last executing test programs: 2.952322346s ago: executing program 1 (id=1282): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2.912721531s ago: executing program 1 (id=1285): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='o'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.94184052s ago: executing program 1 (id=1296): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller1\x00', @ifru_data=0x0}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="a952bf081a2c7257c6711fa762abf1ee372fb95c77e62031d03e9632cc6db6b140288ffbd158ae080ce977400dbf1cbe4f846d4725ae1b908bac8b8c1177d0f59a0f18a5c2d21705a5d581fda1e63605144efe2ea8960c1ef32c6012e37f2ed2ef35982766bb77cc3d085349bb7b2eac3439fbd7b4f88fe9b063ddfdb5d97bf2571edcaeca4fd18590a3070ee46aef3b2f4ad76526d8a12941f58e318ab37b3c7fed7cb2eb8f438ef0310b7b7a0fd81577c61eeab15ae1", 0xb7}, {&(0x7f0000000180)="dc7080cfa627b041f1dd20217f5e91de47cb20b81fcd6814d619b58955e28e5a6a94bf88a03cb6ba658b264c9be8d486a1e9d1e05de89d8c3161d8e1de9bf1c551b88a2b98ec31d7b4ca45b5a44269ed63c27ab7f25fc7ceeaecddcb910a03d174f8a97475118baaf03691e376f8320816238743952a829acfd4abf73dff460e36bb104ffd66faaf03e7fec1020b6bb8b76bfee67b7ea4781bd15e115f", 0x9d}, {&(0x7f0000000240)}, {&(0x7f0000000280)="4d5179c9c81f36caa6b210a0ce55deba39e38533a5a990a6913f0b77a48843bdb55060ffa98f2f6b4976d6e1e40e6fc54cb0821968859e0daf81409fd14b38c241483b3928aa0f8d03932c1a84a8c7c6a134ccc9b13b23fa7114a6551c71e48c2b93aa8aa4327c2c9af63724c55155793d3c4221ac1ed77e24098e7c36c6493cd9f9415a1a3ee5270edc76be99649593210358f60ca2afeb2277e8a4fd043f428353dadb1b1fe1", 0xa7}], 0x4) recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) 1.67324607s ago: executing program 2 (id=1300): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, 0x0, 0x0}) (fail_nth: 1) 1.41093904s ago: executing program 2 (id=1302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="19bc0000000010000000000000000000", 0x10) 1.34354162s ago: executing program 2 (id=1303): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="21000000000000002cff00001c00028005002100010400080500010004"], 0x4c}}, 0x0) 1.226598069s ago: executing program 3 (id=1305): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 1.225589197s ago: executing program 2 (id=1306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (fail_nth: 1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="19bc0000000010000000000000000000", 0x10) 1.144024652s ago: executing program 3 (id=1307): r0 = socket(0x2, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) exit(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000540)="19bc0000000010000000000000000000", 0x10) 1.063154556s ago: executing program 1 (id=1309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xc, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x8, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x4, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x204, 0x3, 0x2000}, {0x32d, 0x8, 0x2, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0xfffffffd, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0x5, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xf, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x5, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x6}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x2, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x1, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xfc, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x81, 0x103, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x5, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffbff, 0xe6b, 0x8, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x8000, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x7, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x9, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x1, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x9cd97d8320141b74}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 955.618653ms ago: executing program 2 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x40050) listen(0xffffffffffffffff, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 955.421783ms ago: executing program 0 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 1) 887.993988ms ago: executing program 1 (id=1312): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3970}}, './file0\x00'}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r2, &(0x7f0000000440)=[{0x4, 0xffff, 0x1000}, {0x2, 0x8001, 0x800}], 0x2) semop(r2, &(0x7f0000000140)=[{0x4, 0x741d}], 0x1) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000080)) 841.603567ms ago: executing program 0 (id=1313): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x2002, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4c22, 0x3, @private1, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='configfs\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x70}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c40000010fc0204000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="001000008a0000002c00128008000100736974002000028014000b00fc02000000000000000000000000000108000200ffffffff"], 0x4c}, 0x1, 0x2000000000000000}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001"], 0x30}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000001280)=""/226, 0x4a, 0xe2, 0x1}, 0x20) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00') mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0xfffc, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) sendmsg(r0, &(0x7f0000003080), 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) 532.563479ms ago: executing program 0 (id=1314): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 442.070198ms ago: executing program 0 (id=1315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='o'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 234.333469ms ago: executing program 3 (id=1316): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/hci\x00') fchdir(r1) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) 233.777972ms ago: executing program 0 (id=1317): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (fail_nth: 1) 233.657543ms ago: executing program 3 (id=1318): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5) 20.979431ms ago: executing program 3 (id=1319): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5) (fail_nth: 1) 20.507835ms ago: executing program 3 (id=1320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x90043, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000040)={0x9, 0x6, 0xfff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b4d9061bfa016a1, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') fcntl$lock(r4, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) userfaultfd(0x40000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c1c000/0x1000)=nil, 0x1000}, 0x2}) syz_kvm_assert_syzos_kvm_exit$x86(r10, 0x5) 20.324702ms ago: executing program 2 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'lo\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x600}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 20.108593ms ago: executing program 1 (id=1322): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (fail_nth: 1) 0s ago: executing program 0 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) kernel console output (not intermixed with test programs): - failed, -32 [ 96.540342][ T6802] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 96.551495][ T6802] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 96.571124][ T61] usb 7-1: USB disconnect, device number 11 [ 96.665237][ T61] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 96.684540][ T61] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 96.692085][ T61] ti_usb_3410_5052 7-1:2.0: device disconnected [ 96.891480][ T6853] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 97.001656][ T6853] macvlan2: entered promiscuous mode [ 97.019322][ T6853] macvlan2: entered allmulticast mode [ 97.030454][ T6853] bond1: entered promiscuous mode [ 97.035772][ T6853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.068490][ T6853] bond1: left promiscuous mode [ 97.366028][ T42] audit: type=1400 audit(1786056984.785:456): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.432689][ T5094] Bluetooth: Unexpected continuation frame (len 12) [ 97.490216][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 97.511968][ T6858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.518253][ T42] audit: type=1400 audit(1786056984.965:457): avc: denied { search } for pid=6857 comm="syz.2.354" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.600389][ T42] audit: type=1400 audit(1786056984.975:458): avc: denied { search } for pid=6857 comm="syz.2.354" name="events" dev="tracefs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.640202][ T42] audit: type=1400 audit(1786056984.975:459): avc: denied { search } for pid=6857 comm="syz.2.354" name="sched" dev="tracefs" ino=16606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.712250][ T42] audit: type=1400 audit(1786056984.975:460): avc: denied { search } for pid=6857 comm="syz.2.354" name="sched_switch" dev="tracefs" ino=16608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.729959][ T42] audit: type=1400 audit(1786056984.975:461): avc: denied { write } for pid=6857 comm="syz.2.354" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.747721][ T42] audit: type=1400 audit(1786056984.985:462): avc: denied { open } for pid=6857 comm="syz.2.354" path="/75/debug/tracing/events/sched/sched_switch/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.765315][ T42] audit: type=1400 audit(1786056984.995:463): avc: denied { unlink } for pid=6859 comm="syz.3.355" name="#18" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.830553][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.867568][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.986888][ T6869] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x40 [ 98.012526][ T6869] i2c i2c-1: new_device: Instantiated device maxtcpc at 0x40 [ 98.020819][ T6347] maxtcpc 1-0040: error -EIO: Failed to read TCPC_POWER_STATUS [ 98.022853][ T182] maxtcpc 0-0040: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 98.028103][ T6347] maxtcpc 1-0040: probe with driver maxtcpc failed with error -5 [ 98.223047][ T42] audit: type=1326 audit(1786056985.675:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe66197e57 code=0x7ffc0000 [ 99.156713][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 99.582729][ T6894] syz_tun: entered promiscuous mode [ 99.640865][ T6894] vlan2: entered promiscuous mode [ 99.773218][ T6893] i801_smbus 0000:00:03.0: SMBus using polling [ 99.847614][ T6902] nvmet: adding nsid 1 to subsystem testnqn [ 100.006113][ T6893] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD [ 100.084222][ T6906] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 100.205993][ T6906] macvlan2: entered promiscuous mode [ 100.242635][ T6906] macvlan2: entered allmulticast mode [ 100.246775][ T6906] bond1: entered promiscuous mode [ 100.330884][ T6906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.404351][ T6906] bond1: left promiscuous mode [ 100.417605][ T6924] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.645050][ T42] kauditd_printk_skb: 1439 callbacks suppressed [ 101.645085][ T42] audit: type=1400 audit(1786056989.105:1904): avc: denied { block_suspend } for pid=6946 comm="syz.2.384" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.332517][ T42] audit: type=1400 audit(1786056989.785:1905): avc: denied { ioctl } for pid=6954 comm="syz.2.386" path="socket:[17729]" dev="sockfs" ino=17729 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.530339][ T42] audit: type=1800 audit(1786056990.985:1906): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.389" name="size" dev="configfs" ino=16970 res=0 errno=0 [ 103.550398][ T42] audit: type=1800 audit(1786056991.005:1907): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.389" name="zoned" dev="configfs" ino=16971 res=0 errno=0 [ 103.561023][ T42] audit: type=1800 audit(1786056991.005:1908): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.389" name="zone_size" dev="configfs" ino=16972 res=0 errno=0 [ 103.579160][ T42] audit: type=1800 audit(1786056991.005:1909): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.389" name="power" dev="configfs" ino=16973 res=0 errno=0 [ 103.875497][ T42] audit: type=1400 audit(1786056991.315:1910): avc: denied { write } for pid=6978 comm="syz.0.391" name="usb_gadget" dev="configfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.902470][ T42] audit: type=1400 audit(1786056991.315:1911): avc: denied { write } for pid=6978 comm="syz.0.391" name="functions" dev="configfs" ino=15899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.938856][ T42] audit: type=1400 audit(1786056991.315:1912): avc: denied { write } for pid=6978 comm="syz.0.391" name="configs" dev="configfs" ino=15900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.977376][ T42] audit: type=1400 audit(1786056991.325:1913): avc: denied { write } for pid=6978 comm="syz.0.391" name="c.1" dev="configfs" ino=15907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.403943][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 108.592514][ T7010] syzkaller0: entered promiscuous mode [ 108.595826][ T7010] syzkaller0: entered allmulticast mode [ 108.752988][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 108.753003][ T42] audit: type=1400 audit(1786056996.205:1916): avc: denied { bind } for pid=7012 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.804350][ T42] audit: type=1400 audit(1786056996.255:1917): avc: denied { setopt } for pid=7012 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.115579][ T7020] tipc: Enabling of bearer rejected, failed to enable media [ 109.135601][ T42] audit: type=1400 audit(1786056996.585:1918): avc: denied { setopt } for pid=7027 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.195263][ T42] audit: type=1400 audit(1786056996.605:1919): avc: denied { write } for pid=7027 comm="syz.1.401" name="os_desc" dev="configfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.223317][ T42] audit: type=1400 audit(1786056996.605:1920): avc: denied { write } for pid=7027 comm="syz.1.401" name="os_desc" dev="configfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.500396][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.504998][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.742203][ T7033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.807427][ T7033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.606474][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.616734][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.802943][ T5814] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.812049][ T5814] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.911424][ T42] audit: type=1400 audit(1786056998.355:1921): avc: denied { read write } for pid=7060 comm="syz.1.407" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.935288][ T42] audit: type=1400 audit(1786056998.355:1922): avc: denied { open } for pid=7060 comm="syz.1.407" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.973168][ T42] audit: type=1400 audit(1786056998.355:1923): avc: denied { ioctl } for pid=7060 comm="syz.1.407" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 111.148740][ T7062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.160774][ T42] audit: type=1400 audit(1786056998.615:1924): avc: denied { remount } for pid=7069 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.249418][ T5750] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 111.879237][ T7096] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 112.025044][ T42] audit: type=1400 audit(1786056999.475:1925): avc: denied { create } for pid=7100 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.152523][ T7103] ubi16: attaching mtd0 [ 112.183911][ T7103] ubi16: scanning is finished [ 112.189597][ T7103] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 112.222537][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 112.407499][ T7103] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 112.617397][ T7110] comedi comedi3: dt2817: I/O base address or length out of range [ 113.440412][ T7126] i801_smbus 0000:00:03.0: SMBus is busy, can't use it! [ 113.487968][ T7124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7124 comm=syz.2.434 [ 113.505077][ T5750] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 113.740120][ T1358] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 113.805037][ T7088] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.922855][ T1358] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 113.927269][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.937706][ T1358] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.961957][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.985996][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.995486][ T1358] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 114.002106][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 114.026285][ T1358] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.052051][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.078997][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.106559][ T1358] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 114.135878][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 114.142950][ T1358] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.150922][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.169487][ T1358] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.196555][ T1358] usb 7-1: string descriptor 0 read error: -22 [ 114.212087][ T1358] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.221162][ T1358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.270651][ T1358] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 114.531237][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 114.531256][ T42] audit: type=1400 audit(1786057001.985:1931): avc: denied { write } for pid=7150 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 114.532864][ T1358] usb 7-1: USB disconnect, device number 12 [ 114.783496][ T42] audit: type=1400 audit(1786057002.235:1932): avc: denied { kexec_image_load } for pid=7154 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 115.094963][ T42] audit: type=1800 audit(1786057002.545:1933): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.454" name="zoned" dev="configfs" ino=17923 res=0 errno=0 [ 115.152365][ T42] audit: type=1800 audit(1786057002.605:1934): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.454" name="memory_backed" dev="configfs" ino=17924 res=0 errno=0 [ 115.174088][ T42] audit: type=1800 audit(1786057002.605:1935): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.454" name="zone_nr_conv" dev="configfs" ino=17925 res=0 errno=0 [ 115.196317][ T42] audit: type=1800 audit(1786057002.615:1936): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.454" name="power" dev="configfs" ino=17926 res=0 errno=0 [ 115.361454][ T42] audit: type=1400 audit(1786057002.805:1937): avc: denied { create } for pid=7172 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.437432][ T42] audit: type=1400 audit(1786057002.885:1938): avc: denied { write } for pid=7172 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.541388][ T42] audit: type=1800 audit(1786057002.985:1939): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.458" name="size" dev="configfs" ino=16223 res=0 errno=0 [ 115.554986][ T42] audit: type=1800 audit(1786057002.985:1940): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.458" name="zoned" dev="configfs" ino=16224 res=0 errno=0 [ 116.582552][ T7214] bridge_slave_0: left allmulticast mode [ 116.598097][ T7214] bridge_slave_0: left promiscuous mode [ 116.620255][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.640167][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 116.667008][ T7214] bridge_slave_1: left allmulticast mode [ 116.675878][ T7214] bridge_slave_1: left promiscuous mode [ 116.678693][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.696594][ T7214] bond0: (slave bond_slave_0): Releasing backup interface [ 116.709440][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 116.713333][ T7222] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.717463][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 116.762649][ T7214] bond0: (slave bond_slave_1): Releasing backup interface [ 116.875157][ T7214] team0: Port device team_slave_0 removed [ 116.893798][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 116.913180][ T7214] team0: Port device team_slave_1 removed [ 116.922040][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.927113][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.938730][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.944577][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.962507][ T7214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.171981][ C3] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 117.175733][ T7219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.514532][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.637892][ T7220] bond3: (slave bond0): Enslaving as an active interface with a down link [ 118.044908][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.061738][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.418042][ T7277] bridge_slave_0: left allmulticast mode [ 118.423322][ T7277] bridge_slave_0: left promiscuous mode [ 118.429649][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.540579][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 118.541342][ T7277] bridge_slave_1: left allmulticast mode [ 118.553561][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 118.606298][ T7277] bridge_slave_1: left promiscuous mode [ 118.609283][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.723624][ T7277] bond0: (slave bond_slave_0): Releasing backup interface [ 118.814544][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.832978][ T7277] bond0: (slave bond_slave_1): Releasing backup interface [ 118.849788][ T7277] team0: Port device team_slave_0 removed [ 118.882818][ T7277] team0: Port device team_slave_1 removed [ 118.915887][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.960366][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.966567][ T7277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.970176][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 119.028026][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.048196][ T5888] usb 5-1: string descriptor 0 read error: -22 [ 119.058548][ T7280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.079219][ T5888] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 119.083090][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 119.083095][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.092743][ T5888] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 119.092779][ T5888] dw2102: su3000_power_ctrl: 1, initialized 0 [ 119.092794][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 119.101438][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.110702][ T5888] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 119.130605][ T5888] usb 5-1: media controller created [ 119.134422][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.140729][ T5888] dw2102: i2c transfer failed. [ 119.145700][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.147061][ T7282] bond2: (slave bond0): Enslaving as an active interface with a down link [ 119.148389][ T5888] dw2102: i2c transfer failed. [ 119.148438][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.148456][ T5888] dw2102: i2c transfer failed. [ 119.162396][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.166060][ T5888] dw2102: i2c transfer failed. [ 119.168679][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.171716][ T5888] dw2102: i2c transfer failed. [ 119.179125][ T5888] dvb-usb: bulk message failed: -22 (6/0) [ 119.190750][ T5888] dw2102: i2c transfer failed. [ 119.194157][ T5888] dvb-usb: MAC address: 02:02:02:02:02:02 [ 119.215251][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.244568][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 119.264407][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 119.307278][ T5888] dw2102: command 0x0e transfer failed. [ 119.328821][ T7283] i801_smbus 0000:00:03.0: SMBus is busy, can't use it! [ 119.345589][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 119.345606][ T5888] dw2102: command 0x0e transfer failed. [ 119.656134][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 119.659604][ T5888] dw2102: command 0x0e transfer failed. [ 119.681746][ T5888] dvb-usb: bulk message failed: -22 (3/0) [ 119.705982][ T5888] dw2102: command 0x0e transfer failed. [ 119.748088][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 119.767705][ T5888] dw2102: command 0x51 transfer failed. [ 119.791697][ T5750] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 119.830929][ T5888] DVB: Unable to find symbol ds3000_attach() [ 119.851705][ T7316] team0: Port device veth0 removed [ 119.862252][ T5888] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 119.898300][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 119.901725][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 119.911964][ T7316] bridge_slave_0: left allmulticast mode [ 119.934431][ T7316] bridge_slave_0: left promiscuous mode [ 119.939506][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.080172][ T5888] rc_core: IR keymap rc-su3000 not found [ 120.114689][ T5888] Registered IR keymap rc-empty [ 120.117323][ T7316] bridge_slave_1: left allmulticast mode [ 120.117903][ T5888] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 120.119983][ T7316] bridge_slave_1: left promiscuous mode [ 120.141432][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.154936][ T5888] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input14 [ 120.192546][ T5888] dvb-usb: schedule remote query interval to 150 msecs. [ 120.195401][ T5888] dw2102: su3000_power_ctrl: 0, initialized 1 [ 120.228226][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 120.228244][ T42] audit: type=1400 audit(1786057007.645:1954): avc: denied { read } for pid=5129 comm="acpid" name="event1" dev="devtmpfs" ino=3233 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.231868][ T5888] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 120.247010][ T42] audit: type=1400 audit(1786057007.645:1955): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/event1" dev="devtmpfs" ino=3233 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.247061][ T42] audit: type=1400 audit(1786057007.645:1956): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event1" dev="devtmpfs" ino=3233 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.293020][ T5888] usb 5-1: USB disconnect, device number 10 [ 120.308974][ T7316] bond0: (slave bond_slave_0): Releasing backup interface [ 120.354895][ T5888] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 120.412374][ T7316] bond0: (slave bond_slave_1): Releasing backup interface [ 120.438956][ T7316] team0: Port device team_slave_0 removed [ 120.461271][ T42] audit: type=1400 audit(1786057007.905:1957): avc: denied { read } for pid=7339 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.480600][ T7316] team0: Port device team_slave_1 removed [ 120.506773][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.525349][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.552338][ T5750] Bluetooth: hci2: unexpected event for opcode 0x042c [ 120.565913][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.572457][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.607599][ T7316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.630898][ T7315] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.895867][ T7356] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 120.998825][ T42] audit: type=1800 audit(1786057008.425:1958): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.530" name="addr_adrfam" dev="configfs" ino=18053 res=0 errno=0 [ 121.046774][ T7361] fuse: Bad value for 'fd' [ 121.133698][ T7356] veth3: entered allmulticast mode [ 121.169276][ T7356] bond2: (slave veth3): Enslaving as an active interface with a down link [ 121.195236][ T7365] bridge_slave_1: entered promiscuous mode [ 121.322705][ T7374] netlink: 204 bytes leftover after parsing attributes in process `syz.2.538'. [ 121.344080][ T42] audit: type=1800 audit(1786057008.795:1959): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.536" name="zoned" dev="configfs" ino=18694 res=0 errno=0 [ 121.420213][ T42] audit: type=1800 audit(1786057008.815:1960): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.536" name="memory_backed" dev="configfs" ino=18695 res=0 errno=0 [ 121.443113][ T42] audit: type=1800 audit(1786057008.815:1961): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.536" name="zone_nr_conv" dev="configfs" ino=18696 res=0 errno=0 [ 121.522498][ T42] audit: type=1800 audit(1786057008.815:1962): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.536" name="power" dev="configfs" ino=18697 res=0 errno=0 [ 122.091024][ T42] audit: type=1800 audit(1786057009.545:1963): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.556" name="zone_size" dev="configfs" ino=19463 