last executing test programs: 7.802981948s ago: executing program 3 (id=2531): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xfffffffe}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x40}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r5, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6800) 7.296157683s ago: executing program 3 (id=2533): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0xd4, 0x1, &(0x7f0000000080)={0x3, "42cae8b3df20afbcf8dd178c50e5d84526580489d79a473f112453b228922bd31c"}}) 7.178023047s ago: executing program 4 (id=2535): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x25b9b9f1fb386671) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/122, 0x7a, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, 0x0, 0x0) 6.420451096s ago: executing program 2 (id=2536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000a00)={0x0, r2, r3, 0x0, 0x100000, 0x1, 0x2, 0x82, 0x0, 0x0, 0x1, 0x401}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r7, &(0x7f00000000c0)='uid_map\x00') mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x1c) getpid() capset(0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r8 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(r8, 0xd, &(0x7f0000000180)=""/58) 6.214622516s ago: executing program 4 (id=2538): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.989533107s ago: executing program 4 (id=2539): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="60ef25") 5.749648576s ago: executing program 0 (id=2544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) 5.582862729s ago: executing program 0 (id=2545): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x1, 0x1, {{0x2, {0x0, 0x0, 0x10, 0x0, 0x0, 0x50}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000000}, 0x40094) 5.45760484s ago: executing program 0 (id=2546): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0xe651e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe) 5.447059273s ago: executing program 2 (id=2547): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 5.339916474s ago: executing program 2 (id=2548): syz_open_dev$dri(0x0, 0xd21, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff000524060000052402"], 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 5.181355733s ago: executing program 3 (id=2549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) 4.959031526s ago: executing program 0 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0xe5db995445b3925b, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r8, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500), 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x24044080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a000100aaaaaaaaaa2e000009002400729ed35e76"], 0x78}}, 0x0) 4.555067084s ago: executing program 3 (id=2551): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.229305187s ago: executing program 1 (id=2552): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x3, 0x0, 0x6, 0x55, 0x0, 0x7c}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2, 0x5, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0x24e, 0x3, 0xffffffffffffffff], 0x0, 0x98302}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x10001, 0xe5, 0x3, 0x2, 0x4, 0xca9, 0x3b, 0x10000010000008]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) 3.305093571s ago: executing program 2 (id=2553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3.167873585s ago: executing program 2 (id=2554): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x1, 0x78bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r2, 0xa2e89, 0x56211}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x7}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 3.106924458s ago: executing program 4 (id=2555): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 3.092089865s ago: executing program 1 (id=2556): mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/oops_count', 0x0, 0x85f34f8010bdc4b0) syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x47043ef9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001e0007010000000000000000017c00000400fc800c00018008000600ffff00000c000280080072800400b60008000900", @ANYBLOB="27073ede56141d1dc1102b46bdb4b8309ed4b4c05f5988c00300ee3bb10d3703e6f0cf080ee8d411919724da1f"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='signal_deliver\x00', r3, 0x0, 0x1000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.657482101s ago: executing program 4 (id=2557): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x49, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "e672db30"}]}}, 0x0}, 0x0) 2.557396711s ago: executing program 2 (id=2558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) 2.105873328s ago: executing program 0 (id=2559): socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.09428787s ago: executing program 1 (id=2560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 1.969552861s ago: executing program 0 (id=2561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000002044104d7a00000000000109022400010000200409040000010300020009210000000122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x2, '\v'}]}}, 0x0}, 0x0) 1.881763611s ago: executing program 1 (id=2562): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x801) 1.819580503s ago: executing program 1 (id=2563): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x3, 0x0, 0x6, 0x55, 0x0, 0x7c}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2, 0x5, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0x24e, 0x3, 0xffffffffffffffff], 0x0, 0x98302}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x10001, 0xe5, 0x3, 0x2, 0x4, 0xca9, 0x3b, 0x10000010000008]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) 1.165586151s ago: executing