last executing test programs: 2.480197609s ago: executing program 2 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.419664729s ago: executing program 2 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.761253629s ago: executing program 2 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.760815442s ago: executing program 2 (id=1334): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0xf5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 1.589614372s ago: executing program 1 (id=1339): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06050f08"], 0x9) 1.050975998s ago: executing program 0 (id=1348): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x8, 0xffffffffffffffff}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.050716331s ago: executing program 0 (id=1349): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000413, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x9, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.050572363s ago: executing program 1 (id=1350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x2d9}}}}}}, 0x0) 971.157336ms ago: executing program 1 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 970.811716ms ago: executing program 0 (id=1352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 900.815849ms ago: executing program 1 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 900.427141ms ago: executing program 1 (id=1354): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x88001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x0, 0x420, 0x330, 0x190, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'sit0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x94, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) lstat(&(0x7f0000008640)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000008cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)={0x90, 0x0, 0x100000000, {0x1, 0x2, 0xd, 0x3, 0x9, 0x23b, {0x0, 0x0, 0x81, 0x8, 0xd, 0x0, 0x8, 0x10001, 0xc90, 0x1000, 0x8, 0x0, r3, 0x634, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 841.460368ms ago: executing program 1 (id=1355): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) 600.57819ms ago: executing program 3 (id=1356): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95b, 0x1, 0x8, 0x7fffffff, 0x2, 0xa, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x4, 0x24, 0x9, 0x1, 0x5, 0xffffffff, 0x8, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x5, 0x0, 0x0, 0x80008071, 0x7, 0x1a, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x3, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x964a, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x3, 0x2f, 0x10, 0x315, 0xd, 0xea2, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x80, 0x6, 0x0, 0xff, 0x3, 0x1000005, 0x5f31, 0xd, 0x5, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x8, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x14a, 0xa5, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4000057, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x85, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe6, 0x6, 0x19, 0xfffffffe, 0x80000003, 0x6, 0x0, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0xfffffffc, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x8, 0xfff]}, 0x45c) write$char_usb(r0, 0x0, 0x0) 531.476813ms ago: executing program 2 (id=1357): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 356.017128ms ago: executing program 3 (id=1358): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x8, 0xffffffffffffffff}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 291.499611ms ago: executing program 3 (id=1359): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044050563ac1414bb000000060000000014"], 0x38}, 0x140) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20804}, 0x44800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 291.353779ms ago: executing program 2 (id=1360): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 87.499293ms ago: executing program 3 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) 87.255728ms ago: executing program 0 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 87.010496ms ago: executing program 3 (id=1363): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r7, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 86.41486ms ago: executing program 0 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="cdb66253e040ff08ce008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000060066008e8800003a00330020"], 0x6c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) 257.554µs ago: executing program 3 (id=1365): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 0s ago: executing program 0 (id=1366): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95b, 0x1, 0x8, 0x7fffffff, 0x2, 0xa, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x4, 0x24, 0x9, 0x1, 0x5, 0xffffffff, 0x8, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x5, 0x0, 0x0, 0x80008071, 0x7, 0x1a, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x3, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x964a, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x3, 0x2f, 0x10, 0x315, 0xd, 0xea2, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x80, 0x6, 0x0, 0xff, 0x3, 0x1000005, 0x5f31, 0xd, 0x5, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x8, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x14a, 0xa5, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4000057, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x85, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe6, 0x6, 0x19, 0xfffffffe, 0x80000003, 0x6, 0x0, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0xfffffffc, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x8, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040), 0x0) 0s ago: executing program 0 (id=1367): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x32, 0x31, 0x34, 0x35, 0x61, 0x0, 0x57, 0x66, 0x66, 0x30, 0x30, 0x64, 0x36, 0x62, 0x31]}, &(0x7f0000000240)={0x0, "e38814723ab798ccb9bee0eeec135f61124ca30f9a252addb94c317d54c8829051fe40036d1ae2e45a393a1c96b82e06bb81022ab8843b3704b174780081d3cd", 0x14}, 0x48, 0xfffffffffffffffa) keyctl$setperm(0x5, r1, 0x29260208) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='6', 0x1) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) kernel console output (not intermixed with test programs): rt 6081 - 0 [ 51.717502][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717525][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717548][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717571][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717594][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717618][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.738616][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.738633][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.784643][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.784662][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.785520][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.785532][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.110031][ T5898] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 52.111025][ T5898] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 52.154151][ T5901] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.517563][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.517883][ T5915] netlink: 136 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.856803][ T67] Bluetooth: hci0: command tx timeout [ 52.856840][ T67] Bluetooth: hci3: command tx timeout [ 52.856901][ T5745] Bluetooth: hci2: command tx timeout [ 52.856910][ T5091] Bluetooth: hci1: command tx timeout [ 52.976886][ T1042] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.141155][ T1042] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 53.146350][ T1042] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.146366][ T1042] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.146389][ T1042] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.146402][ T1042] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 53.148635][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.148649][ T1042] usb 6-1: Product: syz [ 53.148656][ T1042] usb 6-1: Manufacturer: syz [ 53.148663][ T1042] usb 6-1: SerialNumber: syz [ 53.675752][ T1042] usb 6-1: cannot find UAC_HEADER [ 53.739431][ T1042] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 53.745835][ T1042] usb 6-1: USB disconnect, device number 2 [ 53.788642][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 53.982038][ T5929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.983113][ T5929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.045892][ T5929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.080606][ T5929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.082160][ T5929] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.106714][ T5929] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.131157][ T5929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.131945][ T5929] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.153718][ T5929] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.179123][ T5929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.180177][ T5929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.209695][ T5929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.458454][ T44] kauditd_printk_skb: 60 callbacks suppressed [ 54.458505][ T44] audit: type=1400 audit(1790280053.988:228): avc: denied { mount } for pid=5939 comm="syz.2.18" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.467446][ T5942] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 54.468188][ T5942] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 54.470410][ T44] audit: type=1400 audit(1790280053.988:229): avc: denied { mounton } for pid=5939 comm="syz.2.18" path="/2/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.927497][ T44] audit: type=1400 audit(1790280054.458:230): avc: denied { create } for pid=5947 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.930001][ T44] audit: type=1400 audit(1790280054.458:231): avc: denied { ioctl } for pid=5947 comm="syz.0.21" path="socket:[8757]" dev="sockfs" ino=8757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.931068][ T44] audit: type=1400 audit(1790280054.458:232): avc: denied { bind } for pid=5947 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.932962][ T44] audit: type=1400 audit(1790280054.458:233): avc: denied { setopt } for pid=5947 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.934089][ T44] audit: type=1400 audit(1790280054.458:234): avc: denied { write } for pid=5947 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.935399][ T44] audit: type=1400 audit(1790280054.458:235): avc: denied { read } for pid=5947 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.992474][ T44] audit: type=1400 audit(1790280054.518:236): avc: denied { create } for pid=5949 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.114587][ T44] audit: type=1400 audit(1790280054.638:237): avc: denied { create } for pid=5953 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.116992][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 55.667735][ T5981] 9p: Bad value for 'rfdno' [ 55.746588][ T5740] Bluetooth: hci1: command 0x0419 tx timeout [ 55.788225][ T5983] overlayfs: missing 'lowerdir' [ 55.903054][ T5987] ======================================================= [ 55.903054][ T5987] WARNING: The mand mount option has been deprecated and [ 55.903054][ T5987] and is ignored by this kernel. Remove the mand [ 55.903054][ T5987] option from the mount to silence this warning. [ 55.903054][ T5987] ======================================================= [ 55.934217][ T5987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.137414][ T5740] Bluetooth: hci2: command 0x0419 tx timeout [ 56.137455][ T5740] Bluetooth: hci0: command 0x0419 tx timeout [ 56.216996][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 56.626936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.532050][ T6009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 57.588220][ T6011] netlink: 56 bytes leftover after parsing attributes in process `syz.0.43'. [ 57.816573][ T5091] Bluetooth: hci1: command 0x0419 tx timeout [ 58.217233][ T5740] Bluetooth: hci2: command 0x0419 tx timeout [ 58.217330][ T5091] Bluetooth: hci0: command 0x0419 tx timeout [ 58.307091][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 58.618992][ T6032] process 'syz.1.49' launched './file0' with NULL argv: empty string added [ 59.305882][ T6058] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 59.312237][ T6058] pci 0000:00:00.0: Adding to iommu group 0 [ 59.684993][ T6054] nvme_fabrics: missing parameter 'transport=%s' [ 59.685011][ T6054] nvme_fabrics: missing parameter 'nqn=%s' [ 59.709355][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 59.709376][ T44] audit: type=1400 audit(1790280059.238:270): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.823570][ T44] audit: type=1400 audit(1790280059.348:271): avc: denied { create } for pid=6059 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.824062][ T44] audit: type=1400 audit(1790280059.348:272): avc: denied { bind } for pid=6059 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.907569][ T5091] Bluetooth: hci1: command 0x0419 tx timeout [ 59.922559][ T44] audit: type=1400 audit(1790280059.448:273): avc: denied { setopt } for pid=6062 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.927204][ T44] audit: type=1400 audit(1790280059.448:274): avc: denied { bind } for pid=6062 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.927236][ T44] audit: type=1400 audit(1790280059.448:275): avc: denied { write } for pid=6062 comm="syz.3.59" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.927256][ T44] audit: type=1400 audit(1790280059.448:276): avc: denied { connect } for pid=6062 comm="syz.3.59" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.126622][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.178477][ T44] audit: type=1400 audit(1790280059.708:277): avc: denied { read write } for pid=6072 comm="syz.2.62" name="vbi0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.178961][ T44] audit: type=1400 audit(1790280059.708:278): avc: denied { open } for pid=6072 comm="syz.2.62" path="/dev/vbi0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.180543][ T44] audit: type=1400 audit(1790280059.708:279): avc: denied { ioctl } for pid=6072 comm="syz.2.62" path="/dev/vbi0" dev="devtmpfs" ino=974 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.306631][ T5740] Bluetooth: hci2: command 0x0419 tx timeout [ 60.309477][ T5091] Bluetooth: hci0: command 0x0419 tx timeout [ 60.377020][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 60.696541][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 60.697284][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 60.697820][ T9] usb 6-1: config 0 has no interfaces? [ 60.701190][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.701249][ T9] usb 6-1: Product: syz [ 60.701262][ T9] usb 6-1: Manufacturer: syz [ 60.701274][ T9] usb 6-1: SerialNumber: syz [ 60.704795][ T9] usb 6-1: config 0 descriptor?? [ 60.925014][ T65] usb 6-1: USB disconnect, device number 3 [ 61.042559][ T6100] FAULT_INJECTION: forcing a failure. [ 61.042559][ T6100] name failslab, interval 1, probability 0, space 0, times 1 [ 61.042589][ T6100] CPU: 1 UID: 0 PID: 6100 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 61.042610][ T6100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.042620][ T6100] Call Trace: [ 61.042626][ T6100] [ 61.042633][ T6100] dump_stack_lvl+0x100/0x190 [ 61.042663][ T6100] should_fail_ex.cold+0x5/0xa [ 61.042691][ T6100] should_failslab+0xc2/0x120 [ 61.042713][ T6100] __kmalloc_node_noprof+0xff/0x880 [ 61.042734][ T6100] ? load_msg+0x43/0x4a0 [ 61.042761][ T6100] load_msg+0x43/0x4a0 [ 61.042787][ T6100] do_msgsnd+0x1ad/0x1790 [ 61.042813][ T6100] ? posix_cpu_clock_get+0x39/0x340 [ 61.042835][ T6100] ? __pfx_do_msgsnd+0x10/0x10 [ 61.042859][ T6100] ? find_held_lock+0x2b/0x80 [ 61.042883][ T6100] ? __might_fault+0xc5/0x140 [ 61.042911][ T6100] ? __might_fault+0xc5/0x140 [ 61.042942][ T6100] ? __x64_sys_msgsnd+0xe5/0x130 [ 61.042965][ T6100] __x64_sys_msgsnd+0xe5/0x130 [ 61.042992][ T6100] do_syscall_64+0x123/0x790 [ 61.043021][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.043039][ T6100] RIP: 0033:0x7f861fb9e159 [ 61.043055][ T6100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.043070][ T6100] RSP: 002b:00007f8620992028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 61.043088][ T6100] RAX: ffffffffffffffda RBX: 00007f861fe25fa0 RCX: 00007f861fb9e159 [ 61.043101][ T6100] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 0000000000000000 [ 61.043112][ T6100] RBP: 00007f861fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.043122][ T6100] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 61.043132][ T6100] R13: 00007f861fe26038 R14: 00007f861fe25fa0 R15: 00007fff6effeaa8 [ 61.043155][ T6100] [ 61.112320][ T6101] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 61.119378][ T6101] pci 0000:00:00.0: Adding to iommu group 0 [ 61.284608][ T6106] Illegal XDP return value 1245970468 on prog (id 4) dev syz_tun, expect packet loss! [ 61.976558][ T5091] Bluetooth: hci1: command 0x0419 tx timeout [ 62.386622][ T5091] Bluetooth: hci0: command 0x0419 tx timeout [ 62.386660][ T5091] Bluetooth: hci2: command 0x0419 tx timeout [ 62.456545][ T5740] Bluetooth: hci3: command 0x0419 tx timeout [ 63.416584][ T2333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.426781][ T25] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 63.573752][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 63.579443][ T25] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.580563][ T25] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.580581][ T25] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.580599][ T25] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.580635][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.580653][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 63.580674][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.580708][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.582865][ T25] usb 8-1: config 0 descriptor?? [ 63.585554][ T2333] usb 7-1: unable to get BOS descriptor or descriptor too short [ 63.585578][ T2333] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 63.585595][ T2333] usb 7-1: no configurations [ 63.585601][ T2333] usb 7-1: can't read configurations, error -22 [ 63.587227][ T6160] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.796385][ T25] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.824661][ C2] usblp0: nonzero read bulk status received: -71 [ 63.825719][ T6160] usblp0: error -71 reading from printer [ 63.826593][ C2] usblp0: nonzero read bulk status received: -71 [ 63.828689][ T1667] usb 8-1: USB disconnect, device number 2 [ 63.835072][ T1667] usblp0: removed [ 64.681794][ T6183] Bluetooth: MGMT ver 1.23 [ 64.689364][ T6183] Cannot find add_set index 0 as target [ 65.117842][ T6195] Bluetooth: ISO socket layer initialized [ 65.386597][ T44] kauditd_printk_skb: 52 callbacks suppressed [ 65.386618][ T44] audit: type=1400 audit(1790280064.608:332): avc: denied { create } for pid=6197 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.386878][ T44] audit: type=1400 audit(1790280064.618:333): avc: denied { read write } for pid=6197 comm="syz.3.106" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.387026][ T44] audit: type=1400 audit(1790280064.618:334): avc: denied { open } for pid=6197 comm="syz.3.106" path="/36/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.387124][ T44] audit: type=1400 audit(1790280064.618:335): avc: denied { ioctl } for pid=6197 comm="syz.3.106" path="/36/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.387209][ T44] audit: type=1326 audit(1790280064.668:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.106" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f861fb9e159 code=0x0 [ 67.157148][ T44] audit: type=1400 audit(1790280066.688:337): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.269727][ T44] audit: type=1400 audit(1790280067.798:338): avc: denied { create } for pid=6250 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.270768][ T44] audit: type=1400 audit(1790280067.798:339): avc: denied { listen } for pid=6250 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.366752][ T1667] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.540058][ T1667] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 68.541070][ T1667] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.543112][ T1667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.543132][ T1667] usb 5-1: Product: syz [ 68.543143][ T1667] usb 5-1: Manufacturer: syz [ 68.543155][ T1667] usb 5-1: SerialNumber: syz [ 68.656633][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.807077][ T35] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.811574][ T35] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.811611][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.811633][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.811650][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.812727][ T35] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.812743][ T35] usb 8-1: Manufacturer: syz [ 68.818003][ T35] usb 8-1: config 0 descriptor?? [ 68.972348][ T6262] syzkaller0: entered promiscuous mode [ 68.972368][ T6262] syzkaller0: entered allmulticast mode [ 68.976941][ T6262] tipc: Started in network mode [ 68.976964][ T6262] tipc: Node identity 62bdf05c88cd, cluster identity 4711 [ 68.977696][ T6262] tipc: Enabled bearer , priority 0 [ 68.979917][ T6261] tipc: Resetting bearer [ 69.000273][ T6261] tipc: Disabling bearer [ 69.209337][ T1667] speedtch 5-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 69.282036][ T35] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 69.302194][ T35] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 69.416880][ T1667] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 69.620689][ T1667] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 69.621302][ T1667] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 69.621327][ T1667] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 69.622705][ T1667] usb 5-1: USB disconnect, device number 2 [ 69.696972][ T44] audit: type=1400 audit(1790280069.228:340): avc: denied { setopt } for pid=6286 comm="syz.1.139" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.698298][ T6287] ip_tables: iptables: counters copy to user failed while replacing table [ 69.795743][ T44] audit: type=1400 audit(1790280069.318:341): avc: denied { create } for pid=6288 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.412149][ T1667] usb 8-1: USB disconnect, device number 3 [ 71.499455][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.499506][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.891146][ T1667] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 72.048536][ T1667] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 72.052380][ T1667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.054788][ T1667] usb 8-1: Product: syz [ 72.054801][ T1667] usb 8-1: Manufacturer: syz [ 72.054809][ T1667] usb 8-1: SerialNumber: syz [ 72.474909][ T1667] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 72.956841][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.108712][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.108740][ T30] usb 7-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 73.112944][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.112966][ T30] usb 7-1: Product: syz [ 73.112978][ T30] usb 7-1: Manufacturer: syz [ 73.112989][ T30] usb 7-1: SerialNumber: syz [ 73.330947][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.164'. [ 73.340354][ T30] keyspan 7-1:1.0: Keyspan - (without firmware) converter detected [ 73.343368][ T30] usb 7-1: USB disconnect, device number 4 [ 73.343828][ T30] keyspan 7-1:1.0: device disconnected [ 74.185412][ T9] usb 8-1: USB disconnect, device number 4 [ 74.200164][ T9] usblp0: removed [ 74.318926][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 74.318944][ T44] audit: type=1400 audit(1790280073.848:344): avc: denied { read write } for pid=6372 comm="syz.3.171" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.319293][ T44] audit: type=1400 audit(1790280073.848:345): avc: denied { open } for pid=6372 comm="syz.3.171" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.430588][ T44] audit: type=1400 audit(1790280073.958:346): avc: denied { write } for pid=6374 comm="syz.1.172" path="socket:[13469]" dev="sockfs" ino=13469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.517544][ T44] audit: type=1400 audit(1790280075.038:347): avc: denied { listen } for pid=6391 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.517716][ T44] audit: type=1400 audit(1790280075.038:348): avc: denied { accept } for pid=6391 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.951786][ T6399] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 75.962350][ T6399] pci 0000:00:00.0: Adding to iommu group 0 [ 76.486455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.822263][ T1043] cfg80211: failed to load regulatory.db [ 78.046879][ T6465] Zero length message leads to an empty skb [ 78.297549][ T6472] Failed to get privilege flags for destination (handle=0x2:0x0) [ 78.311258][ T44] audit: type=1400 audit(1790280077.808:349): avc: denied { mount } for pid=6463 comm="syz.0.207" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.724680][ T44] audit: type=1400 audit(1790280081.248:350): avc: denied { ioctl } for pid=6593 comm="syz.0.262" path="socket:[13736]" dev="sockfs" ino=13736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.984873][ T44] audit: type=1400 audit(1790280081.508:351): avc: denied { ioctl } for pid=6593 comm="syz.0.262" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.936006][ T6635] kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xeebc [ 82.941260][ T6635] kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4720 [ 82.949413][ T6635] kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x979f [ 82.954346][ T6635] kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x18d6 [ 83.132117][ T6635] kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb208 [ 83.166682][ T6635] kvm_intel: kvm [6634]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x26d3 [ 84.344205][ T6686] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 84.701974][ T6693] kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xeebc [ 84.706539][ T6693] kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4720 [ 84.713768][ T6693] kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x979f [ 84.719702][ T6693] kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x18d6 [ 84.737562][ T6693] kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb208 [ 84.742831][ T6693] kvm_intel: kvm [6691]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x26d3 [ 85.005048][ T6710] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 85.107231][ T6715] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 85.115934][ T6715] pci 0000:00:00.0: Adding to iommu group 0 [ 85.889685][ T6735] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 86.286703][ T6744] kvm_intel: kvm [6743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x26d3 [ 86.868771][ T6766] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 87.380664][ T44] audit: type=1400 audit(1790280086.908:352): avc: denied { write } for pid=6788 comm="syz.0.340" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.383044][ T44] audit: type=1400 audit(1790280086.908:353): avc: denied { ioctl } for pid=6788 comm="syz.0.340" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.385860][ T44] audit: type=1400 audit(1790280086.908:354): avc: denied { set_context_mgr } for pid=6788 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.386861][ T6791] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 87.388151][ T6789] binder: 6788:6789 ioctl c0306201 200000000080 returned -14 [ 87.390557][ T44] audit: type=1400 audit(1790280086.918:355): avc: denied { map } for pid=6788 comm="syz.0.340" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.392584][ T44] audit: type=1400 audit(1790280086.918:356): avc: denied { call } for pid=6788 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.964183][ T6817] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 88.071074][ T44] audit: type=1400 audit(1790280087.598:357): avc: denied { watch watch_reads } for pid=6818 comm="syz.2.352" path="/78" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.075691][ T6822] FAULT_INJECTION: forcing a failure. [ 88.075691][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 88.075712][ T6822] CPU: 2 UID: 0 PID: 6822 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 88.075725][ T6822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.075731][ T6822] Call Trace: [ 88.075736][ T6822] [ 88.075741][ T6822] dump_stack_lvl+0x100/0x190 [ 88.075774][ T6822] should_fail_ex.cold+0x5/0xa [ 88.075790][ T6822] should_failslab+0xc2/0x120 [ 88.075809][ T6822] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 88.075823][ T6822] ? sock_alloc_inode+0x26/0x2c0 [ 88.075845][ T6822] ? __pfx_sock_alloc_inode+0x10/0x10 [ 88.075864][ T6822] sock_alloc_inode+0x26/0x2c0 [ 88.075881][ T6822] ? __pfx_sock_alloc_inode+0x10/0x10 [ 88.075896][ T6822] alloc_inode+0x68/0x250 [ 88.075907][ T6822] sock_alloc+0x44/0x280 [ 88.075921][ T6822] ? security_socket_create+0x7f/0x250 [ 88.075934][ T6822] __sock_create+0xc2/0x860 [ 88.075947][ T6822] __sys_socket+0x14d/0x260 [ 88.075958][ T6822] ? __pfx___sys_socket+0x10/0x10 [ 88.075973][ T6822] __x64_sys_socket+0x72/0xb0 [ 88.075983][ T6822] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.076004][ T6822] do_syscall_64+0x123/0x790 [ 88.076022][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.076033][ T6822] RIP: 0033:0x7efeedb9e159 [ 88.076043][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.076053][ T6822] RSP: 002b:00007efeeeaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.076069][ T6822] RAX: ffffffffffffffda RBX: 00007efeede26090 RCX: 00007efeedb9e159 [ 88.076077][ T6822] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 88.076083][ T6822] RBP: 00007efeedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 88.076090][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.076097][ T6822] R13: 00007efeede26128 R14: 00007efeede26090 R15: 00007ffe249b3118 [ 88.076112][ T6822] [ 88.076118][ T6822] socket: no more sockets [ 88.079908][ T44] audit: type=1400 audit(1790280087.608:358): avc: denied { sqpoll } for pid=6818 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.636232][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 89.665856][ T44] audit: type=1400 audit(1790280089.188:359): avc: denied { write } for pid=6862 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.859290][ T65] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.276570][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.438314][ T65] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 91.439293][ T65] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 91.439315][ T65] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.439330][ T65] usb 8-1: config 0 has no interfaces? [ 91.439353][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.447245][ T65] usb 8-1: config 0 descriptor?? [ 91.652469][ T65] usb 8-1: USB disconnect, device number 5 [ 91.967613][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 91.969238][ T25] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 91.969262][ T25] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.969280][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.969304][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.971365][ T25] usb 5-1: config 0 descriptor?? [ 92.210979][ T6907] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 92.211000][ T6907] kvm [6906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800100000080 [ 92.230636][ T6907] kvm [6906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000080 [ 92.395647][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.395674][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.395691][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.395707][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.395724][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.395741][ T25] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 92.585867][ T25] usb 5-1: USB disconnect, device number 3 [ 93.075583][ T44] audit: type=1400 audit(1790280092.598:360): avc: denied { bind } for pid=6913 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.075673][ T44] audit: type=1400 audit(1790280092.598:361): avc: denied { name_bind } for pid=6913 comm="syz.2.390" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.075781][ T44] audit: type=1400 audit(1790280092.598:362): avc: denied { node_bind } for pid=6913 comm="syz.2.390" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 96.357414][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.653821][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 96.668724][ T25] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 97.161607][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.161631][ T25] usb 5-1: Product: syz [ 97.161644][ T25] usb 5-1: Manufacturer: syz [ 97.161655][ T25] usb 5-1: SerialNumber: syz [ 97.165335][ T25] usb 5-1: config 0 descriptor?? [ 97.173293][ T25] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 97.173996][ T6964] kvm [6963]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800100000080 [ 97.191244][ T6964] kvm [6963]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000080 [ 97.686647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a05b800: rx timeout, send abort [ 97.697180][ T44] audit: type=1400 audit(1790280097.228:363): avc: denied { read } for pid=5125 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 97.697345][ T44] audit: type=1400 audit(1790280097.228:364): avc: denied { search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.697600][ T44] audit: type=1400 audit(1790280097.228:365): avc: denied { write search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.697684][ T44] audit: type=1400 audit(1790280097.228:366): avc: denied { add_name } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.701423][ T44] audit: type=1400 audit(1790280097.228:367): avc: denied { create } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.701758][ T44] audit: type=1400 audit(1790280097.228:368): avc: denied { append open } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.701941][ T44] audit: type=1400 audit(1790280097.228:369): avc: denied { getattr } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.186845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a05b400: rx timeout, send abort [ 98.187719][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a05b800: abort rx timeout. Force session deactivation [ 98.281515][ T7007] kvm [7005]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800100000080 [ 98.322695][ T7007] kvm [7005]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000080 [ 98.391314][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 98.391964][ T25] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 98.393361][ T44] audit: type=1400 audit(1790280097.918:373): avc: denied { create } for pid=7021 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.398395][ T25] usb 5-1: USB disconnect, device number 4 [ 98.523418][ T44] audit: type=1400 audit(1790280098.038:374): avc: denied { mounton } for pid=7021 comm="syz.1.435" path="/127/file2" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.540473][ T44] audit: type=1400 audit(1790280098.068:375): avc: denied { read } for pid=7026 comm="syz.2.436" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.660139][ T44] audit: type=1400 audit(1790280098.168:376): avc: denied { getopt } for pid=7026 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.686920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a05b400: abort rx timeout. Force session deactivation [ 99.695076][ T44] audit: type=1400 audit(1790280099.218:377): avc: denied { sys_module } for pid=7062 comm="syz.1.451" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.893494][ T44] audit: type=1400 audit(1790280099.418:378): avc: denied { append } for pid=7060 comm="syz.0.450" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.694961][ T44] audit: type=1400 audit(1790280101.218:379): avc: denied { create } for pid=7152 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.695538][ T44] audit: type=1400 audit(1790280101.218:380): avc: denied { write } for pid=7152 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.695771][ T44] audit: type=1400 audit(1790280101.218:381): avc: denied { nlmsg_write } for pid=7152 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.698870][ T7154] netlink: 165 bytes leftover after parsing attributes in process `syz.2.490'. [ 101.703438][ T7156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 101.703457][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.704861][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 101.708095][ T7157] vhci_hcd: cannot find the pending unlink 6 [ 101.708136][ T7157] vhci_hcd: connection closed [ 101.728707][ T5810] vhci_hcd vhci_hcd.1: stop threads [ 101.729184][ T5810] vhci_hcd vhci_hcd.1: release socket [ 101.729207][ T5810] vhci_hcd vhci_hcd.1: disconnect device [ 102.076550][ T65] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 102.237222][ T65] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.238700][ T65] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.238718][ T65] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.238734][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.238766][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 102.238786][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.241979][ T65] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.241998][ T65] usb 7-1: Product: syz [ 102.242038][ T65] usb 7-1: Manufacturer: syz [ 102.248402][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 102.248411][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 102.251023][ T65] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 102.251033][ T65] cdc_wdm 7-1:1.0: Unknown control protocol [ 102.319560][ T44] audit: type=1400 audit(1790280101.848:382): avc: denied { create } for pid=7172 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.508504][ T65] usb 7-1: USB disconnect, device number 5 [ 103.431913][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 103.432057][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'. [ 104.186835][ T1667] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.322319][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 104.322336][ T44] audit: type=1400 audit(1790280103.848:387): avc: denied { create } for pid=7226 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.336508][ T1667] usb 8-1: Using ep0 maxpacket: 32 [ 104.337283][ T1667] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 104.338526][ T1667] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.340604][ T1667] usb 8-1: config 0 descriptor?? [ 104.347076][ T1667] gspca_main: sq930x-2.14.0 probing 041e:403c [ 104.364788][ T44] audit: type=1400 audit(1790280103.888:388): avc: denied { allowed } for pid=7226 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.374985][ T44] audit: type=1400 audit(1790280103.898:389): avc: denied { accept } for pid=7226 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.497072][ T44] audit: type=1400 audit(1790280104.028:390): avc: denied { create } for pid=7230 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.499972][ T44] audit: type=1400 audit(1790280104.028:391): avc: denied { setopt } for pid=7230 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.047429][ T1667] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 105.048941][ T1667] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 105.137641][ T1667] usb 8-1: USB disconnect, device number 6 [ 106.152494][ T7262] FAULT_INJECTION: forcing a failure. [ 106.152494][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 106.152523][ T7262] CPU: 2 UID: 0 PID: 7262 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 106.152545][ T7262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.152556][ T7262] Call Trace: [ 106.152562][ T7262] [ 106.152570][ T7262] dump_stack_lvl+0x100/0x190 [ 106.152618][ T7262] should_fail_ex.cold+0x5/0xa [ 106.152652][ T7262] should_failslab+0xc2/0x120 [ 106.152684][ T7262] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.152708][ T7262] ? audit_log_start+0x29d/0x930 [ 106.152730][ T7262] audit_log_start+0x29d/0x930 [ 106.152751][ T7262] ? __pfx_audit_log_start+0x10/0x10 [ 106.152772][ T7262] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 106.152806][ T7262] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.152840][ T7262] audit_seccomp+0x61/0x1f0 [ 106.152871][ T7262] __seccomp_permit_syscall+0x28d/0x2e0 [ 106.152902][ T7262] do_syscall_64+0x591/0x790 [ 106.152938][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.152957][ T7262] RIP: 0033:0x7f861fb9e159 [ 106.152973][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.152991][ T7262] RSP: 002b:00007f86209912b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 106.153011][ T7262] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f861fb9e159 [ 106.153024][ T7262] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 106.153035][ T7262] RBP: 00007f8620992030 R08: 0000000000000001 R09: 000000000000000b [ 106.153046][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.153057][ T7262] R13: 00007f861fe26038 R14: 00007f861fe25fa0 R15: 00007fff6effeaa8 [ 106.153082][ T7262] [ 106.153091][ T7262] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 106.153103][ T7262] audit: out of memory in audit_log_start [ 106.283010][ T7266] Set syz1 is full, maxelem 5 reached [ 106.956672][ T65] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.106685][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 107.108450][ T65] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 107.113066][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.113086][ T65] usb 6-1: Product: syz [ 107.113098][ T65] usb 6-1: Manufacturer: syz [ 107.113111][ T65] usb 6-1: SerialNumber: syz [ 107.115638][ T65] usb 6-1: config 0 descriptor?? [ 107.127342][ T65] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 107.127379][ T65] pctv452e: pctv452e_power_ctrl: 1 [ 107.127379][ T65] [ 107.127413][ T65] usb 6-1: selecting invalid altsetting 3 [ 107.127424][ T65] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 107.127424][ T65] [ 107.128782][ T65] dvb-usb: bulk message failed: -22 (5/0) [ 107.135103][ T65] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.137811][ T65] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 107.137837][ T65] usb 6-1: media controller created [ 107.138123][ T65] dvb-usb: bulk message failed: -22 (8/0) [ 107.138133][ T65] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 107.138163][ T65] dvb-usb: MAC address reading failed. [ 107.151202][ T65] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.198609][ T65] DVB: Unable to find symbol stb0899_attach() [ 107.198620][ T65] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 107.246673][ T65] rc_core: IR keymap rc-tt-1500 not found [ 107.246689][ T65] Registered IR keymap rc-empty [ 107.248720][ T65] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 107.251001][ T65] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 107.255520][ T65] dvb-usb: schedule remote query interval to 100 msecs. [ 107.255540][ T65] pctv452e: pctv452e_power_ctrl: 0 [ 107.255540][ T65] [ 107.255545][ T65] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 