [ 714.205756][T19007] syzkaller1: entered allmulticast mode [ 714.872359][T19032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 714.878890][T19032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 714.902222][T19032] vhci_hcd vhci_hcd.0: Device attached [ 714.929713][T19033] vhci_hcd: connection closed [ 714.931230][T11088] vhci_hcd: stop threads [ 714.961057][T11088] vhci_hcd: release socket [ 714.974443][T11088] vhci_hcd: disconnect device [ 715.527167][T19056] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5662'. [ 715.572860][T11377] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 715.755473][T11377] usb 9-1: unable to get BOS descriptor or descriptor too short [ 715.786272][T11377] usb 9-1: config 213 has an invalid interface number: 166 but max is 0 [ 715.802411][T11377] usb 9-1: config 213 has no interface number 0 [ 715.827679][T11377] usb 9-1: config 213 interface 166 has no altsetting 0 [ 715.857700][T19068] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5667'. [ 715.872737][T11377] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0122, bcdDevice=e6.ef [ 715.892278][T11377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.911694][T11377] usb 9-1: Product: syz [ 715.923035][T11377] usb 9-1: Manufacturer: syz [ 715.932845][T11377] usb 9-1: SerialNumber: syz [ 715.944352][ T5932] usb 5-1: USB disconnect, device number 49 [ 715.953376][T11377] kvaser_usb 9-1:213.166: error -ENODEV: Cannot get usb endpoint(s) [ 716.165460][ T5847] usb 9-1: USB disconnect, device number 38 [ 716.563062][ T5932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 716.733312][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 716.748816][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.773507][ T5932] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 716.783842][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.794549][ T5932] usb 2-1: config 0 descriptor?? [ 717.027890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 717.141740][T19113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5687'. [ 717.158956][T19113] IPVS: Error connecting to the multicast addr [ 717.250817][ T5932] dragonrise 0003:0079:0006.0064: hidraw0: USB HID v10.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 717.266556][ T5932] dragonrise 0003:0079:0006.0064: no inputs found [ 717.276017][ T5932] dragonrise 0003:0079:0006.0064: force feedback init failed [ 717.468456][ T5932] usb 2-1: USB disconnect, device number 54 [ 717.497010][T19125] syzkaller1: entered promiscuous mode [ 717.502520][T19125] syzkaller1: entered allmulticast mode [ 717.792983][ T5923] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 717.956906][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 717.966851][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.992986][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.002020][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.021174][ T30] kauditd_printk_skb: 462 callbacks suppressed [ 718.021188][ T30] audit: type=1400 audit(1230.985:16865): avc: denied { ioctl } for pid=19126 comm="syz.4.5694" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.070119][ T30] audit: type=1400 audit(1231.025:16866): avc: denied { create } for pid=19147 comm="syz.1.5703" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 718.095082][ T30] audit: type=1400 audit(1231.035:16867): avc: denied { ioctl } for pid=19147 comm="syz.1.5703" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75571 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 718.137876][ T30] audit: type=1400 audit(1231.105:16868): avc: denied { read write } for pid=15826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.165769][ T30] audit: type=1400 audit(1231.105:16869): avc: denied { open } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.194840][ T30] audit: type=1400 audit(1231.105:16870): avc: denied { ioctl } for pid=15826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.224616][ T30] audit: type=1400 audit(1231.175:16871): avc: denied { read write } for pid=11113 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.227776][ T5923] usb 5-1: usb_control_msg returned -32 [ 718.252614][ T30] audit: type=1400 audit(1231.175:16872): avc: denied { open } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.279181][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 718.281754][ T30] audit: type=1400 audit(1231.175:16873): avc: denied { ioctl } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.311286][ T30] audit: type=1400 audit(1231.195:16874): avc: denied { ioctl } for pid=19126 comm="syz.4.5694" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.964245][T19190] smc: net device bond0 erased user defined pnetid SYZ0 [ 719.253140][T11377] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 719.403027][T11377] usb 9-1: Using ep0 maxpacket: 16 [ 719.411170][T11377] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 719.420262][T11377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.428263][T11377] usb 9-1: Product: syz [ 719.432408][T11377] usb 9-1: Manufacturer: syz [ 719.437130][T11377] usb 9-1: SerialNumber: syz [ 719.442935][T11377] usb 9-1: config 0 descriptor?? [ 719.855584][T11377] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 719.864412][T11377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.874312][T11377] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 719.882212][T11377] usb 9-1: media controller created [ 719.898627][T11377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.065972][T11377] zl10353_read_register: readreg error (reg=127, ret==0) [ 720.073192][T11377] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 720.081084][T11377] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 720.091814][T11377] usb 9-1: USB disconnect, device number 39 [ 720.109208][T11377] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 720.252987][ T5923] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 720.427389][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.437324][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.450498][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 720.459656][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.582230][ T9] usb 