program 3 (id=2564): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 758.112872ms ago: executing program 3 (id=2565): syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000100)) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) r7 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r7, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="d596ff04c79a22183c75bab064d8", 0xe}], 0x1}}], 0x1, 0x40840) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 661.539211ms ago: executing program 1 (id=2566): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x5, {0x5, 0x23, "3b8ebc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2567): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 932.289157][ T30] audit: type=1400 audit(2000000850.038:1943): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.532927][ T30] audit: type=1400 audit(2000000850.038:1944): avc: denied { read } for pid=5480 comm="dhcpcd" name="n116" dev="tmpfs" ino=7758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 932.555226][ T30] audit: type=1400 audit(2000000850.038:1945): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=7758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 932.633851][ T30] audit: type=1400 audit(2000000850.038:1946): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=7758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 932.683654][ T5861] usb 5-1: USB disconnect, device number 23 [ 932.702553][T13216] [U] è [ 932.734456][T13226] syz.1.1637 (13226): drop_caches: 2 [ 932.762509][T13226] syz.1.1637 (13226): drop_caches: 2 [ 934.253872][T13240] input: syz1 as /devices/virtual/input/input118 [ 935.559511][ T30] audit: type=1400 audit(2000000852.258:1947): avc: denied { setopt } for pid=13237 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 935.757376][ T30] audit: type=1400 audit(2000000853.528:1948): avc: denied { ioctl } for pid=13245 comm="syz.3.1640" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 936.110901][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 936.420362][T13256] input: syz1 as /devices/virtual/input/input119 [ 936.710958][ T30] audit: type=1400 audit(2000000854.488:1949): avc: denied { read } for pid=13247 comm="syz.3.1642" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 937.136377][ T30] audit: type=1400 audit(2000000854.488:1950): avc: denied { open } for pid=13247 comm="syz.3.1642" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 937.224942][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 937.574055][ T30] audit: type=1400 audit(2000000854.538:1951): avc: denied { ioctl } for pid=13247 comm="syz.3.1642" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 937.609853][ T30] audit: type=1400 audit(2000000854.598:1952): avc: denied { ioctl } for pid=13247 comm="syz.3.1642" path="socket:[38463]" dev="sockfs" ino=38463 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 937.644819][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 937.652519][ T5861] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 937.876532][ T30] audit: type=1400 audit(2000000855.608:1953): avc: denied { block_suspend } for pid=13263 comm="syz.1.1646" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 937.924729][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 938.114838][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 938.122146][ T5861] usb 3-1: config 0 has an invalid interface number: 103 but max is 0 [ 938.140211][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.155161][ T5861] usb 3-1: config 0 has no interface number 0 [ 938.167011][ T5861] usb 3-1: config 0 interface 103 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 938.178538][ T5861] usb 3-1: config 0 interface 103 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 938.194581][ T5868] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 938.204357][ T5868] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 938.218898][ T5868] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 938.230487][ T5861] usb 3-1: New USB device found, idVendor=045e, idProduct=043a, bcdDevice=f5.69 [ 938.494723][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.494751][ T5861] usb 3-1: Product: syz [ 938.494766][ T5861] usb 3-1: Manufacturer: syz [ 938.494779][ T5861] usb 3-1: SerialNumber: syz [ 938.507177][ T5861] usb 3-1: config 0 descriptor?? [ 938.509227][ T5868] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 938.509255][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.509273][ T5868] usb 4-1: Product: syz [ 938.509287][ T5868] usb 4-1: Manufacturer: syz [ 938.509301][ T5868] usb 4-1: SerialNumber: syz [ 938.515255][ T5868] hso 4-1:6.0: Can't find BULK IN endpoint [ 938.522668][ T5861] ipaq 3-1:0.103: PocketPC PDA converter detected [ 938.522885][ T5861] usb 3-1: active config #0 != 1 ?? [ 938.793115][ T5868] usb 4-1: USB disconnect, device number 14 [ 939.089971][ T5861] usb 3-1: USB disconnect, device number 12 [ 939.195898][ T30] audit: type=1400 audit(2000000856.998:1954): avc: denied { read write } for pid=13273 comm="syz.1.1648" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 939.285191][ T30] audit: type=1400 audit(2000000856.998:1955): avc: denied { open } for pid=13273 comm="syz.1.1648" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 939.584774][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 939.745552][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 939.748134][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 939.748156][ T24] usb 5-1: config 0 has no interface number 0 [ 939.748190][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 939.749592][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 939.749615][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 939.749632][ T24] usb 5-1: Product: syz [ 939.749646][ T24] usb 5-1: SerialNumber: syz [ 939.752901][ T24] usb 5-1: config 0 descriptor?? [ 939.760008][ T24] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 939.928764][ T30] audit: type=1400 audit(2000000857.678:1956): avc: denied { connect } for pid=13287 comm="syz.3.