107.327259][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.328883][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.333880][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.335583][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.358203][ T65] dvb-usb: bulk message failed: -22 (4/0) [ 107.358229][ T65] dvb-usb: error -22 while querying for an remote control event. [ 107.416563][ T1478] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 107.465899][ T65] usb 6-1: USB disconnect, device number 4 [ 107.515796][ T44] audit: type=1326 audit(1790280107.038:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52759e159 code=0x7ffc0000 [ 107.516022][ T44] audit: type=1326 audit(1790280107.038:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52759e159 code=0x7ffc0000 [ 107.517848][ T44] audit: type=1326 audit(1790280107.048:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.0.550" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa52759e159 code=0x7ffc0000 [ 107.535326][ T65] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 107.589294][ T1478] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.590052][ T1478] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.590066][ T1478] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 107.590075][ T1478] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.590095][ T1478] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 107.590107][ T1478] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 107.591488][ T1478] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.591502][ T1478] usb 8-1: Product: syz [ 107.591509][ T1478] usb 8-1: Manufacturer: syz [ 107.596326][ T1478] cdc_wdm 8-1:1.0: skipping garbage [ 107.596336][ T1478] cdc_wdm 8-1:1.0: skipping garbage [ 107.596372][ T1478] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.795420][ T9] usb 8-1: USB disconnect, device number 7 [ 108.464096][ T7338] zram0: detected capacity change from 0 to 8 [ 109.877659][ T44] kauditd_printk_skb: 64 callbacks suppressed [ 109.877704][ T44] audit: type=1400 audit(1790280109.408:459): avc: denied { connect } for pid=7375 comm="syz.2.578" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.655043][ T44] audit: type=1400 audit(1790280110.178:460): avc: denied { nlmsg_read } for pid=7401 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.655116][ T7402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.585'. [ 112.072431][ T44] audit: type=1400 audit(1790280111.598:461): avc: denied { read write } for pid=7452 comm="syz.3.605" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.072808][ T44] audit: type=1400 audit(1790280111.598:462): avc: denied { open } for pid=7452 comm="syz.3.605" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.189676][ T7453] fuse: root generation should be zero [ 112.239534][ T44] audit: type=1400 audit(1790280111.768:463): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.277823][ T44] audit: type=1400 audit(1790280111.808:464): avc: denied { bind } for pid=7456 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.399758][ T44] audit: type=1400 audit(1790280111.928:465): avc: denied { connect } for pid=7456 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.577153][ T7498] random: crng reseeded on system resumption [ 113.579740][ T44] audit: type=1400 audit(1790280113.108:466): avc: denied { write } for pid=7493 comm="syz.1.620" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.586322][ T7494] gfs2: error -5 reading superblock [ 113.660930][ T7501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.720171][ T44] audit: type=1400 audit(1790280113.248:467): avc: denied { setopt } for pid=7509 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.736085][ T1275] rpcbind: server 127.0.0.1 not responding, timed out [ 116.166616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.817077][ T7567] binder: 7559:7567 ioctl 4018620d 0 returned -22 [ 116.818606][ T7567] binder: 7559:7567 unknown command 0 [ 116.818622][ T7567] binder: 7559:7567 ioctl c0306201 200000000c00 returned -22 [ 117.155771][ T44] audit: type=1400 audit(1790280116.678:468): avc: denied { connect } for pid=7562 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.986622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 118.376620][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 118.900135][ T44] audit: type=1400 audit(1790280118.398:469): avc: denied { read } for pid=7598 comm="syz.1.655" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.900183][ T44] audit: type=1400 audit(1790280118.398:470): avc: denied { open } for pid=7598 comm="syz.1.655" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.900216][ T44] audit: type=1400 audit(1790280118.408:471): avc: denied { ioctl } for pid=7598 comm="syz.1.655" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.393581][ T7602] block device autoloading is deprecated and will be removed. [ 119.485977][ T44] audit: type=1400 audit(1790280119.008:472): avc: denied { watch } for pid=7606 comm="syz.0.657" path="/syzcgroup/unified/syz0/syz1" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 120.112002][ T44] audit: type=1400 audit(1790280119.638:473): avc: denied { read } for pid=7618 comm="syz.1.662" path="socket:[18188]" dev="sockfs" ino=18188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.168903][ T44] audit: type=1400 audit(1790280119.698:474): avc: denied { shutdown } for pid=7618 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.189835][ T7617] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 120.189859][ T7617] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 120.189881][ T7617] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 120.191300][ T7617] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.194771][ T7617] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.065155][ T7644] hub 9-0:1.0: USB hub found [ 121.070352][ T7644] hub 9-0:1.0: 1 port detected [ 121.116723][ T44] audit: type=1400 audit(1790280120.578:475): avc: denied { write } for pid=7638 comm="syz.0.667" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.253998][ T44] audit: type=1400 audit(1790280120.778:476): avc: denied { create } for pid=7645 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.254125][ T44] audit: type=1400 audit(1790280120.778:477): avc: denied { write } for pid=7645 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 122.616500][ T5825] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.890198][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 122.890930][ T5825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.892064][ T5825] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 122.892102][ T5825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 122.892124][ T5825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.892142][ T5825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 122.892163][ T5825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.892181][ T5825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.892212][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.143211][ T5825] usb 7-1: GET_CAPABILITIES returned 0 [ 123.143253][ T5825] usbtmc 7-1:16.0: can't read capabilities [ 123.358613][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 123.358820][ T7660] usbtmc 7-1:16.0: Unable to send data, error -71 [ 123.360237][ T1667] usb 7-1: USB disconnect, device number 6 [ 125.328835][ T44] audit: type=1400 audit(1790280124.858:478): avc: denied { write } for pid=7692 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.146670][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.326574][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 127.329701][ T30] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 127.330941][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.330976][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.333636][ T30] usb 5-1: config 0 descriptor?? [ 127.766176][ T30] input: HID 1e7d:31ce as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:1E7D:31CE.0004/input/input6 [ 127.882107][ T30] ryos 0003:1E7D:31CE.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.0-1/input0 [ 127.978647][ T5883] usb 5-1: USB disconnect, device number 5 [ 128.224589][ T7727] fido_id[7727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 130.886923][ T44] audit: type=1400 audit(1790280130.418:479): avc: denied { append } for pid=7750 comm="syz.1.702" name="v4l-subdev3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.129943][ T44] audit: type=1400 audit(1790280130.658:480): avc: denied { mount } for pid=7754 comm="syz.2.705" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 131.372286][ T44] audit: type=1400 audit(1790280130.898:481): avc: denied { write } for pid=7759 comm="syz.3.707" name="functions" dev="configfs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.376342][ T44] audit: type=1400 audit(1790280130.898:482): avc: denied { write } for pid=7759 comm="syz.3.707" name="core" dev="configfs" ino=3975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.402332][ T44] audit: type=1400 audit(1790280130.918:483): avc: denied { write } for pid=7759 comm="syz.3.707" name="rd_mcp_0" dev="configfs" ino=18283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.405808][ T44] audit: type=1400 audit(1790280130.928:484): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 131.441555][ T44] audit: type=1400 audit(1790280130.968:485): avc: denied { write } for pid=7759 comm="syz.3.707" name="control" dev="configfs" ino=18299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 131.441751][ T44] audit: type=1400 audit(1790280130.968:486): avc: denied { open } for pid=7759 comm="syz.3.707" path="/160/config/target/core/rd_mcp_0/ramdisk0/control" dev="configfs" ino=18299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 131.443664][ T44] audit: type=1400 audit(1790280130.968:487): avc: denied { write } for pid=7759 comm="syz.3.707" name="target" dev="configfs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.444268][ T44] audit: type=1400 audit(1790280130.968:488): avc: denied { write } for pid=7759 comm="syz.3.707" name="usb_gadget" dev="configfs" ino=18301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.454968][ T7760] se_device not configured yet, cannot port link [ 132.957366][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957421][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.272207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 135.050238][ T7834] syz_tun: entered allmulticast mode [ 135.503103][ T7857] binder: 7856:7857 ioctl c0306201 200000000080 returned -14 [ 135.579046][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 135.800587][ T7829] syz_tun: left allmulticast mode [ 135.933205][ T7879] binder: 7878:7879 ioctl c0306201 200000000080 returned -14 [ 136.124401][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 136.124466][ T44] audit: type=1800 audit(1790280135.648:496): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.751" name=08 dev="sda1" ino=2038 res=0 errno=0 [ 136.958991][ T7904] binder: 7902:7904 ioctl c0306201 200000000080 returned -14 [ 137.189762][ T7924] binder: 7923:7924 ioctl c0306201 200000000080 returned -14 [ 137.251557][ T44] audit: type=1800 audit(1790280136.778:497): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.767" name=08 dev="sda1" ino=2038 res=0 errno=0 [ 138.146538][ T1478] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.297328][ T1478] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.298670][ T1478] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.298694][ T1478] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.298710][ T1478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.298749][ T1478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 138.298773][ T1478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 138.301730][ T1478] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.301746][ T1478] usb 6-1: Product: syz [ 138.301754][ T1478] usb 6-1: Manufacturer: syz [ 138.318623][ T1478] cdc_wdm 6-1:1.0: skipping garbage [ 138.318635][ T1478] cdc_wdm 6-1:1.0: skipping garbage [ 138.328347][ T1478] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 138.328360][ T1478] cdc_wdm 6-1:1.0: Unknown control protocol [ 138.526094][ T2333] usb 6-1: USB disconnect, device number 5 [ 138.748693][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 139.074828][ T44] audit: type=1400 audit(1790280138.598:498): avc: denied { write } for pid=7986 comm="syz.1.797" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.075850][ T44] audit: type=1400 audit(1790280138.598:499): avc: denied { write } for pid=7986 comm="syz.1.797" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.075914][ T7987] se_device not configured yet, cannot port link [ 139.370880][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 140.016600][ T5811] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 140.169173][ T5811] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 140.178198][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.178244][ T5811] usb 8-1: Product: syz [ 140.178284][ T5811] usb 8-1: Manufacturer: syz [ 140.178323][ T5811] usb 8-1: SerialNumber: syz [ 140.597575][ T5811] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 141.038424][ T5883] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 141.199223][ T5883] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 141.201417][ T5883] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.201433][ T5883] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.201443][ T5883] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.201463][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.201474][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 141.201487][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.201505][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.203048][ T5883] usb 5-1: config 0 descriptor?? [ 141.204733][ T8048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 141.290022][ T44] audit: type=1800 audit(1790280140.818:500): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.818" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 141.413274][ T5883] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.434934][ T65] usb 5-1: USB disconnect, device number 6 [ 141.448922][ T65] usblp1: removed [ 141.772622][ T8079] binder: 8078:8079 ioctl c0306201 200000000080 returned -14 [ 141.775073][ T8079] binder_alloc: 8078: binder_alloc_buf, no vma [ 142.081777][ T8102] binder: 8101:8102 ioctl c0306201 200000000080 returned -14 [ 142.083438][ T8102] binder_alloc: 8101: binder_alloc_buf, no vma [ 142.724722][ T8132] binder: 8131:8132 ioctl c0306201 200000000080 returned -14 [ 142.726217][ T8132] binder_alloc: 8131: binder_alloc_buf, no vma [ 142.802469][ T5883] usb 8-1: USB