5-1: USB disconnect, device number 50 [ 720.691841][ T5923] usb 2-1: GET_CAPABILITIES returned 0 [ 720.703273][ T5923] usbtmc 2-1:16.0: can't read capabilities [ 720.829279][T19219] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.840268][T19219] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 720.901295][ T9] usb 2-1: USB disconnect, device number 55 [ 720.911918][T19219] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.921947][T19219] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 720.977075][T19219] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.986892][T19219] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.036880][T19219] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.046681][T19219] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 721.108863][T11090] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.117202][T11090] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.131585][T11090] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.139866][T11090] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.156607][T11090] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.165329][T11090] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.177164][T11090] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.185519][T11090] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.377036][T19226] netlink: 'syz.8.5736': attribute type 1 has an invalid length. [ 721.888899][T19256] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 721.951538][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5753'. [ 721.960612][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5753'. [ 721.978596][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5753'. [ 721.987731][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5753'. [ 722.342961][ T5968] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 722.519585][ T5968] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 722.528116][ T5968] usb 9-1: config 150 has no interface number 0 [ 722.534501][ T5968] usb 9-1: config 150 interface 204 has no altsetting 0 [ 722.541443][ T5968] usb 9-1: config 150 interface 1 has no altsetting 0 [ 722.550103][ T5968] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 722.559425][ T5968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.567548][ T5968] usb 9-1: Product: syz [ 722.571703][ T5968] usb 9-1: Manufacturer: syz [ 722.576352][ T5968] usb 9-1: SerialNumber: syz [ 722.765894][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 722.831203][ T5968] xr_serial 9-1:150.204: xr_serial converter detected [ 723.040555][ T30] kauditd_printk_skb: 313 callbacks suppressed [ 723.040570][ T30] audit: type=1400 audit(1236.005:17188): avc: denied { ioctl } for pid=19270 comm="syz.8.5757" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 723.175790][ T30] audit: type=1400 audit(1236.135:17189): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.216977][ T30] audit: type=1400 audit(1236.135:17190): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.249859][ T30] audit: type=1400 audit(1236.135:17191): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.285908][ T30] audit: type=1400 audit(1236.175:17192): avc: denied { create } for pid=19280 comm="syz.4.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 723.307109][ T30] audit: type=1400 audit(1236.175:17193): avc: denied { ioctl } for pid=19280 comm="syz.4.5761" path="socket:[76334]" dev="sockfs" ino=76334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 723.332548][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.339153][ T30] audit: type=1400 audit(1236.175:17194): avc: denied { create } for pid=19280 comm="syz.4.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.364238][ T30] audit: type=1400 audit(1236.185:17195): avc: denied { write } for pid=19280 comm="syz.4.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.384709][ T30] audit: type=1400 audit(1236.185:17196): avc: denied { read } for pid=19280 comm="syz.4.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.404827][ T30] audit: type=1400 audit(1236.215:17197): avc: denied { ioctl } for pid=19270 comm="syz.8.5757" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 723.495360][ T5847] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 723.646208][ T5968] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 723.653808][ T5968] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 723.676175][ T5847] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 723.688740][ T5968] usb 9-1: USB disconnect, device number 40 [ 723.695600][ T5847] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 723.707841][ T5968] xr_serial 9-1:150.204: device disconnected [ 723.716315][ T5847] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 723.727097][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.737800][T19283] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 723.752222][ T5847] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.023685][ T5847] usb 5-1: USB disconnect, device number 51 [ 724.529411][T19314] vivid-000: ================= START STATUS ================= [ 724.549663][T19314] vivid-000: Test Pattern: 75% Colorbar [ 724.568080][ T5847] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 724.571656][T19314] vivid-000: Fill Percentage of Frame: 100 [ 724.615441][T19314] vivid-000: Horizontal Movement: No Movement [ 724.621968][T19314] vivid-000: Vertical Movement: No Movement [ 724.632241][T19314] vivid-000: OSD Text Mode: All [ 724.644910][T19314] vivid-000: Show Border: false [ 724.654871][T19314] vivid-000: Show Square: false [ 724.668093][T19314] vivid-000: Sensor Flipped Horizontally: false [ 724.678948][T19314] vivid-000: Sensor Flipped Vertically: false [ 724.690065][T19314] vivid-000: Insert SAV Code in Image: false [ 724.706346][T19314] vivid-000: Insert EAV Code in Image: false [ 724.717793][T19314] vivid-000: Insert Video Guard Band: false [ 724.727120][T19314] vivid-000: Reduced Framerate: false [ 724.738381][T19314] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 724.751362][T19314] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 724.766281][T19314] vivid-000: Enable Capture Cropping: true grabbed [ 724.774048][T19314] vivid-000: Enable