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 940.070928][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 940.145258][ T30] audit: type=1400 audit(2000000857.738:1957): avc: denied { shutdown } for pid=13287 comm="syz.3.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 940.281344][ T5861] usb 5-1: USB disconnect, device number 24 [ 940.511610][ T30] audit: type=1400 audit(2000000858.308:1958): avc: denied { create } for pid=13294 comm="syz.1.1652" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 941.008644][T13299] input: syz1 as /devices/virtual/input/input120 [ 941.444987][T13295] Invalid source name [ 941.445047][T13295] UBIFS error (pid: 13295): cannot open "./file0", error -22 [ 941.974780][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 942.809369][T13309] smc: net device bond0 applied user defined pnetid SYZ0 [ 943.621323][T13311] input: syz1 as /devices/virtual/input/input121 [ 943.810396][T13313] overlayfs: missing 'workdir' [ 944.840703][T13321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.842180][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 944.842193][ T30] audit: type=1400 audit(2000000862.598:1961): avc: denied { create } for pid=13317 comm="syz.3.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 945.059350][ T30] audit: type=1400 audit(2000000862.638:1962): avc: denied { read } for pid=13317 comm="syz.3.1656" path="socket:[38685]" dev="sockfs" ino=38685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 945.082557][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.618352][T13335] input: syz1 as /devices/virtual/input/input122 [ 946.146512][T13338] syz.1.1663 (13338): drop_caches: 2 [ 946.163479][T13338] syz.1.1663 (13338): drop_caches: 2 [ 946.194817][ T30] audit: type=1400 audit(2000000863.988:1963): avc: denied { read write } for pid=13337 comm="syz.0.1664" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 948.376107][ T30] audit: type=1400 audit(2000000863.988:1964): avc: denied { open } for pid=13337 comm="syz.0.1664" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 948.400035][ T30] audit: type=1400 audit(2000000863.988:1965): avc: denied { ioctl } for pid=13337 comm="syz.0.1664" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 948.425499][ T30] audit: type=1400 audit(2000000864.148:1966): avc: denied { mount } for pid=13337 comm="syz.0.1664" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 948.483594][ T30] audit: type=1400 audit(2000000866.278:1967): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 949.013183][T13355] input: syz1 as /devices/virtual/input/input123 [ 949.028265][ T30] audit: type=1800 audit(2000000866.788:1968): pid=13354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1665" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 949.562438][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1670'. [ 949.925234][T13369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1674'. [ 950.629668][T13379] overlayfs: missing 'workdir' [ 951.816107][T13390] syz.0.1679: attempt to access beyond end of device [ 951.816107][T13390] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 951.831010][T13390] SQUASHFS error: Failed to read block 0x0: -5 [ 951.837269][T13390] unable to read squashfs_super_block [ 952.144822][ T30] audit: type=1800 audit(2000000869.868:1969): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1680" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 953.976306][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 954.283480][T13412] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 954.291193][T13412] ptrace attach of ""[13415] was attempted by "./syz-executor exec"[13412] [ 954.298645][T13414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1685'. [ 954.362897][ T30] audit: type=1400 audit(2000000872.148:1970): avc: denied { create } for pid=13418 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 954.395687][ T30] audit: type=1400 audit(2000000872.188:1971): avc: denied { write } for pid=13418 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 954.577707][ T30] audit: type=1400 audit(2000000872.378:1972): avc: denied { ioctl } for pid=13422 comm="syz.1.1689" path="socket:[39955]" dev="sockfs" ino=39955 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 954.604527][ T30] audit: type=1400 audit(2000000872.398:1973): avc: denied { create } for pid=13420 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 954.700183][ T30] audit: type=1400 audit(2000000872.498:1974): avc: denied { open } for pid=13420 comm="syz.4.1688" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 954.708383][ T30] audit: type=1400 audit(2000000872.508:1975): avc: denied { ioctl } for pid=13420 comm="syz.4.1688" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 955.977115][ T30] audit: type=1800 audit(2000000873.708:1976): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1691" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 956.196557][T13435] syz.0.1693: attempt to access beyond end of device [ 956.196557][T13435] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 956.212538][T13435] SQUASHFS error: Failed to read block 0x0: -5 [ 956.227551][T13435] unable to read squashfs_super_block [ 957.613970][ T30] audit: type=1400 audit(2000000875.328:1977): avc: denied { recv } for pid=13437 comm="syz.4.1692" saddr=10.128.0.169 src=43420 daddr=10.128.0.177 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 