disconnect, device number 8 [ 142.813071][ T5883] usblp0: removed [ 142.996547][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 143.147311][ T30] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.148280][ T30] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.148301][ T30] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.148316][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.148350][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.148378][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.149761][ T30] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.149780][ T30] usb 7-1: Product: syz [ 143.149792][ T30] usb 7-1: Manufacturer: syz [ 143.156350][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 143.156374][ T30] cdc_wdm 7-1:1.0: skipping garbage [ 143.158069][ T30] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 143.158085][ T30] cdc_wdm 7-1:1.0: Unknown control protocol [ 143.361413][ T1478] usb 7-1: USB disconnect, device number 7 [ 143.706579][ T1667] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.779476][ T8162] binder: 8161:8162 ioctl c0306201 200000000080 returned -14 [ 143.867172][ T1667] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 143.868017][ T1667] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 143.868038][ T1667] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.868053][ T1667] usb 6-1: config 0 has no interfaces? [ 143.868073][ T1667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.873955][ T1667] usb 6-1: config 0 descriptor?? [ 143.894696][ T8166] netlink: 104 bytes leftover after parsing attributes in process `syz.3.875'. [ 143.934306][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 144.078516][ T1478] usb 6-1: USB disconnect, device number 6 [ 144.624865][ T8185] binder: 8184:8185 ioctl c0306201 200000000080 returned -14 [ 144.666641][ T65] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 144.826989][ T65] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 144.829586][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.829606][ T65] usb 8-1: Product: syz [ 144.829614][ T65] usb 8-1: Manufacturer: syz [ 144.829621][ T65] usb 8-1: SerialNumber: syz [ 144.936607][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 144.968167][ T44] audit: type=1400 audit(1790280144.498:501): avc: denied { create } for pid=8193 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 145.087226][ T35] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.088156][ T35] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.088178][ T35] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.088193][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.088229][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.088250][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.089632][ T35] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.089649][ T35] usb 6-1: Product: syz [ 145.089662][ T35] usb 6-1: Manufacturer: syz [ 145.094443][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 145.094459][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 145.099459][ T35] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 145.099476][ T35] cdc_wdm 6-1:1.0: Unknown control protocol [ 145.239046][ T65] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 145.256615][ T5811] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 145.298288][ T1478] usb 6-1: USB disconnect, device number 7 [ 145.417254][ T5811] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.418242][ T5811] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 145.418263][ T5811] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 145.418277][ T5811] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 145.418305][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.418321][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 145.418342][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.418374][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.421326][ T5811] usb 7-1: config 0 descriptor?? [ 145.422122][ T8197] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.567622][ T44] audit: type=1400 audit(1790280145.098:502): avc: denied { write } for pid=8211 comm="syz.0.894" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.567722][ T8212] se_device not configured yet, cannot port link [ 145.567774][ T44] audit: type=1400 audit(1790280145.098:503): avc: denied { write } for pid=8211 comm="syz.0.894" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.626991][ T5811] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.636050][ T5811] usb 7-1: USB disconnect, device number 8 [ 145.647395][ T5811] usblp0: removed [ 145.990576][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 146.566594][ T1478] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 146.727105][ T1478] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 146.727668][ T1478] usb 7-1: config 0 has no interfaces? [ 146.727694][ T1478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.732587][ T1478] usb 7-1: config 0 descriptor?? [ 146.943134][ T5883] usb 7-1: USB disconnect, device number 9 [ 147.335937][ T8277] binder: 8276:8277 ioctl c0306201 200000000080 returned -14 [ 147.340065][ T8277] binder: BINDER_SET_CONTEXT_MGR already set [ 147.340078][ T8277] binder: 8276:8277 ioctl 4018620d 200000004a80 returned -16 [ 147.376702][ T44] audit: type=1800 audit(1790280146.898:504): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.910" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 147.377590][ T44] audit: type=1800 audit(1790280146.908:505): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.910" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 147.453152][ T1042] usb 8-1: USB disconnect, device number 9 [ 147.457929][ T1042] usblp1: removed [ 148.056326][ T44] audit: type=1400 audit(1790280147.578:506): avc: denied { write } for pid=8297 comm="syz.2.933" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.056483][ T8298] se_device not configured yet, cannot port link [ 148.062643][ T44] audit: type=1400 audit(1790280147.578:507): avc: denied { write } for pid=8297 comm="syz.2.933" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.207480][ T8304] FAULT_INJECTION: forcing a failure. [ 148.207480][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 148.207501][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.2.934 Not tainted syzkaller #0 PREEMPT(full) [ 148.207514][ T8304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.207521][ T8304] Call Trace: [ 148.207533][ T8304] [ 148.207537][ T8304] dump_stack_lvl+0x100/0x190 [ 148.207564][ T8304] should_fail_ex.cold+0x5/0xa [ 148.207582][ T8304] should_failslab+0xc2/0x120 [ 148.207601][ T8304] __kvmalloc_node_noprof+0x113/0x9b0 [ 148.207616][ T8304] ? ip_vs_rht_alloc+0x3d1/0x710 [ 148.207636][ T8304] ip_vs_rht_alloc+0x3d1/0x710 [ 148.207671][ T8304] ip_vs_conn_tab_alloc+0x3d/0xf0 [ 148.207684][ T8304] start_sync_thread+0x187e/0x2b60 [ 148.207702][ T8304] ? __lock_acquire+0x5c0/0x1f40 [ 148.207717][ T8304] ? cred_has_capability.isra.0+0x186/0x300 [ 148.207734][ T8304] ? __pfx_start_sync_thread+0x10/0x10 [ 148.207750][ T8304] ? lock_acquire+0x1d1/0x380 [ 148.207761][ T8304] ? __might_fault+0xc5/0x140 [ 148.207778][ T8304] ? find_held_lock+0x2b/0x80 [ 148.207793][ T8304] ? __might_fault+0xc5/0x140 [ 148.207809][ T8304] ? __might_fault+0xc5/0x140 [ 148.207834][ T8304] ? do_ip_vs_set_ctl+0x471/0xc90 [ 148.207845][ T8304] do_ip_vs_set_ctl+0x471/0xc90 [ 148.207859][ T8304] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 148.207869][ T8304] ? rcu_is_watching+0x13/0xc0 [ 148.207888][ T8304] ? find_held_lock+0x2b/0x80 [ 148.207903][ T8304] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.207925][ T8304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.207957][ T8304] ? nf_setsockopt+0x8d/0xf0 [ 148.207971][ T8304] nf_setsockopt+0x8d/0xf0 [ 148.207987][ T8304] ip_setsockopt+0xcb/0xf0 [ 148.208000][ T8304] tcp_setsockopt+0xa7/0x100 [ 148.208016][ T8304] smc_setsockopt+0x1b6/0xa40 [ 148.208031][ T8304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 148.208051][ T8304] ? __pfx_smc_setsockopt+0x10/0x10 [ 148.208064][ T8304] ? __fget_files+0x215/0x3d0 [ 148.208080][ T8304] ? selinux_socket_setsockopt+0x6a/0x80 [ 148.208093][ T8304] ? __pfx_smc_setsockopt+0x10/0x10 [ 148.208108][ T8304] do_sock_setsockopt+0xf3/0x1d0 [ 148.208126][ T8304] __sys_setsockopt+0x195/0x220 [ 148.208143][ T8304] __x64_sys_setsockopt+0xbd/0x160 [ 148.208156][ T8304] ? do_syscall_64+0xae/0x790 [ 148.208172][ T8304] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.208188][ T8304] do_syscall_64+0x123/0x790 [ 148.208206][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.208217][ T8304] RIP: 0033:0x7efeedb9e159 [ 148.208227][ T8304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.208238][ T8304] RSP: 002b:00007efeeeb0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.208253][ T8304] RAX: ffffffffffffffda RBX: 00007efeede25fa0 RCX: 00007efeedb9e159 [ 148.208260][ T8304] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 148.208266][ T8304] RBP: 00007efeedc3506b R08: 0000000000000018 R09: 0000000000000000 [ 148.208273][ T8304] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 148.208279][ T8304] R13: 00007efeede26038 R14: 00007efeede25fa0 R15: 00007ffe249b3118 [ 148.208294][ T8304] [ 148.570299][ T44] audit: type=1400 audit(1790280148.098:508): avc: denied { write } for pid=8332 comm="syz.3.949" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.570362][ T8333] se_device not configured yet, cannot port link [ 148.570369][ T44] audit: type=1400 audit(1790280148.098:509): avc: denied { write } for pid=8332 comm="syz.3.949" name="lun_0" dev="configfs" ino=18314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.645554][ T44] audit: type=1400 audit(1790280148.168:510): avc: denied { append } for pid=8341 comm="syz.3.952" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.673719][ T8342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 149.650768][ T44] audit: type=1400 audit(1790280149.178:511): avc: denied { mounton } for pid=8372 comm="syz.0.962" path="/243/file0" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.748047][ T8375] kvm: pic: non byte write [ 150.004000][ T44] audit: type=1800 audit(1790280149.528:512): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.956" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 150.005283][ T44] audit: type=1800 audit(1790280149.528:513): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.956" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 150.524357][ T8409] FAULT_INJECTION: forcing a failure. [ 150.524357][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 150.524377][ T8409] CPU: 3 UID: 0 PID: 8409 Comm: syz.0.974 Not tainted syzkaller #0 PREEMPT(full) [ 150.524390][ T8409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.524396][ T8409] Call Trace: [ 150.524401][ T8409] [ 150.524405][ T8409] dump_stack_lvl+0x100/0x190 [ 150.524436][ T8409] should_fail_ex.cold+0x5/0xa [ 150.524453][ T8409] should_failslab+0xc2/0x120 [ 150.524476][ T8409] __kvmalloc_node_noprof+0x113/0x9b0 [ 150.524492][ T8409] ? ip_vs_rht_alloc+0x3d1/0x710 [ 150.524512][ T8409] ip_vs_rht_alloc+0x3d1/0x710 [ 150.524529][ T8409] ip_vs_conn_tab_alloc+0x3d/0xf0 [ 150.524542][ T8409] start_sync_thread+0x187e/0x2b60 [ 150.524559][ T8409] ? __lock_acquire+0x5c0/0x1f40 [ 150.524573][ T8409] ? cred_has_capability.isra.0+0x186/0x300 [ 150.524610][ T8409] ? __pfx_start_sync_thread+0x10/0x10 [ 150.524626][ T8409] ? lock_acquire+0x1d1/0x380 [ 150.524639][ T8409] ? __might_fault+0xc5/0x140 [ 150.524657][ T8409] ? find_held_lock+0x2b/0x80 [ 150.524674][ T8409] ? __might_fault+0xc5/0x140 [ 150.524691][ T8409] ? __might_fault+0xc5/0x140 [ 150.524715][ T8409] ? do_ip_vs_set_ctl+0x471/0xc90 [ 150.524726][ T8409] do_ip_vs_set_ctl+0x471/0xc90 [ 150.524739][ T8409] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 150.524750][ T8409] ? rcu_is_watching+0x13/0xc0 [ 150.524768][ T8409] ? find_held_lock+0x2b/0x80 [ 150.524783][ T8409] ? nf_sockopt_find.isra.0+0x222/0x290 [ 150.524806][ T8409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.524836][ T8409] ? nf_setsockopt+0x8d/0xf0 [ 150.524850][ T8409] nf_setsockopt+0x8d/0xf0 [ 150.524867][ T8409] ip_setsockopt+0xcb/0xf0 [ 150.524880][ T8409] tcp_setsockopt+0xa7/0x100 [ 150.524895][ T8409] smc_setsockopt+0x1b6/0xa40 [ 150.524910][ T8409] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 150.524931][ T8409] ? __pfx_smc_setsockopt+0x10/0x10 [ 150.524949][ T8409] ? __fget_files+0x215/0x3d0 [ 150.524981][ T8409] ? selinux_socket_setsockopt+0x6a/0x80 [ 150.524997][ T8409] ? __pfx_smc_setsockopt+0x10/0x10 [ 150.525014][ T8409] do_sock_setsockopt+0xf3/0x1d0 [ 150.525034][ T8409] __sys_setsockopt+0x195/0x220 [ 150.525052][ T8409] __x64_sys_setsockopt+0xbd/0x160 [ 150.525066][ T8409] ? do_syscall_64+0xae/0x790 [ 150.525082][ T8409] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.525098][ T8409] do_syscall_64+0x123/0x790 [ 150.525116][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.525128][ T8409] RIP: 0033:0x7fa52759e159 [ 150.525138][ T8409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.525148][ T8409] RSP: 002b:00007fa5284ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.525159][ T8409] RAX: ffffffffffffffda RBX: 00007fa527825fa0 RCX: 00007fa52759e159 [ 150.525166][ T8409] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 150.525172][ T8409] RBP: 00007fa52763506b R08: 0000000000000018 R09: 0000000000000000 [ 150.525178][ T8409] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 150.525184][ T8409] R13: 00007fa527826038 R14: 00007fa527825fa0 R15: 00007ffc734a0458 [ 150.525199][ T8409] [ 150.871469][ T125] rpcbind: server 127.0.0.1 not responding, timed out [ 150.920983][ T30] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 150.936900][ T35] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 151.067602][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.068572][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.068592][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.068610][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.068647][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.068667][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.068688][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.068718][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.071073][ T30] usb 5-1: config 0 descriptor?? [ 151.071960][ T8411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.107764][ T35] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 151.111437][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.111460][ T35] usb 8-1: Product: syz [ 151.111473][ T35] usb 8-1: Manufacturer: syz [ 151.111485][ T35] usb 8-1: SerialNumber: syz [ 151.296597][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.299039][ T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.300490][ T30] usb 5-1: USB disconnect, device number 7 [ 151.309222][ T30] usblp0: removed [ 151.448659][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 151.449282][ T25] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 151.450404][ T25] usb 6-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 151.450440][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 157, changing to 11 [ 151.450464][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 33421, setting to 1024 [ 151.452510][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.452532][ T25] usb 6-1: Product: syz [ 151.452543][ T25] usb 6-1: Manufacturer: syz [ 151.452554][ T25] usb 6-1: SerialNumber: syz [ 151.529506][ T35] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 151.715301][ T8438] usb 8-1: USB disconnect, device number 10 [ 151.729382][ T8438] usblp0: removed [ 151.757159][ T8438] hub 8-0:1.0: USB hub found [ 151.757644][ T8438] hub 8-0:1.0: 1 port detected [ 151.882740][ T8445] binder: BINDER_SET_CONTEXT_MGR already set [ 151.882753][ T8445] binder: 8444:8445 ioctl 4018620d 200000004a80 returned -16 [ 152.186591][ T1042] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 152.357158][ T1042] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 152.358193][ T1042] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 152.358215][ T1042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.358230][ T1042] usb 7-1: config 0 has no interfaces? [ 152.358253][ T1042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.360524][ T1042] usb 7-1: config 0 descriptor?? [ 152.565481][ T1042] usb 7-1: USB disconnect, device number 10 [ 152.862371][ T8458] netlink: 80 bytes leftover after parsing attributes in process `syz.0.995'. [ 152.924595][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.951274][ T25] usb 6-1: USB disconnect, device number 8 [ 152.983839][ T7240] udevd[7240]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.095727][ T8472] binder: 8471:8472 ioctl c0306201 200000000080 returned -14 [ 153.276626][ T5883] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 153.336701][ T1042] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 153.437079][ T5883] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.437904][ T5883] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.437918][ T5883] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.437928][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.437948][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.437964][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 153.437992][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.438019][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.439925][ T5883] usb 8-1: config 0 descriptor?? [ 153.440422][ T8468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.497429][ T1042] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 153.499719][ T1042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.499733][ T1042] usb 7-1: Product: syz [ 153.499765][ T1042] usb 7-1: Manufacturer: syz [ 153.499774][ T1042] usb 7-1: SerialNumber: syz [ 153.661574][ T5883] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.667317][ T5883] usb 8-1: USB disconnect, device number 12 [ 153.672556][ T5883] usblp0: removed [ 153.910613][ T1042] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 154.036704][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 154.157196][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.199377][ T8499] binder: 8498:8499 ioctl c0306201 200000000080 returned -14 [ 154.209826][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 154.214068][ T25] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 154.214093][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.214107][ T25] usb 6-1: config 0 has no interfaces? [ 154.214130][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.216399][ T25] usb 6-1: config 0 descriptor?? [ 154.307358][ T5883] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 154.308401][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.308430][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.308460][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.314947][ T5883] usb 5-1: config 0 descriptor?? [ 154.422196][ T77] usb 6-1: USB disconnect, device number 9 [ 154.722322][ T5883] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 154.722341][ T5883] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 154.722353][ T5883] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 154.923988][ T5883] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -71 [ 154.933536][ T5883] usb 5-1: USB disconnect, device number 8 [ 154.980426][ T8510] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1015'. [ 155.113809][ T44] audit: type=1400 audit(1790280154.638:514): avc: denied { read write } for pid=8514 comm="syz.1.1017" name="lp0" dev="devtmpfs" ino=2979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 155.114143][ T44] audit: type=1400 audit(1790280154.638:515): avc: denied { open } for pid=8514 comm="syz.1.1017" path="/dev/usb/lp0" dev="devtmpfs" ino=2979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 155.558760][ T8525] kvm: pic: non byte write [ 155.671387][ T44] audit: type=1400 audit(1790280155.198:516): avc: denied { read write } for pid=8530 comm="syz.3.1024" name="mouse0" dev="devtmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.671590][ T44] audit: type=1400 audit(1790280155.198:517): avc: denied { open } for pid=8530 comm="syz.3.1024" path="/dev/input/mouse0" dev="devtmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.850202][ T8539] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1027'. [ 155.878853][ T8541] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1028'. [ 155.896573][ T1042] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.941281][ T8545] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1030'. [ 155.977205][ T8547] binder: 8546:8547 ioctl c0306201 200000000080 returned -14 [ 156.047237][ T1042] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 156.048343][ T1042] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 156.048357][ T1042] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.048367][ T1042] usb 5-1: config 0 has no interfaces? [ 156.048380][ T1042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.049725][ T1042] usb 5-1: config 0 descriptor?? [ 156.107541][ T25] usb 7-1: USB disconnect, device number 11 [ 156.119788][ T25] usblp0: removed [ 156.208769][ T8552] kvm: pic: non byte write [ 156.252696][ T35] usb 5-1: USB disconnect, device number 9 [ 156.334927][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1036'. [ 156.359175][ T8564] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1038'. [ 156.361337][ T8565] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1039'. [ 156.450343][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 156.675999][ T44] audit: type=1400 audit(1790280156.198:518): avc: denied { write } for pid=8574 comm="syz.1.1044" name="subsystems" dev="configfs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.691336][ T44] audit: type=1400 audit(1790280156.218:519): avc: denied { write } for pid=8574 comm="syz.1.1044" name="subsystems" dev="configfs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.692870][ T44] audit: type=1400 audit(1790280156.218:520): avc: denied { remove_name } for pid=8574 comm="syz.1.1044" name="testnqn" dev="configfs" ino=22305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.694218][ T44] audit: type=1400 audit(1790280156.218:521): avc: denied { rmdir } for pid=8574 comm="syz.1.1044" name="testnqn" dev="configfs" ino=22305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.823782][ T8582] FAULT_INJECTION: forcing a failure. [ 156.823782][ T8582] name failslab, interval 1, probability 0, space 0, times 0 [ 156.823816][ T8582] CPU: 3 UID: 0 PID: 8582 Comm: syz.0.1045 Not tainted syzkaller #0 PREEMPT(full) [ 156.823839][ T8582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.823852][ T8582] Call Trace: [ 156.823859][ T8582] [ 156.823867][ T8582] dump_stack_lvl+0x100/0x190 [ 156.823912][ T8582] should_fail_ex.cold+0x5/0xa [ 156.823941][ T8582] should_failslab+0xc2/0x120 [ 156.823970][ T8582] __kvmalloc_node_noprof+0x113/0x9b0 [ 156.823997][ T8582] ? bucket_table_alloc.isra.0+0x88/0x460 [ 156.824035][ T8582] bucket_table_alloc.isra.0+0x88/0x460 [ 156.824071][ T8582] __rhashtable_init_noprof+0x43a/0x890 [ 156.824093][ T8582] __rhltable_init_noprof+0x28/0x70 [ 156.824114][ T8582] nf_tables_newtable+0xf30/0x1a90 [ 156.824154][ T8582] ? __pfx_nf_tables_newtable+0x10/0x10 [ 156.824180][ T8582] ? net_generic+0x25/0x2a0 [ 156.824214][ T8582] ? __nla_parse+0x40/0x60 [ 156.824236][ T8582] nfnetlink_rcv_batch+0x1410/0x2880 [ 156.824279][ T8582] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 156.824314][ T8582] ? lock_acquire+0x1d1/0x380 [ 156.824335][ T8582] ? avc_has_perm_noaudit+0x56/0x470 [ 156.824373][ T8582] ? avc_has_perm_noaudit+0x145/0x470 [ 156.824425][ T8582] ? __nla_parse+0x40/0x60 [ 156.824452][ T8582] nfnetlink_rcv+0x3bd/0x440 [ 156.824480][ T8582] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.824532][ T8582] netlink_unicast+0x585/0x850 [ 156.824560][ T8582] ? __pfx_netlink_unicast+0x10/0x10 [ 156.824584][ T8582] ? __build_skb_around+0x278/0x390 [ 156.824613][ T8582] netlink_sendmsg+0x8b0/0xda0 [ 156.824642][ T8582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.824669][ T8582] ? selinux_socket_sendmsg+0x198/0x2f0 [ 156.824696][ T8582] ____sys_sendmsg+0xa4d/0xbe0 [ 156.824712][ T8582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.824737][ T8582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.824766][ T8582] ___sys_sendmsg+0x190/0x1e0 [ 156.824787][ T8582] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.824807][ T8582] ? futex_wait+0x11e/0x370 [ 156.824834][ T8582] ? find_held_lock+0x2b/0x80 [ 156.824877][ T8582] __sys_sendmsg+0x160/0x210 [ 156.824902][ T8582] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.824940][ T8582] do_syscall_64+0x123/0x790 [ 156.824979][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.825000][ T8582] RIP: 0033:0x7fa52759e159 [ 156.825017][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.825035][ T8582] RSP: 002b:00007fa5284ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.825054][ T8582] RAX: ffffffffffffffda RBX: 00007fa527825fa0 RCX: 00007fa52759e159 [ 156.825066][ T8582] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000004 [ 156.825078][ T8582] RBP: 00007fa52763506b R08: 0000000000000000 R09: 0000000000000000 [ 156.825089][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.825100][ T8582] R13: 00007fa527826038 R14: 00007fa527825fa0 R15: 00007ffc734a0458 [ 156.825126][ T8582] [ 157.073900][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1047'. [ 157.625004][ T44] audit: type=1400 audit(1790280157.148:522): avc: denied { name_connect } for pid=8616 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 157.674839][ T44] audit: type=1400 audit(1790280157.198:523): avc: denied { shutdown } for pid=8616 comm="syz.0.1060" lport=50221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.875880][ T8626] __nla_validate_parse: 2 callbacks suppressed [ 157.875951][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 157.979350][ T8628] binder: 8627:8628 ioctl c0306201 200000000080 returned -14 [ 158.588790][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 159.010334][ T8652] binder: 8651:8652 ioctl c0306201 200000000080 returned -14 [ 159.059351][ T8656] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1074'. [ 159.603441][ T8682] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1086'. [ 159.838116][ T1164] rpcbind: server 127.0.0.1 not responding, timed out [ 160.117367][ T5883] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 160.163594][ T8693] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1090'. [ 160.277299][ T5883] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 160.278276][ T5883] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 160.278299][ T5883] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 160.278315][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 160.278353][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.278371][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 160.278391][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.278423][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.281430][ T5883] usb 8-1: config 0 descriptor?? [ 160.282340][ T8689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.374066][ T8700] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 160.479481][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 160.488711][ T5883] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 160.525176][ T5883] usb 8-1: USB disconnect, device number 13 [ 160.535191][ T5883] usblp0: removed [ 160.832428][ T8723] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1103'. [ 160.911879][ T8727] fuse: Bad value for 'fd' [ 160.994254][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 161.061950][ T8736] sctp: [Deprecated]: syz.2.1102 (pid 8736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.061950][ T8736] Use struct sctp_sack_info instead [ 161.096658][ T1163] rpcbind: server 127.0.0.1 not responding, timed out [ 161.131443][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 162.466718][ T1667] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.468033][ T65] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 162.504929][ T8765] binder: BINDER_SET_CONTEXT_MGR already set [ 162.504940][ T8765] binder: 8764:8765 ioctl 4018620d 200000004a80 returned -16 [ 162.536911][ T8767] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1121'. [ 162.620514][ T1667] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 162.622109][ T1667] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 162.622131][ T1667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.622147][ T1667] usb 5-1: config 0 has no interfaces? [ 162.622170][ T1667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.625234][ T1667] usb 5-1: config 0 descriptor?? [ 162.639062][ T65] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.651456][ T65] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.651481][ T65] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.651498][ T65] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.651531][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.651550][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 