Capture Composing: true grabbed [ 724.783258][ T5847] usb 9-1: Using ep0 maxpacket: 8 [ 724.790022][T19314] vivid-000: Enable Capture Scaler: [ 724.813840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 724.831059][T19314] true grabbed [ 724.834524][ T5847] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 724.834551][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.834570][ T5847] usb 9-1: Product: syz [ 724.834582][ T5847] usb 9-1: Manufacturer: syz [ 724.834596][ T5847] usb 9-1: SerialNumber: syz [ 724.836299][ T5847] usb 9-1: config 0 descriptor?? [ 724.870544][T19314] vivid-000: Timestamp Source: End of Frame [ 724.885816][T19314] vivid-000: Colorspace: SMPTE 170M [ 724.888951][ T5847] gspca_main: sq905-2.14.0 probing 2770:9120 [ 724.904149][T19314] [ 724.908362][T19314] vivid-000: Transfer Function: Default [ 724.925706][T19314] vivid-000: Y'CbCr Encoding: Default [ 724.932240][T19314] vivid-000: HSV Encoding: Hue 0-179 [ 724.943278][T19314] vivid-000: Quantization: Default [ 724.950881][T19314] vivid-000: Apply Alpha To Red Only: false [ 724.972388][T19314] vivid-000: Standard Aspect Ratio: 4x3 [ 724.984386][T19314] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 724.994141][T19314] vivid-000: DV Timings: 640x480p59 inactive [ 725.007246][T19314] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 725.019216][T19314] vivid-000: Maximum EDID Blocks: 2 [ 725.026868][T19314] vivid-000: Limited RGB Range (16-235): false [ 725.033415][T19314] vivid-000: Rx RGB Quantization Range: Automatic [ 725.060866][T19314] vivid-000: Power Present: 0x00000001 [ 725.063027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 725.074760][T19314] tpg source WxH: 720x576 (Y'CbCr) [ 725.079953][T19314] tpg field: 4 [ 725.083411][T19314] tpg crop: (0,0)/64x64 [ 725.088285][T19314] tpg compose: (0,0)/16x16 [ 725.100357][T19314] tpg colorspace: 1 [ 725.106255][T19314] tpg transfer function: 0/1 [ 725.111736][T19314] tpg Y'CbCr encoding: 0/1 [ 725.118576][T19314] tpg quantization: 0/2 [ 725.123396][T19314] tpg RGB range: 0/2 [ 725.128845][T19314] vivid-000: ================== END STATUS ================== [ 725.278762][T19330] block nbd6: Send control failed (result -22) [ 725.288601][T19330] block nbd6: Request send failed, requeueing [ 725.298369][ T124] block nbd6: Dead connection, failed to find a fallback [ 725.306482][ T124] block nbd6: shutting down sockets [ 725.347817][ T124] blk_print_req_error: 5 callbacks suppressed [ 725.347831][ T124] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 725.830356][ T5847] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 725.853045][ T5847] sq905 9-1:0.0: probe with driver sq905 failed with error -71 [ 725.873123][ T5847] usb 9-1: USB disconnect, device number 41 [ 726.126512][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 726.136325][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 726.154028][T19372] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 726.197207][T11377] libceph: connect (1)[c::]:6789 error -101 [ 726.203423][T11377] libceph: mon0 (1)[c::]:6789 connect error [ 726.438483][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 726.474906][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 726.478480][T11377] libceph: connect (1)[c::]:6789 error -101 [ 726.502260][T11377] libceph: mon0 (1)[c::]:6789 connect error [ 726.616959][T19385] syzkaller1: entered promiscuous mode [ 726.629500][T19385] syzkaller1: entered allmulticast mode [ 726.662944][T19383] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 726.935824][T19369] ceph: No mds server is up or the cluster is laggy [ 726.935901][T19373] ceph: No mds server is up or the cluster is laggy [ 727.006708][T11097] libceph: connect (1)[c::]:6789 error -101 [ 727.032296][T11097] libceph: mon0 (1)[c::]:6789 connect error [ 727.124398][ T1078] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 727.502977][T11097] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 727.692830][T11097] usb 9-1: Using ep0 maxpacket: 16 [ 727.776955][T11097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.806513][T11097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.821398][T11097] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 727.831038][T11097] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.844247][T11097] usb 9-1: config 0 descriptor?? [ 727.962967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 728.539463][ T30] kauditd_printk_skb: 318 callbacks suppressed [ 728.539475][ T30] audit: type=1400 audit(1241.505:17516): avc: denied { read write } for pid=11120 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 728.644945][ T30] audit: type=1400 audit(1241.505:17517): avc: denied { open } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 728.729731][ T30] audit: type=1400 audit(1241.505:17518): avc: denied { ioctl } for pid=11120 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 728.859277][T11097] hid-multitouch 0003:1FD2:6007.0065: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 728.883073][T11377] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 728.922906][ T30] audit: type=1400 audit(1241.595:17519): avc: denied { read write } for pid=19427 comm="syz.4.5814" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 729.003274][ T30] audit: type=1400 audit(1241.595:17520): avc: denied { open } for pid=19427 comm="syz.4.5814" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 729.075550][T11377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.101590][T11097] usb 9-1: USB disconnect, device number 42 [ 729.102846][T11377] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 729.147440][ T30] audit: type=1400 audit(1241.595:17521): avc: denied { create } for pid=19427 comm="syz.4.5814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.176078][T11377] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 729.185939][ T30] audit: type=1400 audit(1241.595:17522): avc: denied { write } for pid=19427 comm="syz.4.5814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.192995][T11377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 729.210954][ T30] audit: type=1400 audit(1241.595:17523): avc: denied { read write } for pid=19427 