res=0 errno=0 [ 122.122020][ T7413] o2net: Error -2 while creating socket [ 122.199070][ T7421] xt_l2tp: invalid flags combination: 8 [ 122.550287][ T5811] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 122.713233][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 122.722235][ T5811] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.737390][ T5811] usb 7-1: config 179 has no interface number 0 [ 122.751183][ T5811] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.759799][ T5811] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.775258][ T5811] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.793644][ T5811] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.802639][ T5811] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.811007][ T5811] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.816078][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.855212][ T7426] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.160862][ T5811] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input15 [ 123.295739][ T5735] usb 7-1: USB disconnect, device number 13 [ 123.295814][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.307139][ T7464] o2hb: Heartbeat mode set to global [ 123.325903][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 124.333128][ T7496] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 124.429308][ T7496] veth3: entered allmulticast mode [ 124.476070][ T7496] bond2: (slave veth3): Enslaving as an active interface with a down link [ 124.528618][ T7502] mass_storage.usb0/lun.0: unable to open backing file: fi [ 124.597964][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.602978][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.287592][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 125.287610][ T42] audit: type=1800 audit(1786057012.735:1981): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.607" name="zoned" dev="configfs" ino=20577 res=0 errno=0 [ 125.347526][ T42] audit: type=1800 audit(1786057012.795:1982): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.607" name="memory_backed" dev="configfs" ino=20578 res=0 errno=0 [ 125.371645][ T42] audit: type=1800 audit(1786057012.795:1983): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.607" name="zone_nr_conv" dev="configfs" ino=20579 res=0 errno=0 [ 125.413599][ T42] audit: type=1800 audit(1786057012.795:1984): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.607" name="power" dev="configfs" ino=20580 res=0 errno=0 [ 125.530206][ T42] audit: type=1400 audit(1786057012.975:1985): avc: denied { create } for pid=7527 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 125.582309][ T42] audit: type=1400 audit(1786057012.985:1986): avc: denied { setopt } for pid=7527 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 125.885655][ T42] audit: type=1400 audit(1786057013.335:1987): avc: denied { read } for pid=7539 comm="syz.1.615" name="trace" dev="tracefs" ino=5862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 126.034867][ T1484] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.203413][ T1484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 126.211535][ T1484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.239930][ T1484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 126.261664][ T1484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 126.285231][ T1484] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 126.289419][ T1484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.299634][ T1484] usb 5-1: Product: syz [ 126.302503][ T1484] usb 5-1: Manufacturer: syz [ 126.305280][ T1484] usb 5-1: SerialNumber: syz [ 126.312855][ T1484] usb 5-1: config 0 descriptor?? [ 126.566782][ T1484] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 126.690141][ T40] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 126.759265][ T1484] usb 5-1: USB disconnect, device number 11 [ 126.832888][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.839068][ T40] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.848983][ T40] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 126.857158][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.863327][ T40] usb 7-1: Product: syz [ 126.865945][ T40] usb 7-1: Manufacturer: syz [ 126.868624][ T40] usb 7-1: SerialNumber: syz [ 127.085753][ T40] usblp 7-1:1.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 127.447822][ T7567] jffs2: notice: (7567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 127.452712][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.454104][ T7569] overlayfs: failed to resolve './cgroup': -2 [ 127.486077][ T40] usb 7-1: USB disconnect, device number 14 [ 127.499123][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.501677][ T40] usblp1: removed [ 127.535145][ T7569] overlayfs: failed to clone upperpath [ 128.330477][ T7595] input: syz0 as /devices/virtual/input/input16 [ 128.372248][ T7597] tc action pedit 'at' offset 6 out of bounds [ 128.576974][ T42] audit: type=1800 audit(1786057016.035:1988): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.639" name="size" dev="configfs" ino=19570 res=0 errno=0 [ 129.080461][ T7614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7614 comm=syz.1.646 [ 129.091400][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.116151][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.460488][ T7631] input: syz0 as /devices/virtual/input/input17 [ 129.604479][ T42] audit: type=1400 audit(1786057017.055:1989): avc: denied { write } for pid=7633 comm="syz.2.654" name="uac2.usb0" dev="configfs" ino=15904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.632774][ T42] audit: type=1400 audit(1786057017.065:1990): avc: denied { create } for pid=7633 comm="syz.2.654" name="p_volume_present" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 130.105304][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.114650][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.180316][ T5888] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 130.222356][ T7645] jffs2: notice: (7645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 130.361924][ T5888] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.372780][ T5888] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 130.396708][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.405542][ T5888] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.410731][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.419991][ T5888] usb 7-1: Product: syz [ 130.422942][ T5888] usb 7-1: Manufacturer: syz [ 130.425319][ T5888] usb 7-1: SerialNumber: syz [ 130.461354][ T5888] usb 7-1: config 0 descriptor?? [ 130.478487][ T5888] usb 7-1: selecting invalid altsetting 0 [ 130.680012][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.684135][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.692024][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.700322][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.712498][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.720930][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.743725][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.761376][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.765845][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.769494][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.778079][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.850382][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.857526][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.865122][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.881697][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.900251][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.932500][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.964004][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.970571][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.975190][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.978200][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.981985][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.984844][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.001744][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.005899][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.019823][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.027581][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.033741][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.037790][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.042876][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.046611][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.053195][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.057495][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.064524][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.068036][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.076144][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.083961][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.088085][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.094281][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.099088][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.122661][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.127348][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.145463][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.157001][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.169453][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.174603][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.180816][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.186214][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.196440][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.203622][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.206977][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.212600][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.216087][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.222229][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.227679][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.227787][ T7665] Illegal XDP return value 3603371808 on prog (id 19) dev N/A, expect packet loss! [ 131.234489][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.243654][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.249562][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.262308][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.267854][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.288831][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.305048][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.310502][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.316401][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.337584][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.347577][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.356563][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.364861][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.375186][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.397611][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.413944][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.431139][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.436954][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.446052][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.457611][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.465934][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.475840][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.479955][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.489539][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.499624][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.513482][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.526654][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.540430][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.549617][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.555595][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.582123][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.655731][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.660252][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.664595][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.695806][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.711865][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.740214][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.745670][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.748270][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.752097][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.760522][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.762982][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.767294][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.779564][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.787865][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.794463][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.799650][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.805703][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.812912][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.819708][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.826491][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.830388][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.837039][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.842605][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.849805][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.855942][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.859488][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.864315][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.868289][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.872312][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.876367][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.882109][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.888346][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.898512][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.902502][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.906095][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.928371][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.934255][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.938140][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.960556][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.964517][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.982547][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.985917][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.989288][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 