162.651570][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.651602][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.653932][ T65] usb 6-1: config 0 descriptor?? [ 162.654811][ T8760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.864486][ T65] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 162.898152][ C1] usblp0: nonzero read bulk status received: -71 [ 162.898405][ T8760] usblp0: error -71 reading from printer [ 162.898636][ C1] usblp0: nonzero read bulk status received: -71 [ 162.899358][ T65] usb 6-1: USB disconnect, device number 10 [ 162.904622][ T65] usblp0: removed [ 163.043500][ T1667] usb 5-1: USB disconnect, device number 10 [ 163.533131][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 163.533144][ T44] audit: type=1326 audit(1790280163.058:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1127" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeedb9e159 code=0x0 [ 163.717382][ T8788] ip6t_REJECT: ECHOREPLY is not supported [ 164.146968][ T8796] binder: BINDER_SET_CONTEXT_MGR already set [ 164.149589][ T8796] binder: 8793:8796 ioctl 4018620d 200000004a80 returned -16 [ 164.307225][ T8801] __nla_validate_parse: 1 callbacks suppressed [ 164.307238][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 164.753425][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 164.988418][ T8824] binder: BINDER_SET_CONTEXT_MGR already set [ 164.988428][ T8824] binder: 8823:8824 ioctl 4018620d 200000004a80 returned -16 [ 165.047441][ T8829] syz.3.1143(8829): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 165.326622][ T5883] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 165.383313][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 165.384944][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 165.487407][ T5883] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 165.490487][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.490509][ T5883] usb 8-1: Product: syz [ 165.490522][ T5883] usb 8-1: Manufacturer: syz [ 165.490534][ T5883] usb 8-1: SerialNumber: syz [ 165.917003][ T5883] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 165.971112][ T44] audit: type=1800 audit(1790280165.498:527): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1145" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 165.975420][ T44] audit: type=1800 audit(1790280165.498:528): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1145" name="cpuset.effective_cpus" dev="sda1" ino=2039 res=0 errno=0 [ 165.996802][ T44] audit: type=1400 audit(1790280165.528:529): avc: denied { read write } for pid=8856 comm="syz.2.1155" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.997091][ T44] audit: type=1400 audit(1790280165.528:530): avc: denied { open } for pid=8856 comm="syz.2.1155" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.600026][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 166.926528][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 167.086968][ T35] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 167.087825][ T35] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 167.087843][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.087856][ T35] usb 7-1: config 0 has no interfaces? [ 167.087873][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.092449][ T35] usb 7-1: config 0 descriptor?? [ 167.190991][ T8890] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1167'. [ 167.296892][ T35] usb 7-1: USB disconnect, device number 12 [ 167.306618][ T44] audit: type=1400 audit(1790280166.828:531): avc: denied { create } for pid=8893 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.495931][ T8897] binder_alloc: 8895: binder_alloc_buf, no vma [ 168.107667][ T2333] usb 8-1: USB disconnect, device number 14 [ 168.111643][ T2333] usblp0: removed [ 168.396680][ T44] audit: type=1400 audit(1790280167.898:532): avc: denied { create } for pid=8908 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.396714][ T44] audit: type=1400 audit(1790280167.898:533): avc: denied { bind } for pid=8908 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.396735][ T44] audit: type=1400 audit(1790280167.898:534): avc: denied { write } for pid=8908 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.555753][ T8919] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1178'. [ 168.856594][ T65] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.017197][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 169.018163][ T65] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 169.018187][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.018202][ T65] usb 5-1: config 0 has no interfaces? [ 169.018225][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.020402][ T65] usb 5-1: config 0 descriptor?? [ 169.224621][ T25] usb 5-1: USB disconnect, device number 11 [ 169.272768][ T8930] ubi0: attaching mtd0 [ 169.274105][ T8930] ubi0: scanning is finished [ 169.274120][ T8930] ubi0: empty MTD device detected [ 169.310205][ T8932] syzkaller0: entered promiscuous mode [ 169.310219][ T8932] syzkaller0: entered allmulticast mode [ 169.322497][ T44] audit: type=1400 audit(1790280168.838:535): avc: denied { write } for pid=8931 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.617214][ T8930] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 169.617240][ T8930] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 169.617257][ T8930] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 169.617303][ T8930] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 169.617320][ T8930] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 169.617335][ T8930] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 169.617380][ T8930] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 759760932 [ 169.617396][ T8930] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 169.617946][ T8941] ubi0: background thread "ubi_bgt0d" started, PID 8941 [ 170.436530][ T1667] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 170.597969][ T1667] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 170.598954][ T1667] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 170.598968][ T1667] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.598977][ T1667] usb 7-1: config 0 has no interfaces? [ 170.598991][ T1667] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.600407][ T1667] usb 7-1: config 0 descriptor?? [ 170.804755][ T63] usb 7-1: USB disconnect, device number 13 [ 170.810778][ T44] audit: type=1400 audit(1790280170.338:536): avc: denied { mount } for pid=8983 comm="syz.0.1205" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.574317][ T8992] syzkaller0: entered promiscuous mode [ 171.574337][ T8992] syzkaller0: entered allmulticast mode [ 171.689246][ T44] audit: type=1400 audit(1790280171.218:537): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.856531][ T2333] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 172.007566][ T2333] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 172.008695][ T2333] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 172.008716][ T2333] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.008731][ T2333] usb 6-1: config 0 has no interfaces? [ 172.008841][ T2333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.015210][ T2333] usb 6-1: config 0 descriptor?? [ 172.057150][ T1667] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 172.209969][ T1667] usb 8-1: unable to get BOS descriptor or descriptor too short [ 172.209997][ T1667] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 172.210991][ T1667] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 172.213144][ T1667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.213157][ T1667] usb 8-1: Product: syz [ 172.213164][ T1667] usb 8-1: Manufacturer: syz [ 172.213172][ T1667] usb 8-1: SerialNumber: syz [ 172.220061][ T5811] usb 6-1: USB disconnect, device number 11 [ 172.422863][ T1667] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 173.069091][ T1667] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 173.113491][ T1667] usb 8-1: USB disconnect, device number 15 [ 173.147840][ T7729] udevd[7729]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.087470][ T1667] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 174.247515][ T1667] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 174.248517][ T1667] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 174.248531][ T1667] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.248541][ T1667] usb 6-1: config 0 has no interfaces? [ 174.248554][ T1667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.304553][ T1667] usb 6-1: config 0 descriptor?? [ 174.322614][ T44] audit: type=1400 audit(1790280173.848:538): avc: denied { write } for pid=9064 comm="syz.2.1235" name="functions" dev="configfs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.323537][ T44] audit: type=1400 audit(1790280173.848:539): avc: denied { write } for pid=9064 comm="syz.2.1235" name="configs" dev="configfs" ino=12323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.324795][ T44] audit: type=1400 audit(1790280173.848:540): avc: denied { write } for pid=9064 comm="syz.2.1235" name="c.1" dev="configfs" ino=26402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.326185][ T44] audit: type=1400 audit(1790280173.848:541): avc: denied { write } for pid=9064 comm="syz.2.1235" name="usb_gadget" dev="configfs" ino=18301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.332191][ T44] audit: type=1400 audit(1790280173.858:542): avc: denied { read } for pid=9064 comm="syz.2.1235" name="UDC" dev="configfs" ino=26407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 174.340577][ T9065] UDC core: g1: couldn't find an available UDC or it's busy [ 174.404308][ T44] audit: type=1400 audit(1790280173.928:543): avc: denied { ioctl } for pid=9064 comm="syz.2.1235" path="/dev/sg1" dev="devtmpfs" ino=726 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.509222][ T8497] usb 6-1: USB disconnect, device number 12 [ 174.951915][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 175.043551][ T9080] binder: 9079:9080 ioctl c0306201 200000000080 returned -14 [ 175.316607][ T8497] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 175.468831][ T8497] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.474819][ T8497] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.474964][ T8497] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 175.475080][ T8497] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.475357][ T8497] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 175.475437][ T8497] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 175.505816][ T8497] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.505880][ T8497] usb 6-1: Product: syz [ 175.505988][ T8497] usb 6-1: Manufacturer: syz [ 175.537881][ T8497] cdc_wdm 6-1:1.0: skipping garbage [ 175.537931][ T8497] cdc_wdm 6-1:1.0: skipping garbage [ 175.538489][ T8497] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 175.706521][ T1478] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.734289][ T5883] usb 6-1: USB disconnect, device number 13 [ 175.867622][ T1478] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 175.868726][ T1478] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 175.868742][ T1478] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.868752][ T1478] usb 5-1: config 0 has no interfaces? [ 175.868765][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.870586][ T1478] usb 5-1: config 0 descriptor?? [ 176.074236][ T5883] usb 5-1: USB disconnect, device number 12 [ 176.290932][ T9109] binder: 9108:9109 ioctl c0306201 200000000080 returned -14 [ 176.622411][ T44] audit: type=1400 audit(1790280176.148:544): avc: denied { setopt } for pid=9122 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.637706][ T9123] geneve2: entered promiscuous mode [ 177.346993][ T44] audit: type=1400 audit(1790280176.818:545): avc: denied { read } for pid=9128 comm="syz.2.1262" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 177.347088][ T44] audit: type=1400 audit(1790280176.818:546): avc: denied { open } for pid=9128 comm="syz.2.1262" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 177.588931][ T9135] binder: 9134:9135 ioctl c0306201 200000000080 returned -14 [ 177.922822][ T9146] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1269'. [ 178.186571][ T8497] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.387622][ T8497] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 178.389275][ T8497] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 178.389289][ T8497] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.389480][ T8497] usb 5-1: config 0 has no interfaces? [ 178.389496][ T8497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.395018][ T8497] usb 5-1: config 0 descriptor?? [ 178.620927][ T5883] usb 5-1: USB disconnect, device number 13 [ 179.162789][ T9161] binder: 9160:9161 ioctl c0306201 200000000080 returned -14 [ 179.310502][ T9165] kvm: pic: non byte write [ 179.461421][ T9173] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1280'. [ 179.588827][ T9182] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 179.640141][ T9186] fuse: Bad value for 'fd' [ 179.878883][ T44] audit: type=1400 audit(1790280179.408:547): avc: denied { name_bind } for pid=9192 comm="syz.2.1288" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 180.332836][ T9206] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 180.398185][ T9209] fuse: Bad value for 'fd' [ 180.458296][ T2333] logitech-hidpp-device 0005:046D:B012.