comm="syz.4.5814" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.246644][ T30] audit: type=1400 audit(1241.595:17524): avc: denied { open } for pid=19427 comm="syz.4.5814" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.271434][T11377] usb 5-1: SerialNumber: syz [ 729.274430][ T30] audit: type=1400 audit(1241.595:17525): avc: denied { ioctl } for pid=19427 comm="syz.4.5814" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.442874][ T5931] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 729.519163][T11377] usb 5-1: 0:2 : does not exist [ 729.543072][T11377] usb 5-1: USB disconnect, device number 52 [ 729.593009][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 729.602526][ T5931] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 729.620138][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.649864][ T5931] usb 2-1: Product: syz [ 729.654098][ T5931] usb 2-1: Manufacturer: syz [ 729.658689][ T5931] usb 2-1: SerialNumber: syz [ 729.670960][ T5931] usb 2-1: config 0 descriptor?? [ 729.689061][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 730.362989][T11377] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 730.523009][T11377] usb 5-1: Using ep0 maxpacket: 8 [ 730.534536][T11377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.564045][T11377] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 730.577691][T11377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 730.589357][T11377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 730.600982][T11377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 730.620352][T11377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 730.640483][T11377] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.676335][T11377] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 730.691300][T11377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.709717][T11377] usb 5-1: Product: syz [ 730.717156][T11377] usb 5-1: Manufacturer: syz [ 730.721810][T11377] usb 5-1: SerialNumber: syz [ 730.738522][T11377] usb 5-1: config 0 descriptor?? [ 730.747996][T19465] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 730.786646][T11377] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 730.800405][T11377] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 730.903719][ T5931] gspca_sonixj: reg_w1 err -71 [ 730.909567][ T5931] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 730.921764][ T5931] usb 2-1: USB disconnect, device number 56 [ 731.057359][T11377] usb 5-1: USB disconnect, device number 53 [ 731.850516][T19524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.862623][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5856'. [ 731.914033][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5856'. [ 732.064644][T19532] syz_tun: entered promiscuous mode [ 732.082207][T19532] batadv_slave_0: entered promiscuous mode [ 732.105203][T19532] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 732.118794][T19532] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.134017][T19532] hsr1: entered allmulticast mode [ 732.140682][T19532] syz_tun: entered allmulticast mode [ 732.150367][T19532] batadv_slave_0: entered allmulticast mode [ 732.610234][T19561] netlink: 'syz.0.5871': attribute type 30 has an invalid length. [ 733.052524][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5880'. [ 733.089928][T19583] netlink: 'syz.8.5881': attribute type 1 has an invalid length. [ 733.204492][T19583] bond2: entered promiscuous mode [ 733.210370][T19583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 733.293452][T19589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 733.300394][T19589] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 733.355781][T19589] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 733.371684][T19589] bond2: (slave vcan1): making interface the new active one [ 733.379475][T19589] vcan1: entered promiscuous mode [ 733.386443][T19589] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 733.492947][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5886'. [ 733.543055][ T30] kauditd_printk_skb: 446 callbacks suppressed [ 733.543072][ T30] audit: type=1400 audit(1246.515:17972): avc: denied { read write } for pid=11114 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.590519][ T30] audit: type=1400 audit(1246.515:17973): avc: denied { open } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.615211][ T30] audit: type=1400 audit(1246.515:17974): avc: denied { ioctl } for pid=11114 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.673615][ T30] audit: type=1400 audit(1246.515:17975): avc: denied { create } for pid=19600 comm="syz.1.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 733.708927][ T30] audit: type=1400 audit(1246.515:17976): avc: denied { getopt } for pid=19600 comm="syz.1.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 733.740454][ T30] audit: type=1400 audit(1246.545:17977): avc: denied { read write } for pid=11113 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.808177][ T30] audit: type=1400 audit(1246.545:17978): avc: denied { open } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.843692][T19614] veth0_to_bridge: entered promiscuous mode [ 733.855154][T19613] veth0_to_bridge: left promiscuous mode [ 733.927132][ T30] audit: type=1400 audit(1246.545:17979): avc: denied { ioctl } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.952347][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.971339][ T30] audit: type=1400 audit(1246.575:17980): avc: denied { read } for pid=19602 comm="syz.8.5888" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 734.083153][ T30] audit: type=1400 audit(1246.575:17981): avc: denied { read open } for pid=19602 comm="syz.8.5888" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 734.106268][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.157754][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.183129][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.212896][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.220717][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.236554][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.236777][T19627] overlay: filesystem on ./bus not supported [ 