131.993987][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.002611][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.009792][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.016868][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.024154][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.028679][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.028961][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.029246][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.029687][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.030886][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.043176][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.056360][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.056638][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.056891][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.057657][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.057913][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.058168][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.058416][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.067490][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.067810][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.068086][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.068557][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.068856][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.069132][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.069576][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.076215][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.267959][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.274504][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.278600][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.284207][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.287829][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.292796][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.299033][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.304085][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.312391][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.317435][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.323015][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.328462][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.337014][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.345892][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.349117][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.353266][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.357525][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.364022][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.404784][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.408685][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.431529][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.434797][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.438346][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.455717][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.461241][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.479668][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.483898][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.489427][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.495998][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.510749][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.516671][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.527095][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.536891][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.545058][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.549795][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.556052][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.566517][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.585893][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.589515][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.610769][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.639306][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.643129][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.664652][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.692732][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.700421][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.704745][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.721125][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.725681][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.730756][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.736853][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.754585][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.771207][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.784521][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.796546][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.817942][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.833362][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.845537][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.854840][ T7638] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.897056][ T5811] usb 7-1: USB disconnect, device number 15 [ 133.019516][ T7696] jffs2: notice: (7696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 133.123339][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 133.123362][ T42] audit: type=1400 audit(1786057020.545:1992): avc: denied { write } for pid=7695 comm="syz.1.679" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.155481][ T42] audit: type=1400 audit(1786057020.595:1993): avc: denied { create } for pid=7695 comm="syz.1.679" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.253944][ T42] audit: type=1400 audit(1786057020.705:1994): avc: denied { write } for pid=7695 comm="syz.1.679" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.291424][ T42] audit: type=1400 audit(1786057020.735:1995): avc: denied { mounton } for pid=7695 comm="syz.1.679" path="/169/file0/bus" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.336714][ T7704] overlay: ./file0 is not a directory [ 134.476722][ T40] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 134.538834][ T7751] netlink: 'syz.3.699': attribute type 18 has an invalid length. [ 134.549784][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 134.725592][ T40] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.736315][ T40] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 134.742388][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.783629][ T40] as10x_usb: device has been detected [ 134.812360][ T40] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 134.865213][ T40] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 134.889118][ T7751] netlink: 'syz.3.699': attribute type 18 has an invalid length. [ 134.892778][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 134.956957][ T42] audit: type=1800 audit(1786057022.405:1996): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.702" name="bmAttributes" dev="configfs" ino=19811 res=0 errno=0 [ 134.957216][ T40] as10x_usb: error during firmware upload part1 [ 134.981487][ T40] Registered device Abilis Systems DVB-Titan [ 134.990342][ T42] audit: type=1400 audit(1786057022.405:1997): avc: denied { firmware_load } for pid=40 comm="kworker/3:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 135.137622][ T7766] gadgetfs: bound to dummy_udc driver [ 135.318358][ T42] audit: type=1400 audit(1786057022.765:1998): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.538211][ T7781] fuse: Bad value for 'fd' [ 135.683489][ T42] audit: type=1800 audit(1786057023.135:1999): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.713" name="idVendor" dev="configfs" ino=20778 res=0 errno=0 [ 136.659190][ T40] usb 7-1: USB disconnect, device number 16 [ 136.774030][ T40] Unregistered device Abilis Systems DVB-Titan [ 136.778249][ T40] as10x_usb: device has been disconnected [ 137.296269][ T42] audit: type=1800 audit(1786057024.745:2000): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.727" name="zoned" dev="configfs" ino=18325 res=0 errno=0 [ 137.364858][ T42] audit: type=1800 audit(1786057024.815:2001): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.727" name="memory_backed" dev="configfs" ino=19957 res=0 errno=0 [ 138.708190][ T7876] fuse: Bad value for 'fd' [ 138.995948][ T7888] fuse: Bad value for 'fd' [ 138.999023][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 138.999038][ T42] audit: type=1400 audit(1786057026.445:2007): avc: denied { watch_reads } for pid=7886 comm="syz.3.753" path="/224/file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.374654][ T42] audit: type=1400 audit(1786057026.825:2008): avc: denied { bind } for pid=7901 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.650973][ T42] audit: type=1400 audit(1786057027.105:2009): avc: denied { create } for pid=7906 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.660895][ T42] audit: type=1400 audit(1786057027.115:2010): avc: denied { ioctl } for pid=7906 comm="syz.3.763" path="socket:[18395]" dev="sockfs" ino=18395 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.127879][ T42] audit: type=1400 audit(1786057027.555:2011): avc: denied { append } for pid=7914 comm="syz.0.766" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.170883][ T42] audit: type=1400 audit(1786057027.625:2012): avc: denied { write } for pid=7914 comm="syz.0.766" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.228163][ T5094] Bluetooth: hci4: command 0x1003 tx timeout [ 140.238896][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 140.276899][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 140.702306][ T7923] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 140.955948][ T42] audit: type=1400 audit(1786057028.385:2013): avc: denied { read } for pid=7926 comm="syz.0.770" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.972191][ T42] audit: type=1400 audit(1786057028.385:2014): avc: denied { open } for pid=7926 comm="syz.0.770" path="/195/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.031528][ T42] audit: type=1400 audit(1786057028.395:2015): avc: denied { ioctl } for pid=7926 comm="syz.0.770" path="/195/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.045273][ T7923] veth3: entered allmulticast mode [ 141.092127][ T7928] md: superblock version 12389 not known [ 141.092170][ T7928] md: couldn't set array info. -22 [ 141.147797][ T7923] bond3: (slave veth3): Enslaving as an active interface with a down link [ 141.381216][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.588353][ T7946] mmap: syz.0.772 (7946) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.687162][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.703730][ T7942] nbd: nbd64 already in use [ 142.280239][ T42] audit: type=1400 audit(1786057029.715:2016): avc: denied { create } for pid=7958 comm="syz.2.780" name="#1e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.437950][ T7980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 143.442550][ T7980] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 143.460619][ T7980] vhci_hcd vhci_hcd.0: Device attached [ 143.468297][ T7981] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 143.483893][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 143.501957][ T5814] vhci_hcd vhci_hcd.0: release socket [ 143.506526][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 143.672280][ T7984] loop4: detected capacity change from 0 to 2640 [ 143.677292][ T7984] buffer_io_error: 11 callbacks suppressed [ 143.677309][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.696474][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.731673][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.754631][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.777048][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.781008][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.788220][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.800662][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.813600][ T7984] ldm_validate_partition_table(): Disk read failed. [ 143.817779][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.860111][ T7984] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.862955][ T7984] Dev loop4: unable to read RDB block 0 [ 143.865294][ T7984] loop4: unable to read partition table [ 143.880688][ T7984] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 144.068474][ T7994] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 144.159369][ T7994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.219635][ T7998] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 144.391804][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 144.391821][ T42] audit: type=1326 audit(1786057031.845:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.453784][ T42] audit: type=1326 audit(1786057031.885:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.493070][ T42] audit: type=1326 audit(1786057031.885:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.493111][ T42] audit: type=1326 audit(1786057031.885:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.550030][ T42] audit: type=1326 audit(1786057031.885:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.600051][ T42] audit: type=1326 audit(1786057031.885:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.609297][ T42] audit: type=1326 audit(1786057031.885:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.640724][ T42] audit: type=1326 audit(1786057031.885:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.655690][ T42] audit: type=1326 audit(1786057031.885:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efe6619e0d9 code=0x7ffc0000 [ 144.675531][ T42] audit: type=1326 audit(1786057031.885:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.3.795" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe66197e57 code=0x7ffc0000 [ 145.722432][ T8042] Failed to initialize the IGMP autojoin socket (err -2) [ 145.871429][ T8048] misc userio: Begin command sent, but we're already running [ 145.887391][ T8057] fuse: Bad value for 'fd' [ 146.374744][ T8081] jffs2: notice: (8081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 146.635466][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.645054][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.050361][ T8102] fuse: fd is not a fuse device [ 147.161561][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 148.085496][ T8139] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 148.612218][ T8158] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 148.656272][ T8158] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 149.203674][ T61] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 149.382506][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.395499][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.400631][ T8188] netlink: 'syz.3.859': attribute type 39 has an invalid length. [ 149.406923][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.415121][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.427446][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 149.435021][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.440714][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.448104][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.456829][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.467917][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 149.476312][ T61] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.482002][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.489251][ T61] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.496162][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.503049][ T61] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 149.547590][ T61] usb 5-1: string descriptor 0 read error: -22 [ 149.552466][ T61] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.559566][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.655941][ T61] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 149.881604][ T61] usb 5-1: USB disconnect, device number 13 [ 149.999083][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.007067][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.596212][ T8211] tc action pedit 'at' offset 6 out of bounds [ 151.129497][ T42] kauditd_printk_skb: 1887 callbacks suppressed [ 151.129525][ T42] audit: type=1400 audit(1786057038.575:3918): avc: denied { read } for pid=8219 comm="syz.0.869" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.163330][ T42] audit: type=1400 audit(1786057038.615:3919): avc: denied { open } for pid=8219 comm="syz.0.869" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.486713][ T8257] syzkaller0: entered promiscuous mode [ 152.488986][ T8257] syzkaller0: entered allmulticast mode [ 152.997302][ T42] audit: type=1800 audit(1786057040.435:3920): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.885" name="zoned" dev="configfs" ino=20480 res=0 errno=0 [ 153.070329][ T42] audit: type=1800 audit(1786057040.435:3921): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.885" name="power" dev="configfs" ino=23553 res=0 errno=0 [ 153.094479][ T8262] device-mapper: table: 248:0: zero-length target [ 153.161780][ T8262] device-mapper: ioctl: error adding target to table [ 153.711769][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 153.714332][ T42] audit: type=1400 audit(1786057041.165:3922): avc: denied { connect } for pid=8275 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.042284][ T8272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.911564][ T8300] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.756102][ T8318] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 156.073858][ T8325] syzkaller0: entered promiscuous mode [ 156.097113][ T8325] syzkaller0: entered allmulticast mode [ 156.113332][ T8325] tipc: Started in network mode [ 156.118656][ T8325] tipc: Node identity f6dc4da0fe0c, cluster identity 4711 [ 156.130394][ T8325] tipc: Enabled bearer , priority 0 [ 156.150910][ T8325] tipc: Resetting bearer [ 156.165294][ T8321] tipc: Resetting bearer [ 156.235253][ T42] audit: type=1400 audit(1786057043.655:3923): avc: denied { connect } for pid=8344 comm="syz.3.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.370846][ T8321] tipc: Disabling bearer [ 156.463199][ T5750] Bluetooth: hci1: Malformed Event: 0x02 [ 157.229764][ T8369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.238323][ T8369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.445281][ T8369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.501296][ T8369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.831901][ T8369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.842959][ T8369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.857347][ T5750] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 158.021085][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.026384][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.052790][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.063834][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.113544][ T8369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.136687][ T8369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.570147][ T5885] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.574156][ T5885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.578028][ T5885] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.582392][ T5885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.592773][ T5885] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.620020][ T5885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.623479][ T5885] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.626800][ T5885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.838511][ T5750] Bluetooth: hci1: ACL packet too small [ 159.845484][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.414882][ T5735] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 160.661668][ T5735] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 160.667977][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.680674][ T8469] Bluetooth: MGMT ver 1.23 [ 160.689339][ T5735] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.695930][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.700758][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.726431][ T5735] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 160.729681][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.737559][ T5735] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.750671][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.783530][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.832414][ T5735] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 160.835985][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.856496][ T5735] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.872169][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.881951][ T5735] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.903568][ T5735] usb 7-1: string descriptor 0 read error: -22 [ 160.907362][ T5735] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.912028][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.023878][ T5735] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 161.188471][ T848] usb 7-1: USB disconnect, device number 17 [ 162.214337][ T42] audit: type=1800 audit(1786057049.655:3924): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.971" name="addr_adrfam" dev="configfs" ino=22133 res=0 errno=0 [ 162.558361][ T182] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:72598ef7-a914-43b0-a4b7-58444248dacc for subsystem testnqn not allowed [ 162.569265][ T8501] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:72598ef7-a914-43b0-a4b7-58444248dacc [ 162.705312][ T8510] netlink: 204 bytes leftover after parsing attributes in process `syz.2.974'. [ 163.067430][ T5813] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 163.308180][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.353970][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.366961][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 163.388688][ T5813] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 163.394911][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.398082][ T5813] usb 7-1: Product: syz [ 163.399830][ T5813] usb 7-1: Manufacturer: syz [ 163.405885][ T5813] usb 7-1: SerialNumber: syz [ 163.427194][ T5813] usb 7-1: config 0 descriptor?? [ 163.453371][ T8516] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.541118][ T5813] rc_core: IR keymap rc-streamzap not found [ 163.545950][ T5813] Registered IR keymap rc-empty [ 163.598113][ T5813] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 163.627899][ T5813] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 163.724896][ T5813] usb 7-1: USB disconnect, device number 18 [ 163.897125][ T8549] netlink: 'syz.0.989': attribute type 13 has an invalid length. [ 163.998737][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.021320][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.180483][ T61] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.259305][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.352205][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.376031][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 164.468670][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.478418][ T61] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.482760][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.490493][ T61] usb 5-1: config 0 descriptor?? [ 164.738833][ T61] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 164.780270][ T5750] Bluetooth: hci2: command 0x0406 tx timeout [ 165.163229][ T8583] overlayfs: invalid origin (0000) [ 165.308312][ T42] audit: type=1400 audit(1786057052.755:3925): avc: denied { search } for pid=8586 comm="syz.1.1008" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 165.830231][ T5830] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 165.891030][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.911986][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.010064][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 166.015217][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.025646][ T5830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.035959][ T5830] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.067226][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.092143][ T5830] usb 7-1: config 0 descriptor?? [ 166.345814][ T8608] jffs2: notice: (8608) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 166.765336][ T8624] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.949154][ T1484] usb 5-1: USB disconnect, device number 14 [ 167.041504][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.045610][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.717020][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.740428][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.956574][ T8649] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1036'. [ 168.035639][ T42] audit: type=1800 audit(1786057055.485:3926): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1037" name="file" dev="configfs" ino=24826 res=0 errno=0 [ 168.511559][ T8661] input: syz0 as /devices/virtual/input/input20 [ 168.556252][ T61] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.625754][ T5830] usbhid 7-1:0.0: can't add hid device: -71 [ 168.634341][ T5830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 168.657816][ T5830] usb 7-1: USB disconnect, device number 19 [ 168.743880][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 168.788210][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.793196][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.814076][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.820140][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.842440][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.904691][ T61] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 168.924824][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.946224][ T61] usb 5-1: config 0 descriptor?? [ 169.431443][ T40] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 169.448125][ T61] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input21 [ 169.498542][ T42] audit: type=1400 audit(1786057056.935:3927): avc: denied { create } for pid=8691 comm="syz.3.1050" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.611984][ T42] audit: type=1400 audit(1786057057.045:3928): avc: denied { unlink } for pid=5732 comm="syz-executor" name="file0" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.653964][ T61] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input22 [ 169.685785][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 169.700346][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.726868][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 169.800936][ T40] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 169.804820][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.863555][ T40] usb 7-1: Product: syz [ 169.871429][ T40] usb 7-1: Manufacturer: syz [ 169.883626][ T40] usb 7-1: SerialNumber: syz [ 169.892929][ T40] usb 7-1: config 0 descriptor?? [ 169.901593][ T61] kye 0003:0458:5011.000A: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 169.940802][ T61] usb 5-1: USB disconnect, device number 15 [ 170.084412][ T8698] fido_id[8698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 170.171541][ T40] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux2 [ 170.331318][ T40] usb 7-1: USB disconnect, device number 20 [ 170.515562][ T8710] Failed to initialize the IGMP autojoin socket (err -2) [ 170.525797][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 170.712883][ T61] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.870107][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.883201][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.900195][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 170.908816][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.980320][ T61] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.987552][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.075368][ T61] usb 5-1: config 0 descriptor?? [ 171.300264][ T61] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 171.476495][ T8735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 171.577826][ T8739] Failed to initialize the IGMP autojoin socket (err -2) [ 171.607838][ T8741] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 171.796717][ T8741] veth5: entered allmulticast mode [ 171.820241][ T8741] bond3: (slave veth5): Enslaving as an active interface with a down link [ 171.887467][ T42] audit: type=1400 audit(1786057059.325:3929): avc: denied { getopt } for pid=8751 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.935774][ T8744] macvlan2: entered promiscuous mode [ 171.946101][ T8744] macvlan2: entered allmulticast mode [ 171.967611][ T8752] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 