959.010414][T13452] input: syz1 as /devices/virtual/input/input124 [ 959.711043][ T30] audit: type=1400 audit(2000000877.508:1978): avc: denied { read } for pid=13454 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.886365][ T30] audit: type=1400 audit(2000000877.508:1979): avc: denied { open } for pid=13454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.911571][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.024941][ T30] audit: type=1400 audit(2000000877.508:1980): avc: denied { getattr } for pid=13454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.585875][ T30] audit: type=1400 audit(2000000877.718:1981): avc: denied { create } for pid=13460 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 960.943058][ T30] audit: type=1400 audit(2000000878.478:1982): avc: denied { create } for pid=13460 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 961.137896][ T30] audit: type=1400 audit(2000000878.878:1983): avc: denied { connect } for pid=13473 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.509881][T13480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1702'. [ 961.535403][ T30] audit: type=1400 audit(2000000878.878:1984): avc: denied { write } for pid=13473 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.555259][ T30] audit: type=1400 audit(2000000878.878:1985): avc: denied { read } for pid=13473 comm="syz.1.1702" path="socket:[40041]" dev="sockfs" ino=40041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.578437][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.671082][T13484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1705'. [ 962.165190][ T910] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 962.395420][T13491] syz.0.1706: attempt to access beyond end of device [ 962.395420][T13491] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 962.515764][T13491] SQUASHFS error: Failed to read block 0x0: -5 [ 962.522256][T13491] unable to read squashfs_super_block [ 962.535250][ T910] usb 5-1: Using ep0 maxpacket: 16 [ 963.307800][ T910] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 963.322939][ T910] usb 5-1: config 0 has no interface number 0 [ 963.331812][ T910] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 963.341445][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.349877][ T910] usb 5-1: Product: syz [ 963.363270][ T910] usb 5-1: Manufacturer: syz [ 963.370117][ T910] usb 5-1: SerialNumber: syz [ 963.376120][ T910] usb 5-1: config 0 descriptor?? [ 963.622482][T13504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.650896][ T30] audit: type=1400 audit(2000000881.438:1986): avc: denied { write } for pid=13433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.695349][T13506] openvswitch: netlink: Missing key (keys=40, expected=80) [ 963.729293][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 963.779409][ T30] audit: type=1400 audit(2000000881.438:1987): avc: denied { add_name } for pid=13433 comm="dhcpcd-run-hook" name="resolv.conf.cfpty28.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.803156][ T30] audit: type=1400 audit(2000000881.438:1988): avc: denied { create } for pid=13433 comm="dhcpcd-run-hook" name="resolv.conf.cfpty28.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 963.835203][ T30] audit: type=1400 audit(2000000881.438:1989): avc: denied { write } for pid=13433 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfpty28.link" dev="tmpfs" ino=7984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 963.928199][ T30] audit: type=1400 audit(2000000881.438:1990): avc: denied { append } for pid=13433 comm="dhcpcd-run-hook" name="resolv.conf.cfpty28.link" dev="tmpfs" ino=7984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 964.083895][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 964.095154][ T30] audit: type=1400 audit(2000000881.758:1991): avc: denied { remove_name } for pid=13512 comm="rm" name="resolv.conf.cfpty28.link" dev="tmpfs" ino=7984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.140625][ T30] audit: type=1400 audit(2000000881.758:1992): avc: denied { unlink } for pid=13512 comm="rm" name="resolv.conf.cfpty28.link" dev="tmpfs" ino=7984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 964.281373][T13518] input: syz1 as /devices/virtual/input/input126 [ 964.695404][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 964.749747][T13508] ceph: No mds server is up or the cluster is laggy [ 965.508474][ T24] usb 5-1: USB disconnect, device number 25 [ 965.688107][ T30] audit: type=1400 audit(2000000883.418:1993): avc: denied { ioctl } for pid=13525 comm="syz.4.1714" path="socket:[39701]" dev="sockfs" ino=39701 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 965.836479][ T30] audit: type=1400 audit(2000000883.618:1994): avc: denied { write } for pid=13531 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 966.010959][T13542] overlayfs: conflicting options: userxattr,metacopy=on [ 966.014771][T13539] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1718'. [ 966.694895][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 966.920033][T13555] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 966.965036][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 966.972641][T13555] ptrace attach of ""[13558] was attempted by "./syz-executor exec"[13555] [ 966.993961][ T24] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 967.022711][ T24] usb 2-1: config 0 has no interface number 0 [ 967.048746][ T24] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 967.090057][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.136041][ T24] usb 2-1: Product: syz [ 967.151743][ T24] usb 2-1: Manufacturer: syz [ 967.183743][ T24] usb 2-1: SerialNumber: syz [ 967.399442][ T24] usb 2-1: config 0 