734.268962][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.286248][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.302615][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.326085][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.341514][ T5923] hid-generic 0006:0004:0009.0066: unknown main item tag 0x0 [ 734.387951][ T5923] hid-generic 0006:0004:0009.0066: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 734.455505][T19636] syzkaller1: entered promiscuous mode [ 734.470245][T19636] syzkaller1: entered allmulticast mode [ 734.633151][ T5932] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 734.794394][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 734.826796][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.847057][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.881436][ T5932] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 734.898379][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.914347][ T5932] usb 5-1: config 0 descriptor?? [ 734.925082][T11377] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 734.942886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 734.951291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 735.112922][ T5923] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 735.122882][T11377] usb 9-1: Using ep0 maxpacket: 16 [ 735.130123][T11377] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.148427][T11377] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.160274][T11377] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.177849][T11377] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.187652][T11377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.200095][T11377] usb 9-1: Product: syz [ 735.206414][T11377] usb 9-1: Manufacturer: syz [ 735.211048][T11377] usb 9-1: SerialNumber: syz [ 735.277106][ T5923] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 735.286436][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.296560][ T5923] usb 2-1: config 0 descriptor?? [ 735.361102][ T5932] savu 0003:1E7D:2D5A.0067: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 735.457388][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5917'. [ 735.556026][ T5932] usb 5-1: USB disconnect, device number 54 [ 735.637460][T11377] usb 9-1: 0:2 : does not exist [ 736.465666][T11377] usb 9-1: USB disconnect, device number 43 [ 736.529128][ T5923] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 736.541437][ T5923] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 736.566395][ T5923] asix 2-1:0.0: probe with driver asix failed with error -71 [ 736.576623][ T5923] usb 2-1: USB disconnect, device number 57 [ 737.489360][T19729] [ 737.491699][T19729] ===================================================== [ 737.498613][T19729] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 737.506050][T19729] syzkaller #0 Not tainted [ 737.510446][T19729] ----------------------------------------------------- [ 737.517354][T19729] syz.0.5944/19729 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 737.525055][T19729] ffff888073fc7600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 737.533751][T19729] [ 737.533751][T19729] and this task is already holding: [ 737.541098][T19729] ffff88802a550028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 737.550921][T19729] which would create a new lock dependency: [ 737.556790][T19729] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 737.564879][T19729] [ 737.564879][T19729] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 737.574308][T19729] (&dev->event_lock#2){..-.}-{3:3} [ 737.574339][T19729] [ 737.574339][T19729] ... which became SOFTIRQ-irq-safe at: [ 737.587194][T19729] lock_acquire+0x179/0x350 [ 737.591781][T19729] _raw_spin_lock_irqsave+0x3a/0x60 [ 737.597049][T19729] input_event+0x74/0xd0 [ 737.601376][T19729] hidinput_hid_event+0x1d65/0x2410 [ 737.606647][T19729] hid_process_event+0x4b7/0x5e0 [ 737.611654][T19729] hid_report_raw_event+0xa0a/0x1290 [ 737.617011][T19729] __hid_input_report.constprop.0+0x33f/0x450 [ 737.623151][T19729] hid_irq_in+0x35e/0x870 [ 737.627565][T19729] __usb_hcd_giveback_urb+0x38b/0x610 [ 737.633053][T19729] usb_hcd_giveback_urb+0x39b/0x450 [ 737.638347][T19729] dummy_timer+0x1814/0x3a30 [ 737.643015][T19729] __hrtimer_run_queues+0x1ff/0xad0 [ 737.648293][T19729] hrtimer_run_softirq+0x17d/0x350 [ 737.653483][T19729] handle_softirqs+0x216/0x8e0 [ 737.658322][T19729] __irq_exit_rcu+0x109/0x170 [ 737.663081][T19729] irq_exit_rcu+0x9/0x30 [ 737.667413][T19729] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 737.673129][T19729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.679184][T19729] lock_release+0x183/0x2f0 [ 737.683771][T19729] pfn_valid+0x26f/0x4d0 [ 737.688088][T19729] page_table_check_clear+0x21/0x740 [ 737.693448][T19729] __page_table_check_pte_clear+0xf1/0x100 [ 737.699332][T19729] unmap_page_range+0x24fc/0x42c0 [ 737.704433][T19729] unmap_single_vma.constprop.0+0x153/0x240 [ 737.710404][T19729] unmap_vmas+0x218/0x470 [ 737.714810][T19729] exit_mmap+0x1b9/0xb90 [ 737.719132][T19729] __mmput+0x12a/0x410 [ 737.723279][T19729] mmput+0x62/0x70 [ 737.727079][T19729] do_exit+0x7c7/0x2bf0 [ 737.731312][T19729] do_group_exit+0xd3/0x2a0 [ 737.735901][T19729] __x64_sys_exit_group+0x3e/0x50 [ 737.741005][T19729] x64_sys_call+0x14fa/0x1720 [ 737.745756][T19729] do_syscall_64+0xcd/0x4c0 [ 737.750340][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.756303][T19729] [ 737.756303][T19729] to a SOFTIRQ-irq-unsafe lock: [ 737.763304][T19729] (tasklist_lock){.+.