172.649300][ T8776] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 172.742522][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 172.743192][ T8776] veth7: entered allmulticast mode [ 172.759147][ T8776] bond4: (slave veth7): Enslaving as an active interface with a down link [ 172.883716][ T8780] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 173.004489][ T8784] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.178191][ T8788] syzkaller1: entered promiscuous mode [ 173.207387][ T8788] syzkaller1: entered allmulticast mode [ 173.280971][ T8796] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 173.382248][ T5830] usb 5-1: USB disconnect, device number 16 [ 173.421542][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 173.729413][ T8796] veth3: entered allmulticast mode [ 173.917171][ T8796] bond4: (slave veth3): Enslaving as an active interface with a down link [ 174.090057][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 174.280102][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 174.291816][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.296565][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.313416][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.317191][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 174.321712][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.327642][ T24] usb 5-1: config 0 descriptor?? [ 174.470228][ T5813] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 174.554594][ T8830] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.660119][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 174.667437][ T5813] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 174.737784][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.813716][ T24] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.814347][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 174.816673][ T24] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.843917][ T24] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.846809][ T5813] pvrusb2: ********** [ 174.863677][ T24] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.868194][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 174.868209][ T5813] pvrusb2: Important functionality might not be entirely working. [ 174.868217][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 174.868226][ T5813] pvrusb2: ********** [ 174.918011][ T24] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 174.929484][ T24] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 175.095597][ T2517] pvrusb2: Invalid write control endpoint [ 175.157908][ T24] usb 5-1: USB disconnect, device number 17 [ 175.366052][ T5735] usb 7-1: USB disconnect, device number 21 [ 175.496019][ T2517] pvrusb2: Invalid write control endpoint [ 175.498635][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.522823][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.546333][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.552911][ T2517] pvrusb2: Device being rendered inoperable [ 175.588254][ T2517] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 175.641391][ T2517] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 175.711522][ T2517] pvrusb2: Attached sub-driver cx25840 [ 175.717694][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.726500][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 176.082267][ T8860] binder: BINDER_SET_CONTEXT_MGR already set [ 176.088993][ T8860] binder: 8859:8860 ioctl 4018620d 200000004a80 returned -16 [ 176.953139][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.960936][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.994138][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.160753][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 177.166106][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.174168][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.189787][ T24] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 177.195177][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 177.210753][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 177.216354][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.232823][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.236639][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.465950][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 177.470567][ T24] usbtmc 5-1:16.0: can't read capabilities [ 177.679697][ T24] usb 5-1: USB disconnect, device number 18 [ 178.310366][ T5094] Bluetooth: hci2: hardware error 0x03 [ 178.878012][ T42] audit: type=1400 audit(1786057066.315:3930): avc: denied { read } for pid=8921 comm="syz.0.1147" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 178.896835][ T42] audit: type=1400 audit(1786057066.345:3931): avc: denied { open } for pid=8921 comm="syz.0.1147" path="/265/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 178.931112][ T8925] fuse: fd is not a fuse device [ 178.976963][ T8927] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 179.003556][ T8929] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 179.010652][ T8929] CIFS: VFS: Malformed UNC in devname [ 179.031013][ T8927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.102815][ T8927] bond3: (slave syz_tun): Removing an active aggregator [ 179.135232][ T8927] bond3: (slave syz_tun): Releasing backup interface [ 179.169499][ T8927] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 179.434962][ T42] audit: type=1400 audit(1786057066.885:3932): avc: denied { watch watch_reads } for pid=8939 comm="syz.0.1154" path="/267/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 179.585727][ T8947] tipc: Started in network mode [ 179.591620][ T8947] tipc: Node identity 7f000001, cluster identity 4711 [ 179.594828][ T8947] tipc: Enabling of bearer rejected, failed to enable media [ 179.784147][ T8960] Failed to initialize the IGMP autojoin socket (err -2) [ 180.267157][ T8973] MTD: Couldn't look up './dev/mtdblock0': -2 [ 180.722013][ T8993] binder: BINDER_SET_CONTEXT_MGR already set [ 180.734830][ T8993] binder: 8989:8993 ioctl 4018620d 200000004a80 returned -16 [ 180.850147][ T5094] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 181.030010][ T42] audit: type=1400 audit(1786057068.455:3933): avc: denied { read } for pid=9004 comm="syz.2.1171" path="socket:[25094]" dev="sockfs" ino=25094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.268026][ T9008] misc userio: Can't change port extra on an already running userio instance [ 181.470797][ T9023] binder: BINDER_SET_CONTEXT_MGR already set [ 181.473588][ T9023] binder: 9022:9023 ioctl 4018620d 200000004a80 returned -16 [ 181.748569][ T9030] netlink: 'syz.3.1182': attribute type 39 has an invalid length. [ 182.570228][ T9053] binder: BINDER_SET_CONTEXT_MGR already set [ 182.576558][ T9053] binder: 9051:9053 ioctl 4018620d 200000004a80 returned -16 [ 182.792195][ T42] audit: type=1800 audit(1786057070.235:3934): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1195" name="nullb0" dev="tmpfs" ino=2103 res=0 errno=0 [ 182.989498][ T42] audit: type=1400 audit(1786057070.435:3935): avc: denied { mmap_zero } for pid=9069 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 183.198306][ T42] audit: type=1400 audit(1786057070.655:3936): avc: denied { read } for pid=9074 comm="syz.1.1201" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.212899][ T42] audit: type=1400 audit(1786057070.665:3937): avc: denied { open } for pid=9074 comm="syz.1.1201" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.320904][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.333977][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.563009][ T42] audit: type=1400 audit(1786057071.005:3938): avc: denied { mount } for pid=9086 comm="syz.1.1206" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.030296][ T848] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 184.229650][ T848] usb 7-1: Using ep0 maxpacket: 32 [ 184.235524][ T848] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 184.239635][ T848] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 184.246708][ T848] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.252041][ T848] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 184.281001][ T848] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 184.285853][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.291713][ T848] usb 7-1: Product: syz [ 184.304986][ T848] usb 7-1: Manufacturer: syz [ 184.307679][ T848] usb 7-1: SerialNumber: syz [ 184.443684][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 184.540567][ T848] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input24 [ 184.643852][ T848] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 184.728128][ T848] (id 0x00) [ 184.963368][ T848] rc_core: IR keymap rc-imon-pad not found [ 184.972525][ T848] Registered IR keymap rc-empty [ 184.974703][ T848] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 184.979083][ T848] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 185.007279][ T848] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 185.024683][ T848] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input25 [ 185.091659][ T848] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:22> initialized [ 185.339683][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.348927][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.740211][ T9149] overlayfs: failed to clone upperpath [ 186.817808][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.829284][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.128854][ T9165] fuse: fd is not a fuse device [ 187.530659][ T9180] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 187.715469][ T42] audit: type=1400 audit(1786057075.165:3939): avc: denied { read } for pid=9183 comm="syz.1.1238" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.752428][ T42] audit: type=1400 audit(1786057075.165:3940): avc: denied { open } for pid=9183 comm="syz.1.1238" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.770104][ T42] audit: type=1400 audit(1786057075.165:3941): avc: denied { ioctl } for pid=9183 comm="syz.1.1238" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.809675][ T42] audit: type=1400 audit(1786057075.165:3942): avc: denied { ioctl } for pid=9183 comm="syz.1.1238" path="socket:[25347]" dev="sockfs" ino=25347 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.086903][ T40] usb 7-1: USB disconnect, device number 22 [ 189.895304][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 190.668423][ T9251] FAULT_INJECTION: forcing a failure. [ 190.668423][ T9251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 190.705640][ T9251] CPU: 0 UID: 0 PID: 9251 Comm: syz.0.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.705674][ T9251] Tainted: [L]=SOFTLOCKUP [ 190.705680][ T9251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.705702][ T9251] Call Trace: [ 190.705720][ T9251] [ 190.705730][ T9251] dump_stack_lvl+0x100/0x190 [ 190.705770][ T9251] should_fail_ex.cold+0x5/0xa [ 190.705795][ T9251] _copy_to_user+0x32/0xd0 [ 190.705829][ T9251] simple_read_from_buffer+0xcb/0x170 [ 190.705852][ T9251] proc_fail_nth_read+0x1af/0x230 [ 190.705881][ T9251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.705911][ T9251] ? rw_verify_area+0xce/0x6d0 [ 190.705937][ T9251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.705965][ T9251] vfs_read+0x1e4/0xb40 [ 190.705996][ T9251] ? __pfx_vfs_read+0x10/0x10 [ 190.706023][ T9251] ? __fget_files+0x215/0x3d0 [ 190.706050][ T9251] ? __fget_files+0x21f/0x3d0 [ 190.706078][ T9251] ksys_read+0x12a/0x250 [ 190.706106][ T9251] ? __pfx_ksys_read+0x10/0x10 [ 190.706134][ T9251] ? do_raw_spin_unlock+0x145/0x1e0 [ 190.706166][ T9251] do_syscall_64+0x115/0x870 [ 190.706196][ T9251] ? clear_bhb_loop+0x70/0xc0 [ 190.706220][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.706239][ T9251] RIP: 0033:0x7f88e475e90e [ 190.706257][ T9251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.706275][ T9251] RSP: 002b:00007f88e55fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.706295][ T9251] RAX: ffffffffffffffda RBX: 00007f88e55ff6c0 RCX: 00007f88e475e90e [ 190.706313][ T9251] RDX: 000000000000000f RSI: 00007f88e55ff0a0 RDI: 0000000000000003 [ 190.706325][ T9251] RBP: 00007f88e55ff090 R08: 0000000000000000 R09: 0000000000000000 [ 190.706336][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.706346][ T9251] R13: 00007f88e4a26038 R14: 00007f88e4a25fa0 R15: 00007ffc68c672c8 [ 190.706372][ T9251] [ 191.172307][ T42] audit: type=1400 audit(1786057078.625:3943): avc: denied { ioctl } for pid=9268 comm="syz.3.1267" path="socket:[27162]" dev="sockfs" ino=27162 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.422166][ T9279] FAULT_INJECTION: forcing a failure. [ 191.422166][ T9279] name failslab, interval 1, probability 0, space 0, times 1 [ 191.433475][ T9279] CPU: 2 UID: 0 PID: 9279 Comm: syz.1.