descriptor?? [ 967.815321][ T30] audit: type=1800 audit(2000000885.598:1995): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1724" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 969.516015][ T24] usb 2-1: USB disconnect, device number 20 [ 969.908425][T13590] input: syz1 as /devices/virtual/input/input127 [ 970.554440][T13592] input: syz1 as /devices/virtual/input/input128 [ 971.439244][ T5861] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 971.937378][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 971.938557][T13601] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 971.976546][T13604] delete_channel: no stack [ 971.994820][ T30] audit: type=1400 audit(2000000889.778:1996): avc: denied { ioctl } for pid=13604 comm="syz.0.1734" path="socket:[39812]" dev="sockfs" ino=39812 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 972.019747][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.049137][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 972.155287][T13601] ptrace attach of ""[13610] was attempted by "./syz-executor exec"[13601] [ 972.275609][T13611] input: syz1 as /devices/virtual/input/input130 [ 972.844487][T13613] syz.0.1736: attempt to access beyond end of device [ 972.844487][T13613] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 972.861219][ T5861] usb 4-1: device descriptor read/all, error -71 [ 972.871213][T13613] SQUASHFS error: Failed to read block 0x0: -5 [ 972.877500][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 972.891718][T13613] unable to read squashfs_super_block [ 972.912366][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 973.695897][ T9] usb 2-1: config 0 has no interface number 0 [ 973.711264][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 973.720580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.728722][ T9] usb 2-1: Product: syz [ 973.738568][ T9] usb 2-1: Manufacturer: syz [ 973.752184][ T9] usb 2-1: SerialNumber: syz [ 973.855682][ T9] usb 2-1: config 0 descriptor?? [ 975.031740][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 975.427464][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 975.464836][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 975.473975][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 975.491059][ T9] usb 4-1: config 0 has no interface number 0 [ 975.518381][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 975.534868][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.543258][ T9] usb 4-1: Product: syz [ 975.547967][ T9] usb 4-1: Manufacturer: syz [ 975.552864][ T9] usb 4-1: SerialNumber: syz [ 975.565381][ T9] usb 4-1: config 0 descriptor?? [ 975.698556][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 975.721387][T13626] ceph: No mds server is up or the cluster is laggy [ 976.100986][ T24] usb 2-1: USB disconnect, device number 21 [ 976.281462][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1740'. [ 976.291767][T13634] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 976.562928][T13639] input: syz1 as /devices/virtual/input/input131 [ 977.065218][T13641] input: syz1 as /devices/virtual/input/input132 [ 977.455522][ T9] usb 4-1: USB disconnect, device number 17 [ 977.618723][ T30] audit: type=1400 audit(2000000895.418:1997): avc: denied { read write } for pid=13644 comm="syz.2.1744" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 977.677747][T13649] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 977.707918][ T30] audit: type=1400 audit(2000000895.418:1998): avc: denied { open } for pid=13644 comm="syz.2.1744" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 977.744712][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 977.811802][ T30] audit: type=1400 audit(2000000895.448:1999): avc: denied { ioctl } for pid=13644 comm="syz.2.1744" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x227f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 977.943591][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 977.965226][T13659] fuse: Bad value for 'fd' [ 978.209897][T13664] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1752'. [ 979.238608][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 979.452820][T13677] overlayfs: missing 'workdir' [ 979.544991][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 979.611469][T13669] ceph: No mds server is up or the cluster is laggy [ 980.309111][ T30] audit: type=1400 audit(2000000898.088:2000): avc: denied { setopt } for pid=13682 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 981.075990][T13689] XFS (nullb0): Invalid superblock magic number [ 981.104819][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 981.204706][ T30] audit: type=1400 audit(2000000898.998:2001): avc: denied { connect } for pid=13697 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 981.231240][T13699] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 981.274818][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 981.305960][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 981.314043][ T9] usb 2-1: config 0 has no interface number 0 [ 981.342345][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 981.414452][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.425844][T13704] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 981.450025][ T9] usb 2-1: Product: syz [ 981.460390][ T9] usb 2-1: Manufacturer: syz [ 981.471499][ T9] usb 2-1: SerialNumber: syz [ 981.509366][T13704] ptrace attach of ""[13705] was attempted by "./syz-executor exec"[13704] [ 981.735128][ T9] usb 2-1: config 0 descriptor?? [ 984.155434][ T24] usb 2-1: USB disconnect, device number 22 [ 984.593021][T13719] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 984.593080][T13719] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 985.740534][ T30] audit: type=1800 audit(2000000903.538:2002): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1768" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 986.085047][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 986.509031][ T910] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 986.728654][T13746] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1772'. [ 986.987292][ T910] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 987.120933][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.129327][ T910] usb 4-1: Product: syz [ 987.134411][ T910] usb 4-1: Manufacturer: syz [ 987.139576][ T910] usb 4-1: SerialNumber: syz [ 987.147543][ T910] usb 4-1: config 0 descriptor?? [ 987.574953][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 987.790334][ T910] usb-storage 4-1:0.0: USB Mass Storage device detected [ 987.834736][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 987.875443][ T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 987.915041][ T24] usb 5-1: config 0 has no interface number 0 [ 988.007904][ T30] audit: type=1400 audit(2000000905.788:2003): avc: denied { create } for pid=13762 comm="syz.2.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 988.042877][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 988.084373][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.093492][ T910] usb 4-1: USB disconnect, device number 18 [ 988.117810][ T24] usb 5-1: Product: syz [ 988.129293][ T24] usb 5-1: Manufacturer: syz [ 988.134377][ T24] usb 5-1: SerialNumber: syz [ 988.148031][ T24] usb 5-1: config 0 descriptor?? [ 988.204435][T13768] XFS (nullb0): no-recovery mounts must be read-only. [ 988.399821][T13773] syz.0.1781: attempt to access beyond end of device [ 988.399821][T13773] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 988.631374][T13775] syz.0.1781 (13775): drop_caches: 2 [ 988.640276][T13773] SQUASHFS error: Failed to read block 0x0: -5 [ 988.670024][T13773] unable to read squashfs_super_block [ 988.699013][T13775] syz.0.1781 (13775): drop_caches: 2 [ 989.336774][T13779] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1783'. [ 989.581634][ T30] audit: type=1400 audit(2000000907.378:2004): avc: denied { create } for pid=13787 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 989.613469][ T30] audit: type=1400 audit(2000000907.408:2005): avc: denied { ioctl } for pid=13787 comm="syz.0.1786" path="socket:[41026]" dev="sockfs" ino=41026 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 989.718451][ T30] audit: type=1800 audit(2000000907.478:2006): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1782" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 989.877973][ T30] audit: type=1400 audit(2000000907.678:2007): avc: denied { create } for pid=13797 comm="syz.1.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 989.902405][ T30] audit: type=1400 audit(2000000907.678:2008): avc: denied { setopt } for pid=13797 comm="syz.1.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 990.634738][ T9] usb 5-1: USB disconnect, device number 26 [ 990.960937][T13806] syz.2.1793 (13806): drop_caches: 2 [ 991.045919][T13806] syz.2.1793 (13806): drop_caches: 2 [ 992.205253][ T910] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 992.356474][ T910] usb 5-1: Using ep0 maxpacket: 16 [ 992.363098][ T910] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 992.371362][ T910] usb 5-1: config 0 has no interface number 0 [ 992.380850][ T910] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 992.390138][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.408316][ T910] usb 5-1: Product: syz [ 992.422912][ T910] usb 5-1: Manufacturer: syz [ 992.433073][ T910] usb 5-1: SerialNumber: syz [ 992.465379][ T910] usb 5-1: config 0 descriptor?? [ 993.022017][ T30] audit: type=1400 audit(2000000910.818:2009): avc: denied { read } for pid=13819 comm="syz.1.1798" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 993.415390][ T30] audit: type=1400 audit(2000000910.818:2010): avc: denied { open } for pid=13819 comm="syz.1.1798" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 993.464427][T13829] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 993.750418][T13827] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1797'. [ 993.881794][ T30] audit: type=1400 audit(2000000910.978:2011): avc: denied { ioctl } for pid=13819 comm="syz.1.1798" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 994.237395][ T30] audit: type=1400 audit(2000000912.038:2012): avc: denied { ioctl } for pid=13835 comm="syz.3.1802" path="socket:[40863]" dev="sockfs" ino=40863 ioctlcmd=0x8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 994.395268][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 994.554861][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 994.563066][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 994.572872][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.636239][ T5861] usb 5-1: USB disconnect, device number 27 [ 994.660836][ T9] usb 2-1: config 0 has no interface number 0 [ 994.669310][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 994.678744][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.689010][ T9] usb 2-1: Product: syz [ 994.693159][ T9] usb 2-1: Manufacturer: syz [ 994.698482][ T9] usb 2-1: SerialNumber: syz [ 994.705111][ T9] usb 2-1: config 0 descriptor?? [ 994.917403][ T9] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 994.924815][ T9] usb 2-1: No valid video chain found. [ 994.991979][ T30] audit: type=1800 audit(2000000912.778:2013): pid=13841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1803" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 995.130868][ T910] usb 2-1: USB disconnect, device number 23 [ 995.212642][T13836] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 996.010613][T13859] overlayfs: missing 'workdir' [ 996.251030][T13861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 996.960269][ T30] audit: type=1400 audit(2000000914.748:2014): avc: denied { append } for pid=13865 comm="syz.1.1811" name="v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 996.965037][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 997.111344][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 997.166993][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 997.179031][ T30] audit: type=1400 audit(2000000914.978:2015): avc: denied { create } for pid=13871 comm="syz.1.