+}-{3:3} [ 737.763335][T19729] [ 737.763335][T19729] ... which became SOFTIRQ-irq-unsafe at: [ 737.775926][T19729] ... [ 737.775933][T19729] lock_acquire+0x179/0x350 [ 737.783073][T19729] _raw_read_lock+0x5f/0x70 [ 737.787646][T19729] __do_wait+0x105/0x890 [ 737.791970][T19729] do_wait+0x21e/0x5a0 [ 737.796117][T19729] kernel_wait+0x9f/0x160 [ 737.800516][T19729] call_usermodehelper_exec_work+0xf1/0x170 [ 737.806483][T19729] process_one_work+0x9cf/0x1b70 [ 737.811494][T19729] worker_thread+0x6c8/0xf10 [ 737.816162][T19729] kthread+0x3c5/0x780 [ 737.820307][T19729] ret_from_fork+0x5d7/0x6f0 [ 737.824975][T19729] ret_from_fork_asm+0x1a/0x30 [ 737.829815][T19729] [ 737.829815][T19729] other info that might help us debug this: [ 737.829815][T19729] [ 737.840024][T19729] Chain exists of: [ 737.840024][T19729] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 737.840024][T19729] [ 737.853576][T19729] Possible interrupt unsafe locking scenario: [ 737.853576][T19729] [ 737.861877][T19729] CPU0 CPU1 [ 737.867225][T19729] ---- ---- [ 737.872573][T19729] lock(tasklist_lock); [ 737.876802][T19729] local_irq_disable(); [ 737.883541][T19729] lock(&dev->event_lock#2); [ 737.890729][T19729] lock(&client->buffer_lock); [ 737.898087][T19729] [ 737.901521][T19729] lock(&dev->event_lock#2); [ 737.906367][T19729] [ 737.906367][T19729] *** DEADLOCK *** [ 737.906367][T19729] [ 737.914490][T19729] 7 locks held by syz.0.5944/19729: [ 737.919667][T19729] #0: ffff888147b22118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 737.928803][T19729] #1: ffff88801f706230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 737.938897][T19729] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 737.948552][T19729] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 737.958121][T19729] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 737.967239][T19729] #5: ffff88802a550028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 737.977480][T19729] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 737.986507][T19729] [ 737.986507][T19729] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 737.996881][T19729] -> (&dev->event_lock#2){..-.}-{3:3} { [ 738.002506][T19729] IN-SOFTIRQ-W at: [ 738.006545][T19729] lock_acquire+0x179/0x350 [ 738.012854][T19729] _raw_spin_lock_irqsave+0x3a/0x60 [ 738.019852][T19729] input_event+0x74/0xd0 [ 738.025898][T19729] hidinput_hid_event+0x1d65/0x2410 [ 738.032897][T19729] hid_process_event+0x4b7/0x5e0 [ 738.039636][T19729] hid_report_raw_event+0xa0a/0x1290 [ 738.046721][T19729] __hid_input_report.constprop.0+0x33f/0x450 [ 738.054592][T19729] hid_irq_in+0x35e/0x870 [ 738.060728][T19729] __usb_hcd_giveback_urb+0x38b/0x610 [ 738.067904][T19729] usb_hcd_giveback_urb+0x39b/0x450 [ 738.074908][T19729] dummy_timer+0x1814/0x3a30 [ 738.081299][T19729] __hrtimer_run_queues+0x1ff/0xad0 [ 738.088303][T19729] hrtimer_run_softirq+0x17d/0x350 [ 738.095219][T19729] handle_softirqs+0x216/0x8e0 [ 738.101786][T19729] __irq_exit_rcu+0x109/0x170 [ 738.108264][T19729] irq_exit_rcu+0x9/0x30 [ 738.114309][T19729] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 738.121743][T19729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 738.129523][T19729] lock_release+0x183/0x2f0 [ 738.135833][T19729] pfn_valid+0x26f/0x4d0 [ 738.141872][T19729] page_table_check_clear+0x21/0x740 [ 738.148953][T19729] __page_table_check_pte_clear+0xf1/0x100 [ 738.156561][T19729] unmap_page_range+0x24fc/0x42c0 [ 738.163388][T19729] unmap_single_vma.constprop.0+0x153/0x240 [ 738.171083][T19729] unmap_vmas+0x218/0x470 [ 738.177214][T19729] exit_mmap+0x1b9/0xb90 [ 738.183260][T19729] __mmput+0x12a/0x410 [ 738.189132][T19729] mmput+0x62/0x70 [ 738.194654][T19729] do_exit+0x7c7/0x2bf0 [ 738.200612][T19729] do_group_exit+0xd3/0x2a0 [ 738.206920][T19729] __x64_sys_exit_group+0x3e/0x50 [ 738.213749][T19729] x64_sys_call+0x14fa/0x1720 [ 738.220227][T19729] do_syscall_64+0xcd/0x4c0 [ 738.226532][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.234224][T19729] INITIAL USE at: [ 738.238181][T19729] lock_acquire+0x179/0x350 [ 738.244400][T19729] _raw_spin_lock_irqsave+0x3a/0x60 [ 738.251307][T19729] input_inject_event+0x9f/0x3b0 [ 738.257964][T19729] led_set_brightness+0x217/0x290 [ 738.264704][T19729] kbd_led_trigger_activate+0xcb/0x110 [ 738.271873][T19729] led_trigger_set+0x59a/0xc50 [ 738.278352][T19729] led_trigger_set_default+0x1e0/0x2e0 [ 738.285529][T19729] led_classdev_register_ext+0x7b8/0xa10 [ 738.292879][T19729] input_leds_connect+0x552/0x8e0 [ 738.299614][T19729] input_attach_handler.isra.0+0x173/0x250 [ 738.307135][T19729] input_register_device+0xab9/0x1180 [ 738.314222][T19729] atkbd_connect+0x5f8/0xa40 [ 738.320521][T19729] serio_driver_probe+0x7f/0xd0 [ 738.327087][T19729] really_probe+0x241/0xa90 [ 738.333305][T19729] __driver_probe_device+0x1de/0x440 [ 738.340305][T19729] driver_probe_device+0x4c/0x1b0 [ 738.347046][T19729] __driver_attach+0x283/0x580 [ 738.353524][T19729] bus_for_each_dev+0x13e/0x1d0 [ 738.360091][T19729] serio_handle_event+0x335/0xc30 [ 738.366832][T19729] process_one_work+0x9cf/0x1b70 [ 738.373482][T19729] worker_thread+0x6c8/0xf10 [ 738.379785][T19729] kthread+0x3c5/0x780 [ 738.385567][T19729] ret_from_fork+0x5d7/0x6f0 [ 738.391866][T19729] ret_from_fork_asm+0x1a/0x30 [ 738.398350][T19729] } [ 738.400917][T19729] ... key at: [] __key.7+0x0/0x40 [ 738.408097][T19729] -> (&client->buffer_lock){....}-{3:3} { [ 738.413815][T19729] INITIAL USE at: [ 738.417686][T19729] lock_acquire+0x179/0x350 [ 738.423741][T19729] _raw_spin_lock+0x2e/0x40 [ 738.429793][T19729] evdev_pass_values+0x10e/0x9b0 [ 738.436274][T19729] evdev_events+0x1bb/0x390 [ 738.442321][T19729] input_pass_values+0x74b/0x880 [ 738.448803][T19729] input_handle_event+0xf00/0x14d0 [ 738.455458][T19729] input_inject_event+0x1e8/0x3b0 [ 738.462029][T19729] evdev_write+0x457/0x750 [ 738.468085][T19729] vfs_write+0x29d/0x11d0 [ 738.473957][T19729] ksys_write+0x1f8/0x250 [ 738.479829][T19729] do_syscall_64+0xcd/0x4c0 [ 738.485883][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.493316][T19729] } [ 738.495793][T19729] ... key at: [] __key.1+0x0/0x40 [ 738.502882][T19729] ... acquired at: [ 738.506657][T19729] _raw_spin_lock+0x2e/0x40 [ 738.511316][T19729] evdev_pass_values+0x10e/0x9b0 [ 738.516408][T19729] evdev_events+0x1bb/0x390 [ 738.521064][T19729] input_pass_values+0x74b/0x880 [ 738.526164][T19729] input_handle_event+0xf00/0x14d0 [ 738.531428][T19729] input_inject_event+0x1e8/0x3b0 [ 738.536608][T19729] evdev_write+0x457/0x750 [ 738.541180][T19729] vfs_write+0x29d/0x11d0 [ 738.545658][T19729] ksys_write+0x1f8/0x250 [ 738.550139][T19729] do_syscall_64+0xcd/0x4c0 [ 738.554795][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.560853][T19729] [ 738.563155][T19729] [ 738.563155][T19729] the dependencies between the lock to be acquired [ 738.563162][T19729] and SOFTIRQ-irq-unsafe lock: [ 738.576622][T19729] -> (tasklist_lock){.+.