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 180.489563][ T9218] fido_id[9218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.631058][ T9231] netlink: 556 bytes leftover after parsing attributes in process `syz.1.1303'. [ 180.678714][ T9235] syzkaller0: entered promiscuous mode [ 180.678727][ T9235] syzkaller0: entered allmulticast mode [ 180.765313][ T9239] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1308'. [ 181.121147][ T9257] netlink: 556 bytes leftover after parsing attributes in process `syz.1.1315'. [ 181.196997][ T9259] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1316'. [ 181.307277][ T1478] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.320008][ T9263] syzkaller0: entered promiscuous mode [ 181.320027][ T9263] syzkaller0: entered allmulticast mode [ 181.477287][ T1478] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 181.482096][ T1478] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 181.482122][ T1478] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.482138][ T1478] usb 5-1: config 0 has no interfaces? [ 181.482164][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.496358][ T1478] usb 5-1: config 0 descriptor?? [ 181.701286][ T1478] usb 5-1: USB disconnect, device number 14 [ 181.998091][ T9273] FAULT_INJECTION: forcing a failure. [ 181.998091][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 181.998131][ T9273] CPU: 3 UID: 0 PID: 9273 Comm: syz.2.1322 Not tainted syzkaller #0 PREEMPT(full) [ 181.998154][ T9273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.998166][ T9273] Call Trace: [ 181.998172][ T9273] [ 181.998180][ T9273] dump_stack_lvl+0x100/0x190 [ 181.998219][ T9273] should_fail_ex.cold+0x5/0xa [ 181.998248][ T9273] should_failslab+0xc2/0x120 [ 181.998279][ T9273] __kmalloc_noprof+0xfc/0x840 [ 181.998302][ T9273] ? rcu_is_watching+0x13/0xc0 [ 181.998329][ T9273] ? tomoyo_encode2+0xfb/0x3c0 [ 181.998359][ T9273] tomoyo_encode2+0xfb/0x3c0 [ 181.998388][ T9273] tomoyo_encode+0x29/0x50 [ 181.998411][ T9273] tomoyo_realpath_from_path+0x18c/0x690 [ 181.998443][ T9273] tomoyo_path_perm+0x276/0x460 [ 181.998462][ T9273] ? tomoyo_path_perm+0x262/0x460 [ 181.998485][ T9273] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 181.998509][ T9273] ? __lock_acquire+0x5c0/0x1f40 [ 181.998553][ T9273] ? __fget_files+0x21f/0x3d0 [ 181.998584][ T9273] security_inode_getattr+0x116/0x280 [ 181.998608][ T9273] vfs_fstat+0x4b/0xe0 [ 181.998636][ T9273] __do_sys_newfstat+0x8b/0x110 [ 181.998662][ T9273] ? __pfx___do_sys_newfstat+0x10/0x10 [ 181.998712][ T9273] ? __pfx_ksys_write+0x10/0x10 [ 181.998743][ T9273] do_syscall_64+0x123/0x790 [ 181.998781][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.998801][ T9273] RIP: 0033:0x7efeedb9e159 [ 181.998818][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.998837][ T9273] RSP: 002b:00007efeeeb0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 181.998856][ T9273] RAX: ffffffffffffffda RBX: 00007efeede25fa0 RCX: 00007efeedb9e159 [ 181.998869][ T9273] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 181.998881][ T9273] RBP: 00007efeedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 181.998892][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.998903][ T9273] R13: 00007efeede26038 R14: 00007efeede25fa0 R15: 00007ffe249b3118 [ 181.998928][ T9273] [ 181.998947][ T9273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.346336][ T9279] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1325'. [ 182.680686][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 182.680754][ T9289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.680761][ T9289] IPv6: NLM_F_CREATE should be set when creating new route [ 182.837254][ T44] audit: type=1400 audit(1790280182.368:548): avc: denied { create } for pid=9290 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.843519][ T9291] syz.3.1331 uses obsolete (PF_INET,SOCK_PACKET) [ 183.193236][ T5091] Bluetooth: hci3: unexpected cc 0x080f length: 3 > 1 [ 183.193269][ T5091] Bluetooth: hci3: unexpected event for opcode 0x080f [ 183.205436][ T9312] binder: 9311:9312 ioctl c0306201 200000000080 returned -14 [ 183.212285][ T9312] binder: 9311:9312 ioctl c0306201 0 returned -14 [ 183.234675][ T9314] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1341'. [ 183.272040][ T1478] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 183.439899][ T1478] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 183.441441][ T1478] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 183.441463][ T1478] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.441478][ T1478] usb 7-1: config 0 has no interfaces? [ 183.441502][ T1478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.448302][ T1478] usb 7-1: config 0 descriptor?? [ 183.658998][ T1478] usb 7-1: USB disconnect, device number 14 [ 183.790661][ T9339] binder: BINDER_SET_CONTEXT_MGR already set [ 183.790675][ T9339] binder: 9337:9339 ioctl 4018620d 2000000002c0 returned -16 [ 184.650294][ T44] audit: type=1400 audit(1790280184.178:549): avc: denied { write } for pid=9363 comm="syz.3.1361" name="functions" dev="configfs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.658828][ T9366] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1362'. [ 184.692208][ T9368] geneve2: entered promiscuous mode [ 184.756568][ T1667] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 184.812656][ T44] audit: type=1400 audit(1790280184.338:550): avc: denied { write } for pid=9376 comm="syz.0.1367" name="functions" dev="c ** replaying previous printk message ** [ 184.812656][ T44] audit: type=1400 audit(1790280184.338:550): avc: denied { write } for pid=9376 comm="syz.0.1367" name="functions" dev="configfs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.817118][ T44] audit: type=1400 audit(1790280184.348:551): avc: denied { write } for pid=9376 comm="syz.0.1367" name="uncompressed" dev="configfs" ino=32016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.818956][ T44] audit: type=1400 audit(1790280184.348:552): avc: denied { write } for pid=9376 comm="syz.0.1367" name="u" dev="configfs" ino=32025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.820939][ T9377] [ 184.845647][ T9377] ====================================================== [ 184.847953][ T9377] WARNING: possible circular locking dependency detected [ 184.850564][ T9377] syzkaller #0 Not tainted [ 184.852503][ T9377] ------------------------------------------------------ [ 184.854853][ T9377] syz.0.1367/9377 is trying to acquire lock: [ 184.856783][ T9377] ffffffff903fe368 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 184.861028][ T9377] [ 184.861028][ T9377] but task is already holding lock: [ 184.863816][ T9377] ffff888034549f70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 184.866714][ T9377] [ 184.866714][ T9377] which lock already depends on the new lock. [ 184.866714][ T9377] [ 184.870055][ T9377] [ 184.870055][ T9377] the existing dependency chain (in reverse order) is: [ 184.872890][ T9377] [ 184.872890][ T9377] -> #4 (&p->frag_sem){++++}-{4:4}: [ 184.875206][ T9377] lock_acquire+0x1d1/0x380 [ 184.876831][ T9377] down_write_killable+0x93/0x240 [ 184.878682][ T9377] configfs_rmdir+0x3fa/0x950 [ 184.880309][ T9377] vfs_rmdir+0x328/0x8a0 [ 184.881830][ T9377] filename_rmdir+0x31a/0x5c0 [ 184.883474][ T9377] __x64_sys_rmdir+0x46/0x70 [ 184.885072][ T9377] do_syscall_64+0x123/0x790 [ 184.886684][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.888841][ T9377] [ 184.888841][ T9377] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 184.891639][ T9377] lock_acquire+0x1d1/0x380 [ 184.893250][ T9377] down_write+0x8b/0x1f0 [ 184.894778][ T9377] configfs_depend_item_unlocked+0xf3/0x6a0 [ 184.896860][ T9377] usbg_make_tpg+0x251/0x610 [ 184.898532][ T9377] target_fabric_make_tpg+0xab/0x8c0 [ 184.900355][ T9377] configfs_mkdir+0x525/0xd40 [ 184.901994][ T9377] vfs_mkdir+0x364/0x850 [ 184.903509][ T9377] filename_mkdirat+0x48b/0x5e0 [ 184.905181][ T9377] __x64_sys_mkdirat+0x89/0xc0 [ 184.906843][ T9377] do_syscall_64+0x123/0x790 [ 184.908529][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.910557][ T9377] [ 184.910557][ T9377] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 184.912984][ T9377] lock_acquire+0x1d1/0x380 [ 184.914630][ T9377] __mutex_lock+0x1a4/0x1bd0 [ 184.916231][ T9377] tcm_alloc_inst+0x5f/0x1e0 [ 184.917958][ T9377] try_get_usb_function_instance+0x136/0x1f0 [ 184.920018][ T9377] usb_get_function_instance+0x16/0x70 [ 184.921895][ T9377] function_make+0x18c/0x3f0 [ 184.923536][ T9377] configfs_mkdir+0x525/0xd40 [ 184.925156][ T9377] vfs_mkdir+0x364/0x850 [ 184.926668][ T9377] filename_mkdirat+0x48b/0x5e0 [ 184.928370][ T9377] __x64_sys_mkdirat+0x89/0xc0 [ 184.930096][ T9377] do_syscall_64+0x123/0x790 [ 184.931730][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.933979][ T9377] [ 184.933979][ T9377] -> #1 (func_lock){+.+.}-{4:4}: [ 184.936158][ T9377] lock_acquire+0x1d1/0x380 [ 184.937754][ T9377] __mutex_lock+0x1a4/0x1bd0 [ 184.939366][ T9377] try_get_usb_function_instance+0x26/0x1f0 [ 184.941329][ T9377] usb_get_function_instance+0x16/0x70 [ 184.943227][ T9377] function_make+0x18c/0x3f0 [ 184.944811][ T9377] configfs_mkdir+0x525/0xd40 [ 184.946424][ T9377] vfs_mkdir+0x364/0x850 [ 184.947988][ T9377] filename_mkdirat+0x48b/0x5e0 [ 184.949814][ T9377] __x64_sys_mkdirat+0x89/0xc0 [ 184.951464][ T9377] do_syscall_64+0x123/0x790 [ 184.953075][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.955064][ T9377] [ 184.955064][ T9377] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 184.957520][ T9377] check_prev_add+0xeb/0xe60 [ 184.959151][ T9377] __lock_acquire+0x1528/0x1f40 [ 184.960750][ T9377] lock_acquire+0x1d1/0x380 [ 184.962281][ T9377] __mutex_lock+0x1a4/0x1bd0 [ 184.963858][ T9377] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 184.965963][ T9377] configfs_write_iter+0x302/0x4e0 [ 184.967000][ T1667] usb 7-1: device descriptor read/64, error -71 [ 184.969825][ T9377] vfs_write+0x6af/0x1050 [ 184.971293][ T9377] ksys_write+0x12a/0x250 [ 184.972818][ T9377] do_syscall_64+0x123/0x790 [ 184.974416][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.976380][ T9377] [ 184.976380][ T9377] other info that might help us debug this: [ 184.976380][ T9377] [ 184.979815][ T9377] Chain exists of: [ 184.979815][ T9377] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#25 --> &p->frag_sem [ 184.979815][ T9377] [ 184.985354][ T9377] Possible unsafe locking scenario: [ 184.985354][ T9377] [ 184.988258][ T9377] CPU0 CPU1 [ 184.990320][ T9377] ---- ---- [ 184.992521][ T9377] rlock(&p->frag_sem); [ 184.994352][ T9377] lock(&sb->s_type->i_mutex_key#25); [ 184.997693][ T9377] lock(&p->frag_sem); [ 185.000448][ T9377] lock(gadget_subsys.su_mutex); [ 185.002436][ T9377] [ 185.002436][ T9377] *** DEADLOCK *** [ 185.002436][ T9377] [ 185.005022][ T9377] locks held by syz.0.1367/9377: 4, last CPU#3: [ 185.006971][ T9377] #0: ffff888014193970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 185.009902][ T9377] #1: ffff888023cca460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 185.012703][ T9377] #2: ffff88803d3b7880 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 185.015908][ T9377] #3: ffff888034549f70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 185.019298][ T9377] [ 185.019298][ T9377] stack backtrace: [ 185.021354][ T9377] CPU: 3 UID: 0 PID: 9377 Comm: syz.0.1367 Not tainted syzkaller #0 PREEMPT(full) [ 185.025094][ T9377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.028732][ T9377] Call Trace: [ 185.029782][ T9377] [ 185.030722][ T9377] dump_stack_lvl+0x100/0x190 [ 185.032107][ T9377] print_circular_bug.cold+0x178/0x1be [ 185.033763][ T9377] check_noncircular+0x146/0x160 [ 185.035664][ T9377] check_prev_add+0xeb/0xe60 [ 185.037168][ T9377] __lock_acquire+0x1528/0x1f40 [ 185.039091][ T9377] ? __pfx_stack_trace_save+0x10/0x10 [ 185.040986][ T9377] lock_acquire+0x1d1/0x380 [ 185.042427][ T9377] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 185.044463][ T9377] ? __pfx___might_resched+0x10/0x10 [ 185.046121][ T9377] ? __lock_acquire+0x5c0/0x1f40 [ 185.047833][ T9377] __mutex_lock+0x1a4/0x1bd0 [ 185.049661][ T9377] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 185.051769][ T9377] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 185.053687][ T9377] ? __pfx___mutex_lock+0x10/0x10 [ 185.055166][ T9377] ? find_held_lock+0x2b/0x80 [ 185.056673][ T9377] ? __might_fault+0xc5/0x140 [ 185.058150][ T9377] ? __might_fault+0xc5/0x140 [ 185.059696][ T9377] ? lock_acquire+0x1d1/0x380 [ 185.061516][ T9377] ? configfs_write_iter+0x218/0x4e0 [ 185.063782][ T9377] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 185.066543][ T9377] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 185.069232][ T9377] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 185.072127][ T9377] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 185.074527][ T9377] ? configfs_write_iter+0x388/0x4e0 [ 185.076792][ T9377] configfs_write_iter+0x302/0x4e0 [ 185.078910][ T9377] vfs_write+0x6af/0x1050 [ 185.080325][ T9377] ? __pfx_configfs_write_iter+0x10/0x10 [ 185.082125][ T9377] ? __pfx_vfs_write+0x10/0x10 [ 185.083763][ T9377] ? find_held_lock+0x2b/0x80 [ 185.085347][ T9377] ksys_write+0x12a/0x250 [ 185.086842][ T9377] ? __pfx_ksys_write+0x10/0x10 [ 185.088661][ T9377] do_syscall_64+0x123/0x790 [ 185.090396][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.092058][ T9377] RIP: 0033:0x7fa52759e159 [ 185.093480][ T9377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.099460][ T9377] RSP: 002b:00007fa5284ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.102073][ T9377] RAX: ffffffffffffffda RBX: 00007fa527825fa0 RCX: 00007fa52759e159 [ 185.104598][ T9377] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 185.106998][ T9377] RBP: 00007fa52763506b R08: 0000000000000000 R09: 0000000000000000 [ 185.110088][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.112885][ T9377] R13: 00007fa527826038 R14: 00007fa527825fa0 R15: 00007ffc734a0458 [ 185.115409][ T9377] [ 185.126565][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 185.246550][ T1667] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 185.298449][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.298483][ T25] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 185.299423][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.299442][ T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.299469][ T25] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 185.299496][ T25] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 185.299522][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 185.299543][ T25] usb 6-1: config 1 interface 1 has no altsetting 0 [ 185.301952][ T25] usb 6-1: string descriptor 0 read error: -22 [ 185.302017][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.376554][ T1667] usb 7-1: device descriptor read/64, error -71 [ 185.486891][ T1667] usb usb7-port1: attempt power cycle [ 185.507278][ T25] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 185.708616][ T25] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 185.708645][ T25] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 185.708660][ T25] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 185.715188][ T25] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 185.721042][ T25] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 185.724598][ T25] usb 6-1: USB disconnect, device number 14 [ 185.836621][ T1667] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 185.856948][ T1667] usb 7-1: device descriptor read/8, error -71 [ 186.096518][ T1667] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 186.116874][ T1667] usb 7-1: device descriptor read/8, error -71 [ 186.236670][ T1667] usb usb7-port1: unable to enumerate USB device [ 194.379540][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379580][ T1441] ieee802154 phy1 wpan1: encryption failed: -22