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.213940][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 997.240519][ T30] audit: type=1400 audit(2000000915.038:2016): avc: denied { getopt } for pid=13871 comm="syz.1.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.259988][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.303971][ T9] usb 4-1: config 0 has no interface number 0 [ 997.318826][T13856] ceph: No mds server is up or the cluster is laggy [ 997.338318][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 997.384788][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.385003][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 997.392796][ T9] usb 4-1: Product: syz [ 997.392811][ T9] usb 4-1: Manufacturer: syz [ 997.392829][ T9] usb 4-1: SerialNumber: syz [ 997.406322][ T9] usb 4-1: config 0 descriptor?? [ 997.593236][T13883] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1816'. [ 998.762547][ T30] audit: type=1400 audit(2000000916.558:2017): avc: denied { write } for pid=13898 comm="syz.2.1822" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 999.034693][ T24] usb 4-1: USB disconnect, device number 19 [ 999.167065][T13907] overlayfs: missing 'workdir' [ 999.295429][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 999.795531][T13917] input: syz1 as /devices/virtual/input/input134 [ 1001.111536][T13940] input: syz1 as /devices/virtual/input/input135 [ 1003.417824][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1003.879411][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1003.882584][ T9] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1003.882603][ T9] usb 5-1: config 0 has no interface number 0 [ 1003.884471][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1003.914968][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.914996][ T9] usb 5-1: Product: syz [ 1003.915010][ T9] usb 5-1: Manufacturer: syz [ 1003.915024][ T9] usb 5-1: SerialNumber: syz [ 1003.926540][ T9] usb 5-1: config 0 descriptor?? [ 1004.043142][T13963] overlayfs: missing 'workdir' [ 1004.174907][ T5861] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1004.817716][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 1004.859038][ T5861] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1004.879392][ T5861] usb 2-1: config 0 has no interface number 0 [ 1004.909301][ T5861] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1004.928818][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.954333][ T5861] usb 2-1: Product: syz [ 1004.962511][ T30] audit: type=1400 audit(2000000922.748:2018): avc: denied { setopt } for pid=13970 comm="syz.0.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1004.982235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.009186][ T5861] usb 2-1: Manufacturer: syz [ 1005.040983][ T5861] usb 2-1: SerialNumber: syz [ 1005.065974][ T5861] usb 2-1: config 0 descriptor?? [ 1005.477619][T13977] input: syz1 as /devices/virtual/input/input136 [ 1006.111746][ T24] usb 5-1: USB disconnect, device number 28 [ 1006.349282][T13993] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.447855][T13993] ptrace attach of ""[13999] was attempted by "./syz-executor exec"[13993] [ 1007.301491][ T5861] usb 2-1: USB disconnect, device number 24 [ 1007.948764][ T30] audit: type=1800 audit(2000000925.678:2019): pid=14014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1861" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1008.226508][T14018] input: syz1 as /devices/virtual/input/input137 [ 1009.402798][T14031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'. [ 1009.424110][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 1009.454198][T14031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'. [ 1009.570888][T14029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 1009.671441][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 1009.708068][T14039] netlink: 'syz.1.1869': attribute type 4 has an invalid length. [ 1010.193111][T14040] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1868'. [ 1010.736491][ T30] audit: type=1800 audit(2000000928.528:2020): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1870" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1010.814701][ T5861] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1010.850622][ T30] audit: type=1400 audit(2000000928.648:2021): avc: denied { ioctl } for pid=14052 comm="syz.1.1874" path="socket:[41520]" dev="sockfs" ino=41520 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1011.024715][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 1011.040897][ T5861] usb 4-1: config 6 has an invalid interface number: 64 but max is 0 [ 1011.060152][ T5861] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.204941][ T5861] usb 4-1: config 6 has no interface number 0 [ 1011.214269][ T5861] usb 4-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30 [ 1011.228749][ T5861] usb 4-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1011.769323][ T5861] usb 4-1: config 6 interface 64 has no altsetting 0 [ 1011.775539][T14059] input: syz1 as /devices/virtual/input/input138 [ 1011.777872][ T5861] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1011.805723][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.813771][ T5861] usb 4-1: Product: syz [ 1011.864706][ T5861] usb 4-1: Manufacturer: syz [ 1011.874827][ T5861] usb 4-1: SerialNumber: syz [ 1012.035424][ T30] audit: type=1400 audit(2000000929.828:2022): avc: denied { bind } for pid=14063 comm="syz.0.