+}-{3:3} { [ 738.581896][T19729] HARDIRQ-ON-R at: [ 738.586031][T19729] lock_acquire+0x179/0x350 [ 738.592534][T19729] _raw_read_lock+0x5f/0x70 [ 738.599012][T19729] __do_wait+0x105/0x890 [ 738.605242][T19729] do_wait+0x21e/0x5a0 [ 738.611302][T19729] kernel_wait+0x9f/0x160 [ 738.617608][T19729] call_usermodehelper_exec_work+0xf1/0x170 [ 738.625479][T19729] process_one_work+0x9cf/0x1b70 [ 738.632392][T19729] worker_thread+0x6c8/0xf10 [ 738.638958][T19729] kthread+0x3c5/0x780 [ 738.645003][T19729] ret_from_fork+0x5d7/0x6f0 [ 738.651570][T19729] ret_from_fork_asm+0x1a/0x30 [ 738.658317][T19729] SOFTIRQ-ON-R at: [ 738.662461][T19729] lock_acquire+0x179/0x350 [ 738.668948][T19729] _raw_read_lock+0x5f/0x70 [ 738.675428][T19729] __do_wait+0x105/0x890 [ 738.681655][T19729] do_wait+0x21e/0x5a0 [ 738.687712][T19729] kernel_wait+0x9f/0x160 [ 738.694019][T19729] call_usermodehelper_exec_work+0xf1/0x170 [ 738.701889][T19729] process_one_work+0x9cf/0x1b70 [ 738.708802][T19729] worker_thread+0x6c8/0xf10 [ 738.715368][T19729] kthread+0x3c5/0x780 [ 738.721413][T19729] ret_from_fork+0x5d7/0x6f0 [ 738.727975][T19729] ret_from_fork_asm+0x1a/0x30 [ 738.734717][T19729] INITIAL USE at: [ 738.738761][T19729] lock_acquire+0x179/0x350 [ 738.745164][T19729] _raw_write_lock_irq+0x36/0x50 [ 738.751989][T19729] copy_process+0x4caf/0x7690 [ 738.758580][T19729] kernel_clone+0xfc/0x930 [ 738.764889][T19729] user_mode_thread+0xc7/0x110 [ 738.771546][T19729] rest_init+0x23/0x2b0 [ 738.777593][T19729] start_kernel+0x3ee/0x4d0 [ 738.783985][T19729] x86_64_start_reservations+0x18/0x30 [ 738.791333][T19729] x86_64_start_kernel+0x130/0x190 [ 738.798330][T19729] common_startup_64+0x13e/0x148 [ 738.805159][T19729] INITIAL READ USE at: [ 738.809634][T19729] lock_acquire+0x179/0x350 [ 738.816464][T19729] _raw_read_lock+0x5f/0x70 [ 738.823288][T19729] __do_wait+0x105/0x890 [ 738.829864][T19729] do_wait+0x21e/0x5a0 [ 738.836262][T19729] kernel_wait+0x9f/0x160 [ 738.842913][T19729] call_usermodehelper_exec_work+0xf1/0x170 [ 738.851130][T19729] process_one_work+0x9cf/0x1b70 [ 738.858390][T19729] worker_thread+0x6c8/0xf10 [ 738.865302][T19729] kthread+0x3c5/0x780 [ 738.871694][T19729] ret_from_fork+0x5d7/0x6f0 [ 738.878609][T19729] ret_from_fork_asm+0x1a/0x30 [ 738.885697][T19729] } [ 738.888347][T19729] ... key at: [] tasklist_lock+0x18/0x40 [ 738.896220][T19729] ... acquired at: [ 738.900172][T19729] _raw_read_lock+0x5f/0x70 [ 738.904823][T19729] send_sigio+0xb8/0x3e0 [ 738.909221][T19729] dnotify_handle_event+0x15e/0x2b0 [ 738.914574][T19729] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 738.921140][T19729] fsnotify+0x13d6/0x1dc0 [ 738.925619][T19729] vfs_mkdir+0x71d/0x8c0 [ 738.930008][T19729] do_mkdirat+0x304/0x3e0 [ 738.934489][T19729] __x64_sys_mkdirat+0x83/0xb0 [ 738.939416][T19729] do_syscall_64+0xcd/0x4c0 [ 738.944072][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.950128][T19729] [ 738.952428][T19729] -> (&f_owner->lock){....}-{3:3} { [ 738.957704][T19729] INITIAL USE at: [ 738.961658][T19729] lock_acquire+0x179/0x350 [ 738.967881][T19729] _raw_write_lock_irq+0x36/0x50 [ 738.974533][T19729] __f_setown+0x61/0x3c0 [ 738.980499][T19729] generic_setlease+0xeef/0x1300 [ 738.987149][T19729] kernel_setlease+0x106/0x140 [ 738.993626][T19729] vfs_setlease+0x258/0x2d0 [ 738.999843][T19729] fcntl_setlease+0x3ed/0x5a0 [ 739.006231][T19729] do_fcntl+0x751/0x15a0 [ 739.012191][T19729] __x64_sys_fcntl+0x163/0x200 [ 739.018673][T19729] do_syscall_64+0xcd/0x4c0 [ 739.024892][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.032499][T19729] INITIAL READ USE at: [ 739.036888][T19729] lock_acquire+0x179/0x350 [ 739.043547][T19729] _raw_read_lock_irq+0x67/0x80 [ 739.050543][T19729] do_fcntl+0x4d9/0x15a0 [ 739.056939][T19729] __x64_sys_fcntl+0x163/0x200 [ 739.063857][T19729] do_syscall_64+0xcd/0x4c0 [ 739.070507][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.078548][T19729] } [ 739.081107][T19729] ... key at: [] __key.1+0x0/0x40 [ 739.088283][T19729] ... acquired at: [ 739.092149][T19729] _raw_read_lock_irqsave+0x74/0x90 [ 739.097498][T19729] send_sigio+0x31/0x3e0 [ 739.101895][T19729] kill_fasync+0x214/0x510 [ 739.106465][T19729] lease_break_callback+0x23/0x30 [ 739.111643][T19729] __break_lease+0x674/0x1810 [ 739.116470][T19729] do_dentry_open+0x91f/0x1530 [ 739.121384][T19729] vfs_open+0x82/0x3f0 [ 739.125604][T19729] path_openat+0x1de4/0x2cb0 [ 739.130346][T19729] do_filp_open+0x20b/0x470 [ 739.134998][T19729] do_sys_openat2+0x11b/0x1d0 [ 739.139829][T19729] __x64_sys_open+0x153/0x1e0 [ 739.144658][T19729] do_syscall_64+0xcd/0x4c0 [ 739.149316][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.155359][T19729] [ 739.157656][T19729] -> (&new->fa_lock){....}-{3:3} { [ 739.162753][T19729] INITIAL USE at: [ 739.166638][T19729] lock_acquire+0x179/0x350 [ 739.172688][T19729] _raw_write_lock_irq+0x36/0x50 [ 739.179164][T19729] fasync_remove_entry+0xb2/0x1e0 [ 739.185733][T19729] fasync_helper+0xaf/0xd0 [ 739.191690][T19729] lease_modify+0x232/0x500 [ 739.197729][T19729] locks_remove_file+0x29e/0x5c0 [ 739.204204][T19729] __fput+0x351/0xb70 [ 739.209729][T19729] task_work_run+0x14d/0x240 [ 739.215858][T19729] exit_to_user_mode_loop+0xeb/0x110 [ 739.222680][T19729] do_syscall_64+0x3f6/0x4c0 [ 739.228811][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.236240][T19729] INITIAL READ USE at: [ 739.240540][T19729] lock_acquire+0x179/0x350 [ 739.247023][T19729] _raw_read_lock_irqsave+0x74/0x90 [ 739.254193][T19729] kill_fasync+0x138/0x510 [ 739.260587][T19729] sock_wake_async+0x132/0x160 [ 739.267324][T19729] sk_wake_async+0x102/0x2e0 [ 739.273888][T19729] tcp_rcv_state_process+0x192e/0x4ec0 [ 739.281324][T19729] tcp_v4_do_rcv+0x1ad/0xa90 [ 739.287890][T19729] __release_sock+0x31b/0x400 [ 739.294541][T19729] release_sock+0x5a/0x220 [ 739.300927][T19729] __inet_stream_connect+0x65a/0xf60 [ 739.308192][T19729] tcp_sendmsg_fastopen+0x3ed/0x750 [ 739.315371][T19729] tcp_sendmsg_locked+0x23ff/0x42a0 [ 739.322546][T19729] tcp_sendmsg+0x2e/0x50 [ 739.328767][T19729] inet_sendmsg+0xb9/0x140 [ 739.335162][T19729] ____sys_sendmsg+0x973/0xc70 [ 739.341902][T19729] ___sys_sendmsg+0x134/0x1d0 [ 739.348549][T19729] __sys_sendmsg+0x16d/0x220 [ 739.355110][T19729] do_syscall_64+0xcd/0x4c0 [ 