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.433504][ T9279] Tainted: [L]=SOFTLOCKUP [ 191.433517][ T9279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.433528][ T9279] Call Trace: [ 191.433543][ T9279] [ 191.433552][ T9279] dump_stack_lvl+0x100/0x190 [ 191.433582][ T9279] should_fail_ex.cold+0x5/0xa [ 191.433606][ T9279] should_failslab+0xc2/0x120 [ 191.433630][ T9279] kmem_cache_alloc_noprof+0x91/0x6a0 [ 191.433653][ T9279] ? vm_area_dup+0x27/0x8e0 [ 191.433685][ T9279] vm_area_dup+0x27/0x8e0 [ 191.433714][ T9279] __split_vma+0x18c/0xda0 [ 191.433738][ T9279] ? is_bpf_text_address+0x8a/0x1a0 [ 191.433763][ T9279] ? bpf_ksym_find+0x128/0x1c0 [ 191.433789][ T9279] ? __pfx___split_vma+0x10/0x10 [ 191.433804][ T9279] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 191.433831][ T9279] ? unwind_get_return_address+0x59/0xa0 [ 191.433858][ T9279] vms_gather_munmap_vmas+0x1d2/0x1720 [ 191.433879][ T9279] ? mtree_range_walk+0x72b/0xb70 [ 191.433903][ T9279] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 191.433931][ T9279] ? mas_walk+0x6ef/0x9b0 [ 191.433961][ T9279] __mmap_region+0x4a7/0x2db0 [ 191.433984][ T9279] ? __pfx___mmap_region+0x10/0x10 [ 191.434000][ T9279] ? __pfx___might_resched+0x10/0x10 [ 191.434023][ T9279] ? find_held_lock+0x2b/0x80 [ 191.434040][ T9279] ? process_measurement+0x4c8/0x2350 [ 191.434060][ T9279] ? process_measurement+0x4c8/0x2350 [ 191.434079][ T9279] ? down_write+0x146/0x1f0 [ 191.434110][ T9279] ? process_measurement+0x1f4/0x2350 [ 191.434133][ T9279] ? find_held_lock+0x2b/0x80 [ 191.434148][ T9279] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 191.434181][ T9279] ? __lock_acquire+0x49f/0x1a40 [ 191.434215][ T9279] ? __lock_acquire+0x49f/0x1a40 [ 191.434239][ T9279] ? find_held_lock+0x2b/0x80 [ 191.434254][ T9279] ? is_bpf_text_address+0x8a/0x1a0 [ 191.434316][ T9279] mmap_region+0x35d/0x620 [ 191.434338][ T9279] ? __pfx_mmap_region+0x10/0x10 [ 191.434357][ T9279] ? cap_capable+0x107/0x430 [ 191.434383][ T9279] ? bpf_lsm_capable+0x9/0x10 [ 191.434401][ T9279] ? security_capable+0x80/0x260 [ 191.434428][ T9279] do_mmap+0xc63/0x12f0 [ 191.434458][ T9279] ? __pfx_do_mmap+0x10/0x10 [ 191.434479][ T9279] ? __pfx_down_write_killable+0x10/0x10 [ 191.434504][ T9279] vm_mmap_pgoff+0x29e/0x470 [ 191.434530][ T9279] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 191.434551][ T9279] ? __fget_files+0x215/0x3d0 [ 191.434573][ T9279] ? __fget_files+0x21f/0x3d0 [ 191.434596][ T9279] ksys_mmap_pgoff+0x3cb/0x610 [ 191.434622][ T9279] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 191.434643][ T9279] ? fput+0x79/0x100 [ 191.434663][ T9279] ? ksys_write+0x1ac/0x250 [ 191.434679][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 191.434699][ T9279] __x64_sys_mmap+0x125/0x190 [ 191.451133][ T9279] do_syscall_64+0x115/0x870 [ 191.451159][ T9279] ? clear_bhb_loop+0x70/0xc0 [ 191.451192][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.451211][ T9279] RIP: 0033:0x7f531319e0d9 [ 191.451229][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.451249][ T9279] RSP: 002b:00007f53113f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 191.451266][ T9279] RAX: ffffffffffffffda RBX: 00007f5313425fa0 RCX: 00007f531319e0d9 [ 191.451276][ T9279] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000200000200000 [ 191.451286][ T9279] RBP: 00007f53113f6090 R08: 0000000000000003 R09: 0000000000000000 [ 191.451295][ T9279] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000001 [ 191.451304][ T9279] R13: 00007f5313426038 R14: 00007f5313425fa0 R15: 00007ffe2ca01668 [ 191.451326][ T9279] [ 191.677415][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.690789][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 191.711284][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.715477][ T42] audit: type=1400 audit(1786057079.165:3944): avc: denied { map } for pid=9281 comm="syz.3.1272" path="socket:[27180]" dev="sockfs" ino=27180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 192.233652][ T9298] FAULT_INJECTION: forcing a failure. [ 192.233652][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.271698][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.1.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.271734][ T9298] Tainted: [L]=SOFTLOCKUP [ 192.271742][ T9298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.271763][ T9298] Call Trace: [ 192.271770][ T9298] [ 192.271778][ T9298] dump_stack_lvl+0x100/0x190 [ 192.271807][ T9298] should_fail_ex.cold+0x5/0xa [ 192.271832][ T9298] _copy_from_user+0x2e/0xd0 [ 192.271861][ T9298] copy_msghdr_from_user+0x9f/0x4c0 [ 192.271883][ T9298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 192.271916][ T9298] ___sys_sendmsg+0x106/0x1e0 [ 192.271939][ T9298] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.271956][ T9298] ? __lock_acquire+0x49f/0x1a40 [ 192.271982][ T9298] ? get_pid_task+0x106/0x250 [ 192.272029][ T9298] __sys_sendmsg+0x160/0x210 [ 192.272055][ T9298] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.272093][ T9298] do_syscall_64+0x115/0x870 [ 192.272115][ T9298] ? clear_bhb_loop+0x70/0xc0 [ 192.272137][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.272157][ T9298] RIP: 0033:0x7f531319e0d9 [ 192.272171][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.272187][ T9298] RSP: 002b:00007f53113f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.272205][ T9298] RAX: ffffffffffffffda RBX: 00007f5313425fa0 RCX: 00007f531319e0d9 [ 192.272217][ T9298] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 192.272227][ T9298] RBP: 00007f53113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.272237][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.272247][ T9298] R13: 00007f5313426038 R14: 00007f5313425fa0 R15: 00007ffe2ca01668 [ 192.272270][ T9298] [ 192.578448][ T9307] FAULT_INJECTION: forcing a failure. [ 192.578448][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 192.585624][ T9307] CPU: 3 UID: 0 PID: 9307 Comm: syz.1.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.585651][ T9307] Tainted: [L]=SOFTLOCKUP [ 192.585657][ T9307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.585667][ T9307] Call Trace: [ 192.585674][ T9307] [ 192.585682][ T9307] dump_stack_lvl+0x100/0x190 [ 192.585719][ T9307] should_fail_ex.cold+0x5/0xa [ 192.585740][ T9307] should_failslab+0xc2/0x120 [ 192.585762][ T9307] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 192.585782][ T9307] ? copy_process+0x611/0x8030 [ 192.585806][ T9307] ? copy_process+0x69a/0x8030 [ 192.585831][ T9307] copy_process+0x69a/0x8030 [ 192.585856][ T9307] ? __lock_acquire+0x49f/0x1a40 [ 192.585883][ T9307] ? __pfx_copy_process+0x10/0x10 [ 192.585904][ T9307] ? find_held_lock+0x2b/0x80 [ 192.585928][ T9307] kernel_clone+0x176/0x9d0 [ 192.585948][ T9307] ? find_held_lock+0x2b/0x80 [ 192.585965][ T9307] ? __pfx_kernel_clone+0x10/0x10 [ 192.585991][ T9307] ? ksys_write+0x190/0x250 [ 192.586014][ T9307] __do_sys_clone+0xd9/0x120 [ 192.586036][ T9307] ? __pfx___do_sys_clone+0x10/0x10 [ 192.586056][ T9307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.586089][ T9307] ? ksys_write+0x1ac/0x250 [ 192.586103][ T9307] ? __pfx_ksys_write+0x10/0x10 [ 192.586125][ T9307] do_syscall_64+0x115/0x870 [ 192.586146][ T9307] ? clear_bhb_loop+0x70/0xc0 [ 192.586166][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.586183][ T9307] RIP: 0033:0x7f531319e0d9 [ 192.586201][ T9307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.586216][ T9307] RSP: 002b:00007f53113f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 192.586231][ T9307] RAX: ffffffffffffffda RBX: 00007f5313425fa0 RCX: 00007f531319e0d9 [ 192.586241][ T9307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200 [ 192.586250][ T9307] RBP: 00007f53113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.586260][ T9307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 192.586269][ T9307] R13: 00007f5313426038 R14: 00007f5313425fa0 R15: 00007ffe2ca01668 [ 192.586293][ T9307] [ 192.960278][ T9319] FAULT_INJECTION: forcing a failure. [ 192.960278][ T9319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.970771][ T9319] CPU: 3 UID: 0 PID: 9319 Comm: syz.0.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.970798][ T9319] Tainted: [L]=SOFTLOCKUP [ 192.970804][ T9319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.970814][ T9319] Call Trace: [ 192.970820][ T9319] [ 192.970827][ T9319] dump_stack_lvl+0x100/0x190 [ 192.970854][ T9319] should_fail_ex.cold+0x5/0xa [ 192.970876][ T9319] _copy_to_user+0x32/0xd0 [ 192.970900][ T9319] simple_read_from_buffer+0xcb/0x170 [ 192.970921][ T9319] proc_fail_nth_read+0x1af/0x230 [ 192.970947][ T9319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.970972][ T9319] ? rw_verify_area+0xce/0x6d0 [ 192.971031][ T9319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.971055][ T9319] vfs_read+0x1e4/0xb40 [ 192.971082][ T9319] ? __pfx_vfs_read+0x10/0x10 [ 192.971104][ T9319] ? __fget_files+0x215/0x3d0 [ 192.971128][ T9319] ? __fget_files+0x21f/0x3d0 [ 192.971152][ T9319] ksys_read+0x12a/0x250 [ 192.971176][ T9319] ? __pfx_ksys_read+0x10/0x10 [ 192.971207][ T9319] do_syscall_64+0x115/0x870 [ 192.971227][ T9319] ? clear_bhb_loop+0x70/0xc0 [ 192.971247][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.971271][ T9319] RIP: 0033:0x7f88e475e90e [ 192.971286][ T9319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.971301][ T9319] RSP: 002b:00007f88e55fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.971317][ T9319] RAX: ffffffffffffffda RBX: 00007f88e55ff6c0 RCX: 00007f88e475e90e [ 192.971327][ T9319] RDX: 000000000000000f RSI: 00007f88e55ff0a0 RDI: 0000000000000003 [ 192.971337][ T9319] RBP: 00007f88e55ff090 R08: 0000000000000000 R09: 0000000000000000 [ 192.971346][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.971356][ T9319] R13: 00007f88e4a26038 R14: 00007f88e4a25fa0 R15: 00007ffc68c672c8 [ 192.971379][ T9319] [ 192.982839][ T9309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=9309 comm=syz.3.1284 [ 193.068027][ T9321] FAULT_INJECTION: forcing a failure. [ 193.068027][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 193.068063][ T9321] CPU: 3 UID: 0 PID: 9321 Comm: syz.0.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.068089][ T9321] Tainted: [L]=SOFTLOCKUP [ 193.068095][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.068106][ T9321] Call Trace: [ 193.068113][ T9321] [ 193.068121][ T9321] dump_stack_lvl+0x100/0x190 [ 193.068156][ T9321] should_fail_ex.cold+0x5/0xa [ 193.068181][ T9321] should_failslab+0xc2/0x120 [ 193.068206][ T9321] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 193.068230][ T9321] ? __alloc_skb+0x5b7/0x710 [ 193.068252][ T9321] ? __alloc_skb+0x140/0x710 [ 193.068278][ T9321] __alloc_skb+0x140/0x710 [ 193.068319][ T9321] ? __alloc_skb+0x5b7/0x710 [ 193.068338][ T9321] ? __pfx___alloc_skb+0x10/0x10 [ 193.068370][ T9321] netlink_alloc_large_skb+0x69/0x150 [ 193.068393][ T9321] netlink_sendmsg+0x680/0xda0 [ 193.068417][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.068439][ T9321] ? selinux_socket_sendmsg+0x198/0x2f0 [ 193.068474][ T9321] sock_write_iter+0x53a/0x5b0 [ 193.068492][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.068513][ T9321] ? __pfx_sock_write_iter+0x10/0x10 [ 193.068537][ T9321] ? bpf_lsm_file_permission+0x9/0x10 [ 193.068566][ T9321] ? security_file_permission+0x76/0x210 [ 193.068587][ T9321] ? rw_verify_area+0xce/0x6d0 [ 193.068615][ T9321] vfs_write+0x6ac/0x1050 [ 193.068644][ T9321] ? __pfx_sock_write_iter+0x10/0x10 [ 193.068664][ T9321] ? __pfx_vfs_write+0x10/0x10 [ 193.068690][ T9321] ? find_held_lock+0x2b/0x80 [ 193.068724][ T9321] ksys_write+0x1f8/0x250 [ 193.068741][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 193.068766][ T9321] do_syscall_64+0x115/0x870 [ 193.068790][ T9321] ? clear_bhb_loop+0x70/0xc0 [ 193.068813][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.068832][ T9321] RIP: 0033:0x7f88e479e0d9 [ 193.068848][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.068866][ T9321] RSP: 002b:00007f88e55ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.068884][ T9321] RAX: ffffffffffffffda RBX: 00007f88e4a25fa0 RCX: 00007f88e479e0d9 [ 193.068896][ T9321] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003 [ 193.068908][ T9321] RBP: 00007f88e55ff090 R08: 0000000000000000 R09: 0000000000000000 [ 193.068919][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.068930][ T9321] R13: 00007f88e4a26038 R14: 00007f88e4a25fa0 R15: 00007ffc68c672c8 [ 193.068955][ T9321] [ 193.081471][ T42] audit: type=1400 audit(1786057080.495:3945): avc: denied { view } for pid=9313 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.148386][ T9324] netlink: 778 bytes leftover after parsing attributes in process `syz.0.1289'. [ 193.773692][ T42] audit: type=1400 audit(1786057081.225:3946): avc: denied { read } for pid=9337 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.797604][ T9341] overlayfs: failed to clone upperpath [ 193.976946][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 193.995888][ T9347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1298'. [ 194.043555][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.046664][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.051122][ T9351] FAULT_INJECTION: forcing a failure. [ 194.051122][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 194.061371][ T9351] CPU: 3 UID: 0 PID: 9351 Comm: syz.2.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.061398][ T9351] Tainted: [L]=SOFTLOCKUP [ 194.061403][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.061423][ T9351] Call Trace: [ 194.061443][ T9351] [ 194.061450][ T9351] dump_stack_lvl+0x100/0x190 [ 194.061494][ T9351] should_fail_ex.cold+0x5/0xa [ 194.061514][ T9351] should_failslab+0xc2/0x120 [ 194.061535][ T9351] __kmalloc_noprof+0xfc/0x820 [ 194.061552][ T9351] ? rcu_is_watching+0x12/0xc0 [ 194.061576][ T9351] ? tomoyo_realpath_from_path+0xb6/0x690 [ 194.061603][ T9351] tomoyo_realpath_from_path+0xb6/0x690 [ 194.061623][ T9351] tomoyo_path_number_perm+0x23c/0x580 [ 194.061645][ T9351] ? tomoyo_path_number_perm+0x22e/0x580 [ 194.061667][ T9351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.061711][ T9351] ? find_held_lock+0x2b/0x80 [ 194.061725][ T9351] ? __fget_files+0x215/0x3d0 [ 194.061740][ T9351] ? hook_file_ioctl_common+0x140/0x440 [ 194.061757][ T9351] ? __fget_files+0x215/0x3d0 [ 194.061776][ T9351] ? __fget_files+0x21f/0x3d0 [ 194.061794][ T9351] security_file_ioctl+0xd3/0x230 [ 194.061820][ T9351] __x64_sys_ioctl+0xb7/0x210 [ 194.061843][ T9351] do_syscall_64+0x115/0x870 [ 194.061868][ T9351] ? clear_bhb_loop+0x70/0xc0 [ 194.061887][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.061903][ T9351] RIP: 0033:0x7fbe5139e0d9 [ 194.061917][ T9351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.061931][ T9351] RSP: 002b:00007fbe522dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.061955][ T9351] RAX: ffffffffffffffda RBX: 00007fbe51625fa0 RCX: 00007fbe5139e0d9 [ 194.061965][ T9351] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 194.061975][ T9351] RBP: 00007fbe522dd090 R08: 0000000000000000 R09: 0000000000000000 [ 194.061983][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.061992][ T9351] R13: 00007fbe51626038 R14: 00007fbe51625fa0 R15: 00007ffe5d140338 [ 194.062013][ T9351] [ 194.062021][ T9351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.115511][ T42] audit: type=1400 audit(1786057081.565:3947): avc: denied { create } for pid=9352 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.217519][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'. [ 194.462105][ T9366] FAULT_INJECTION: forcing a failure. [ 194.462105][ T9366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.498475][ T9366] CPU: 0 UID: 0 PID: 9366 Comm: syz.2.