739.361587][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.369451][T19729] } [ 739.371928][T19729] ... key at: [] __key.0+0x0/0x40 [ 739.379015][T19729] ... acquired at: [ 739.382790][T19729] lock_acquire+0x179/0x350 [ 739.387448][T19729] _raw_read_lock_irqsave+0x74/0x90 [ 739.392796][T19729] kill_fasync+0x138/0x510 [ 739.397366][T19729] evdev_pass_values+0x619/0x9b0 [ 739.402456][T19729] evdev_events+0x1bb/0x390 [ 739.407111][T19729] input_pass_values+0x74b/0x880 [ 739.412203][T19729] input_handle_event+0xf00/0x14d0 [ 739.417467][T19729] input_inject_event+0x1e8/0x3b0 [ 739.422647][T19729] evdev_write+0x457/0x750 [ 739.427214][T19729] vfs_write+0x29d/0x11d0 [ 739.431691][T19729] ksys_write+0x1f8/0x250 [ 739.436170][T19729] do_syscall_64+0xcd/0x4c0 [ 739.440824][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.446869][T19729] [ 739.449169][T19729] [ 739.449169][T19729] stack backtrace: [ 739.455032][T19729] CPU: 1 UID: 0 PID: 19729 Comm: syz.0.5944 Not tainted syzkaller #0 PREEMPT(full) [ 739.455051][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.455061][T19729] Call Trace: [ 739.455066][T19729] [ 739.455071][T19729] dump_stack_lvl+0x116/0x1f0 [ 739.455088][T19729] check_irq_usage+0x7dc/0x920 [ 739.455109][T19729] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 739.455130][T19729] ? check_path.constprop.0+0x24/0x50 [ 739.455152][T19729] ? __lock_acquire+0x12bc/0x1ce0 [ 739.455173][T19729] __lock_acquire+0x12bc/0x1ce0 [ 739.455197][T19729] lock_acquire+0x179/0x350 [ 739.455218][T19729] ? kill_fasync+0x138/0x510 [ 739.455239][T19729] _raw_read_lock_irqsave+0x74/0x90 [ 739.455253][T19729] ? kill_fasync+0x138/0x510 [ 739.455272][T19729] kill_fasync+0x138/0x510 [ 739.455292][T19729] evdev_pass_values+0x619/0x9b0 [ 739.455318][T19729] evdev_events+0x1bb/0x390 [ 739.455338][T19729] input_pass_values+0x74b/0x880 [ 739.455358][T19729] input_handle_event+0xf00/0x14d0 [ 739.455378][T19729] ? _copy_from_user+0x59/0xd0 [ 739.455398][T19729] input_inject_event+0x1e8/0x3b0 [ 739.455419][T19729] evdev_write+0x457/0x750 [ 739.455439][T19729] ? __pfx_evdev_write+0x10/0x10 [ 739.455460][T19729] ? bpf_lsm_file_permission+0x9/0x10 [ 739.455479][T19729] ? security_file_permission+0x71/0x210 [ 739.455501][T19729] ? rw_verify_area+0xcf/0x6c0 [ 739.455522][T19729] ? __pfx_evdev_write+0x10/0x10 [ 739.455541][T19729] vfs_write+0x29d/0x11d0 [ 739.455557][T19729] ? __pfx_vfs_write+0x10/0x10 [ 739.455570][T19729] ? find_held_lock+0x2b/0x80 [ 739.455586][T19729] ? __fget_files+0x204/0x3c0 [ 739.455603][T19729] ? __fget_files+0x20e/0x3c0 [ 739.455620][T19729] ksys_write+0x1f8/0x250 [ 739.455633][T19729] ? __pfx_ksys_write+0x10/0x10 [ 739.455650][T19729] do_syscall_64+0xcd/0x4c0 [ 739.455666][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.455680][T19729] RIP: 0033:0x7ffa6338ebe9 [ 739.455693][T19729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.455706][T19729] RSP: 002b:00007ffa6412c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.455720][T19729] RAX: ffffffffffffffda RBX: 00007ffa635c5fa0 RCX: 00007ffa6338ebe9 [ 739.455729][T19729] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 739.455738][T19729] RBP: 00007ffa63411e19 R08: 0000000000000000 R09: 0000000000000000 [ 739.455746][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.455755][T19729] R13: 00007ffa635c6038 R14: 00007ffa635c5fa0 R15: 00007ffe3005a9e8 [ 739.455769][T19729] [ 739.472163][ T30] kauditd_printk_skb: 377 callbacks suppressed [ 739.472176][ T30] audit: type=1400 audit(1252.425:18359): avc: denied { read write } for pid=19725 comm="syz.8.5942" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 739.745048][ T30] audit: type=1400 audit(1252.425:18360): avc: denied { open } for pid=19725 comm="syz.8.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 739.768296][ T30] audit: type=1400 audit(1252.425:18361): avc: denied { ioctl } for pid=19725 comm="syz.8.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 739.793886][ T30] audit: type=1400 audit(1252.455:18362): avc: denied { read } for pid=19726 comm="syz.1.5943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 739.814477][ T30] audit: type=1400 audit(1252.475:18363): avc: denied { read write } for pid=11113 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.838985][ T30] audit: type=1400 audit(1252.475:18364): avc: denied { read write open } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.863785][ T30] audit: type=1400 audit(1252.475:18365): avc: denied { ioctl } for pid=11113 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.889193][ T5932] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 739.889936][ T30] audit: type=1400 audit(1252.715:18366): avc: denied { ioctl } for pid=19725 comm="syz.8.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 739.923014][ T30] audit: type=1400 audit(1252.785:18367): avc: denied { ioctl } for pid=19725 comm="syz.8.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.074279][ T5932] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 740.084081][ T5932] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 740.095426][ T5932] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 740.104498][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.112449][ T5932] usb 9-1: Product: syz [ 740.116628][ T5932] usb 9-1: Manufacturer: syz [ 740.121307][ T5932] usb 9-1: SerialNumber: syz [ 740.126571][ T5932] usb 9-1: config 0 descriptor?? [ 740.131939][T19730] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 740.139246][T19730] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 740.275704][ T30] audit: type=1400 audit(1253.245:18368): avc: denied { read write } for pid=13179 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 740.353134][T19730] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 740.360355][T19730] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 741.376329][ T5932] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 741.386844][ T5932] dm9601 9-1:0.0 eth4: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 741.400559][ T5932] usb 9-1: USB disconnect, device number 44 [ 741.406813][ T5932] dm9601 9-1:0.0 eth4: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 746.766291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22