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.498504][ T9366] Tainted: [L]=SOFTLOCKUP [ 194.498511][ T9366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.498522][ T9366] Call Trace: [ 194.498531][ T9366] [ 194.498540][ T9366] dump_stack_lvl+0x100/0x190 [ 194.498569][ T9366] should_fail_ex.cold+0x5/0xa [ 194.498592][ T9366] _copy_from_user+0x2e/0xd0 [ 194.498620][ T9366] move_addr_to_kernel+0x65/0x170 [ 194.498642][ T9366] __sys_bind+0x11d/0x260 [ 194.498662][ T9366] ? __pfx___sys_bind+0x10/0x10 [ 194.498680][ T9366] ? __fget_files+0x21f/0x3d0 [ 194.498709][ T9366] ? __pfx_ksys_write+0x10/0x10 [ 194.498731][ T9366] __x64_sys_bind+0x72/0xb0 [ 194.498749][ T9366] ? lockdep_hardirqs_on+0x78/0x100 [ 194.498771][ T9366] do_syscall_64+0x115/0x870 [ 194.498793][ T9366] ? clear_bhb_loop+0x70/0xc0 [ 194.498815][ T9366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.498834][ T9366] RIP: 0033:0x7fbe5139e0d9 [ 194.498849][ T9366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.498865][ T9366] RSP: 002b:00007fbe522dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 194.498883][ T9366] RAX: ffffffffffffffda RBX: 00007fbe51625fa0 RCX: 00007fbe5139e0d9 [ 194.498894][ T9366] RDX: 0000000000000058 RSI: 00002000000002c0 RDI: 0000000000000003 [ 194.498905][ T9366] RBP: 00007fbe522dd090 R08: 0000000000000000 R09: 0000000000000000 [ 194.498915][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.498925][ T9366] R13: 00007fbe51626038 R14: 00007fbe51625fa0 R15: 00007ffe5d140338 [ 194.498950][ T9366] [ 194.694052][ T9375] program syz.0.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.773168][ T42] audit: type=1400 audit(1786057082.225:3948): avc: denied { bpf } for pid=9378 comm="syz.0.1311" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.902010][ T9386] netlink: 'syz.0.1313': attribute type 23 has an invalid length. [ 194.974167][ T9388] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1313'. [ 194.982939][ T9388] Mass Storage Function, version: 2009/09/11 [ 194.986242][ T42] audit: type=1400 audit(1786057082.425:3949): avc: denied { write } for pid=9385 comm="syz.0.1313" name="functions" dev="configfs" ino=9171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.990005][ T9388] LUN: removable file: (no medium) [ 195.054418][ T42] audit: type=1400 audit(1786057082.505:3950): avc: denied { write } for pid=9385 comm="syz.0.1313" name="mass_storage.0" dev="configfs" ino=27352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.055122][ T9386] LUN: removable file: (no medium) [ 195.077314][ T42] audit: type=1400 audit(1786057082.525:3951): avc: denied { write } for pid=9385 comm="syz.0.1313" name="mass_storage.0" dev="configfs" ino=27352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.097176][ T42] audit: type=1400 audit(1786057082.525:3952): avc: denied { remove_name } for pid=9385 comm="syz.0.1313" name="lun.1" dev="configfs" ino=27354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.117652][ T42] audit: type=1400 audit(1786057082.525:3953): avc: denied { rmdir } for pid=9385 comm="syz.0.1313" name="lun.1" dev="configfs" ino=27354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.255202][ T9392] binder: 9391:9392 ioctl 4018620d 0 returned -22 [ 195.266441][ T42] audit: type=1400 audit(1786057082.715:3954): avc: denied { set_context_mgr } for pid=9391 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 195.444113][ T9397] FAULT_INJECTION: forcing a failure. [ 195.444113][ T9397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.456271][ T9397] CPU: 1 UID: 0 PID: 9397 Comm: syz.0.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.456298][ T9397] Tainted: [L]=SOFTLOCKUP [ 195.456303][ T9397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.456313][ T9397] Call Trace: [ 195.456319][ T9397] [ 195.456326][ T9397] dump_stack_lvl+0x100/0x190 [ 195.456353][ T9397] should_fail_ex.cold+0x5/0xa [ 195.456374][ T9397] copy_fpstate_to_sigframe+0x82d/0xae0 [ 195.456395][ T9397] ? do_raw_spin_lock+0x128/0x260 [ 195.456421][ T9397] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 195.456445][ T9397] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 195.456472][ T9397] ? x86_task_fpu+0x5f/0x90 [ 195.456492][ T9397] get_sigframe+0x3fb/0x940 [ 195.456515][ T9397] ? __pfx_get_sigframe+0x10/0x10 [ 195.456532][ T9397] ? rcu_is_watching+0x12/0xc0 [ 195.456556][ T9397] ? siginfo_layout+0x156/0x290 [ 195.456580][ T9397] x64_setup_rt_frame+0x12f/0xce0 [ 195.456601][ T9397] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 195.456620][ T9397] ? find_held_lock+0x2b/0x80 [ 195.456634][ T9397] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 195.456658][ T9397] arch_do_signal_or_restart+0x5ee/0x7e0 [ 195.456677][ T9397] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 195.456706][ T9397] irqentry_exit+0x402/0xa00 [ 195.456730][ T9397] asm_exc_page_fault+0x26/0x30 [ 195.456746][ T9397] RIP: 0033:0x7f88e465f6c0 [ 195.456761][ T9397] Code: 38 e8 a4 84 10 00 4c 89 e2 be 10 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 <55> 31 c0 53 48 81 ec 68 10 00 00 48 89 7c 24 08 48 8d 3d 61 b1 1a [ 195.456776][ T9397] RSP: 002b:00007f88e55ff018 EFLAGS: 00010212 [ 195.456790][ T9397] RAX: 00007f88e465f6c0 RBX: 00007f88e4a25fa0 RCX: 0000000000000000 [ 195.456799][ T9397] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 195.456808][ T9397] RBP: 00007f88e55ff090 R08: 0000000000000000 R09: 0000000000000000 [ 195.456817][ T9397] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 195.456825][ T9397] R13: 00007f88e4a26038 R14: 00007f88e4a25fa0 R15: 00007ffc68c672c8 [ 195.456847][ T9397] [ 195.722445][ T9404] [ 195.724033][ T9404] ====================================================== [ 195.728609][ T9404] WARNING: possible circular locking dependency detected [ 195.735126][ T9404] syzkaller #0 Tainted: G L [ 195.739574][ T9404] ------------------------------------------------------ [ 195.746761][ T9404] syz.3.1320/9404 is trying to acquire lock: [ 195.749343][ T9409] FAULT_INJECTION: forcing a failure. [ 195.749343][ T9409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.749743][ T9404] ffff8880269b52f0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190 [ 195.754347][ T9409] CPU: 3 UID: 0 PID: 9409 Comm: syz.1.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.754371][ T9409] Tainted: [L]=SOFTLOCKUP [ 195.754376][ T9409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.754385][ T9409] Call Trace: [ 195.754391][ T9409] [ 195.754397][ T9409] dump_stack_lvl+0x100/0x190 [ 195.754419][ T9409] should_fail_ex.cold+0x5/0xa [ 195.754435][ T9409] _copy_from_user+0x2e/0xd0 [ 195.754455][ T9409] copy_msghdr_from_user+0x9f/0x4c0 [ 195.754473][ T9409] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.754489][ T9409] ? kstrtouint_from_user+0x13c/0x1d0 [ 195.754506][ T9409] ___sys_sendmsg+0x106/0x1e0 [ 195.754525][ T9409] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.754540][ T9409] ? get_pid_task+0x106/0x250 [ 195.754555][ T9409] ? rcu_is_watching+0x12/0xc0 [ 195.754584][ T9409] __sys_sendmsg+0x160/0x210 [ 195.754605][ T9409] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.754630][ T9409] ? rcu_is_watching+0x12/0xc0 [ 195.754654][ T9409] do_syscall_64+0x115/0x870 [ 195.754671][ T9409] ? clear_bhb_loop+0x70/0xc0 [ 195.754689][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.754706][ T9409] RIP: 0033:0x7f531319e0d9 [ 195.754721][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.754740][ T9409] RSP: 002b:00007f53113f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.754758][ T9409] RAX: ffffffffffffffda RBX: 00007f5313425fa0 RCX: 00007f531319e0d9 [ 195.754769][ T9409] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 195.754780][ T9409] RBP: 00007f53113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.754790][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.754798][ T9409] R13: 00007f5313426038 R14: 00007f5313425fa0 R15: 00007ffe2ca01668 [ 195.754812][ T9409] [ 195.918115][ T9404] [ 195.918115][ T9404] but task is already holding lock: [ 195.921863][ T9404] ffff888029c60450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x2929/0x4280 [ 195.927026][ T9404] [ 195.927026][ T9404] which lock already depends on the new lock. [ 195.927026][ T9404] [ 195.938788][ T9404] [ 195.938788][ T9404] the existing dependency chain (in reverse order) is: [ 195.946018][ T9404] [ 195.946018][ T9404] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 195.949285][ T9404] lock_acquire+0x1b9/0x370 [ 195.957000][ T9404] mnt_want_write+0x6f/0x410 [ 195.959139][ T9404] path_openat+0xad9/0x4280 [ 195.965329][ T9404] do_file_open+0x20e/0x430 [ 195.969652][ T9404] file_open_name+0x1c3/0x3e0 [ 195.976687][ T9404] filp_open+0x2e/0x50 [ 195.979669][ T9404] fsg_lun_open+0x6b/0x7b0 [ 195.981721][ T9404] fsg_store_file+0x1e7/0x450 [ 195.983932][ T9404] configfs_write_iter+0x302/0x4e0 [ 195.986449][ T9404] vfs_write+0x6ac/0x1050 [ 195.994442][ T9404] ksys_write+0x12a/0x250 [ 196.011712][ T9404] do_syscall_64+0x115/0x870 [ 196.015359][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.022798][ T9404] [ 196.022798][ T9404] -> #3 (&common->filesem){++++}-{4:4}: [ 196.027043][ T9404] lock_acquire+0x1b9/0x370 [ 196.029904][ T9404] down_write+0x8b/0x1f0 [ 196.032601][ T9404] fsg_store_file+0x193/0x450 [ 196.035107][ T9404] configfs_write_iter+0x302/0x4e0 [ 196.037596][ T9404] vfs_write+0x6ac/0x1050 [ 196.039957][ T9404] ksys_write+0x12a/0x250 [ 196.042057][ T9404] do_syscall_64+0x115/0x870 [ 196.044262][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.047617][ T9404] [ 196.047617][ T9404] -> #2 (&p->frag_sem){++++}-{4:4}: [ 196.052452][ T9404] lock_acquire+0x1b9/0x370 [ 196.055722][ T9404] down_read+0x99/0x4c0 [ 196.058098][ T9404] configfs_write_iter+0x218/0x4e0 [ 196.062392][ T9404] vfs_write+0x6ac/0x1050 [ 196.066840][ T9404] ksys_write+0x12a/0x250 [ 196.069488][ T9404] do_syscall_64+0x115/0x870 [ 196.071881][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.074895][ T9404] [ 196.074895][ T9404] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 196.078828][ T9404] lock_acquire+0x1b9/0x370 [ 196.081205][ T9404] __mutex_lock+0x1a4/0x1bd0 [ 196.083117][ T9404] configfs_read_iter+0x79/0x6f0 [ 196.086052][ T9404] __kernel_read+0x397/0xad0 [ 196.088107][ T9404] integrity_kernel_read+0x7e/0xb0 [ 196.090214][ T9404] ima_calc_file_hash_tfm+0x25e/0x350 [ 196.092444][ T9404] ima_calc_file_hash+0x1e3/0x380 [ 196.094540][ T9404] ima_collect_measurement+0x94f/0xb30 [ 196.098571][ T9404] process_measurement+0xdfe/0x2350 [ 196.101388][ T9404] ima_file_check+0xc3/0x110 [ 196.103818][ T9404] security_file_post_open+0xc4/0x210 [ 196.106574][ T9404] path_openat+0x985/0x4280 [ 196.110391][ T9404] do_file_open+0x20e/0x430 [ 196.113067][ T9404] do_sys_openat2+0x10f/0x1e0 [ 196.116294][ T9404] __x64_sys_openat+0x12d/0x210 [ 196.120205][ T9404] do_syscall_64+0x115/0x870 [ 196.124127][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.127694][ T9404] [ 196.127694][ T9404] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 196.132306][ T9404] check_prev_add+0xeb/0xe60 [ 196.135390][ T9404] __lock_acquire+0x136c/0x1a40 [ 196.138592][ T9404] lock_acquire+0x1b9/0x370 [ 196.141449][ T9404] __mutex_lock+0x1a4/0x1bd0 [ 196.144030][ T9404] ima_file_truncate+0xe6/0x190 [ 196.146563][ T9404] security_file_truncate+0xf9/0x1e0 [ 196.149595][ T9404] path_openat+0x3584/0x4280 [ 196.151911][ T9404] do_file_open+0x20e/0x430 [ 196.154145][ T9404] do_sys_openat2+0x10f/0x1e0 [ 196.156255][ T9404] __x64_sys_openat+0x12d/0x210 [ 196.158461][ T9404] do_syscall_64+0x115/0x870 [ 196.160960][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.164351][ T9404] [ 196.164351][ T9404] other info that might help us debug this: [ 196.164351][ T9404] [ 196.168349][ T9404] Chain exists of: [ 196.168349][ T9404] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#6 [ 196.168349][ T9404] [ 196.174611][ T9404] Possible unsafe locking scenario: [ 196.174611][ T9404] [ 196.180615][ T9404] CPU0 CPU1 [ 196.184311][ T9404] ---- ---- [ 196.186634][ T9404] rlock(sb_writers#6); [ 196.188825][ T9404] lock(&common->filesem); [ 196.192667][ T9404] lock(sb_writers#6); [ 196.196534][ T9404] lock(&ima_iint_mutex_key[depth]); [ 196.200250][ T9404] [ 196.200250][ T9404] *** DEADLOCK *** [ 196.200250][ T9404] [ 196.204384][ T9404] 1 lock held by syz.3.1320/9404: [ 196.207077][ T9404] #0: ffff888029c60450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x2929/0x4280 [ 196.212431][ T9404] [ 196.212431][ T9404] stack backtrace: [ 196.232497][ T9404] CPU: 2 UID: 0 PID: 9404 Comm: syz.3.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.232528][ T9404] Tainted: [L]=SOFTLOCKUP [ 196.232535][ T9404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.232546][ T9404] Call Trace: [ 196.232554][ T9404] [ 196.232563][ T9404] dump_stack_lvl+0x100/0x190 [ 196.232588][ T9404] print_circular_bug.cold+0x178/0x1c7 [ 196.232617][ T9404] check_noncircular+0x146/0x160 [ 196.232641][ T9404] check_prev_add+0xeb/0xe60 [ 196.232663][ T9404] __lock_acquire+0x136c/0x1a40 [ 196.232688][ T9404] ? tomoyo_path_perm+0x2db/0x460 [ 196.232712][ T9404] lock_acquire+0x1b9/0x370 [ 196.232731][ T9404] ? ima_file_truncate+0xe6/0x190 [ 196.232748][ T9404] ? __pfx___might_resched+0x10/0x10 [ 196.232766][ T9404] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 196.232793][ T9404] __mutex_lock+0x1a4/0x1bd0 [ 196.232813][ T9404] ? ima_file_truncate+0xe6/0x190 [ 196.232831][ T9404] ? ima_file_truncate+0xe6/0x190 [ 196.232851][ T9404] ? __pfx___mutex_lock+0x10/0x10 [ 196.232882][ T9404] ? __pfx_ima_file_check+0x10/0x10 [ 196.232901][ T9404] ? hook_file_truncate+0xba/0x280 [ 196.232923][ T9404] ? ima_file_truncate+0xe6/0x190 [ 196.232942][ T9404] ima_file_truncate+0xe6/0x190 [ 196.232961][ T9404] security_file_truncate+0xf9/0x1e0 [ 196.232982][ T9404] path_openat+0x3584/0x4280 [ 196.233005][ T9404] ? __pfx_path_openat+0x10/0x10 [ 196.233023][ T9404] do_file_open+0x20e/0x430 [ 196.233039][ T9404] ? __pfx_do_file_open+0x10/0x10 [ 196.233062][ T9404] ? alloc_fd+0x471/0x7a0 [ 196.233079][ T9404] ? do_getname+0x191/0x390 [ 196.233099][ T9404] do_sys_openat2+0x10f/0x1e0 [ 196.233122][ T9404] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.233143][ T9404] ? fd_install+0x24f/0x580 [ 196.233162][ T9404] __x64_sys_openat+0x12d/0x210 [ 196.233181][ T9404] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.233203][ T9404] do_syscall_64+0x115/0x870 [ 196.233221][ T9404] ? clear_bhb_loop+0x70/0xc0 [ 196.233238][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.233253][ T9404] RIP: 0033:0x7efe6619e0d9 [ 196.233269][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.233284][ T9404] RSP: 002b:00007efe670f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.233301][ T9404] RAX: ffffffffffffffda RBX: 00007efe66425fa0 RCX: 00007efe6619e0d9 [ 196.233311][ T9404] RDX: 00000000000a4242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 196.233320][ T9404] RBP: 00007efe66235024 R08: 0000000000000000 R09: 0000000000000000 [ 196.233329][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.233339][ T9404] R13: 00007efe66426038 R14: 00007efe66425fa0 R15: 00007ffef8f053a8 [ 196.233353][ T9404] [ 196.807446][ T9405] syz.2.1321 (9405) used greatest stack depth: 19328 bytes left