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1012.121813][T14067] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1012.204893][T14067] ptrace attach of ""[14068] was attempted by "./syz-executor exec"[14067] [ 1012.428004][ T24] usb 4-1: USB disconnect, device number 20 [ 1012.774590][T14072] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 1012.804698][T14072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1881'. [ 1012.890250][T14074] syz.1.1882 (14074): drop_caches: 2 [ 1013.042827][T14074] syz.1.1882 (14074): drop_caches: 2 [ 1013.063393][ T30] audit: type=1400 audit(2000000930.858:2023): avc: denied { setopt } for pid=14079 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1013.403257][ T30] audit: type=1800 audit(2000000931.198:2024): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1887" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1013.530293][ T30] audit: type=1400 audit(2000000931.328:2025): avc: denied { getopt } for pid=14089 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1013.583836][T14094] fuse: Bad value for 'fd' [ 1014.484922][ T910] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1014.639122][T14113] syz.3.1899: attempt to access beyond end of device [ 1014.639122][T14113] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1014.656397][T14106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1894'. [ 1014.673057][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1014.686802][ T910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1014.701048][T14113] SQUASHFS error: Failed to read block 0x0: -5 [ 1014.709209][ T30] audit: type=1400 audit(2000000932.508:2026): avc: denied { ioctl } for pid=14115 comm="syz.0.1898" path="socket:[42634]" dev="sockfs" ino=42634 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1014.734528][T14113] unable to read squashfs_super_block [ 1014.740295][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1014.764393][T14113] syz.3.1899 (14113): drop_caches: 2 [ 1014.774702][ T910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1014.775201][T14113] syz.3.1899 (14113): drop_caches: 2 [ 1014.793247][ T910] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1014.812488][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.543769][ T910] usb 2-1: Product: syz [ 1015.874736][ T910] usb 2-1: Manufacturer: syz [ 1015.907754][ T910] usb 2-1: SerialNumber: syz [ 1016.078167][ T910] usb 2-1: config 0 descriptor?? [ 1016.116716][ T910] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1016.377216][T14133] input: syz1 as /devices/virtual/input/input139 [ 1016.723152][ T910] scsi host1: usb-storage 2-1:0.0 [ 1016.748666][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 1016.825412][ T910] usb 2-1: USB disconnect, device number 25 [ 1017.060707][ T30] audit: type=1800 audit(2000000934.838:2027): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1905" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1017.572834][ T30] audit: type=1800 audit(2000000935.368:2028): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1907" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1018.598249][ T910] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1019.027675][ T30] audit: type=1400 audit(2000000936.818:2029): avc: denied { setopt } for pid=14179 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1019.057004][ T910] usb 3-1: Using ep0 maxpacket: 16 [ 1019.128625][ T910] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1019.160517][ T910] usb 3-1: config 0 has no interface number 0 [ 1019.162776][ T910] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1019.162802][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.162820][ T910] usb 3-1: Product: syz [ 1019.162835][ T910] usb 3-1: Manufacturer: syz [ 1019.162849][ T910] usb 3-1: SerialNumber: syz [ 1019.176690][ T910] usb 3-1: config 0 descriptor?? [ 1019.465166][T14172] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1019.529558][ T30] audit: type=1800 audit(2000000937.328:2030): pid=14190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1921" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1019.732659][ T30] audit: type=1800 audit(2000000937.528:2031): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1923" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1020.193391][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 1020.641298][T14211] input: syz1 as /devices/virtual/input/input140 [ 1021.101229][ T910] usb 3-1: USB disconnect, device number 13 [ 1021.400546][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 1021.820688][T14220] netlink: 'syz.3.1933': attribute type 11 has an invalid length. [ 1021.920600][T14228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1934'. [ 1022.107382][T14238] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 1022.189162][ T30] audit: type=1400 audit(2000000939.988:2032): avc: denied { create } for pid=14241 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1022.236345][T14238] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1939'. [ 1022.301152][ T30] audit: type=1400 audit(2000000940.018:2033): avc: denied { connect } for pid=14241 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1022.459782][T14254] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 1022.460708][ T30] audit: type=1800 audit(2000000940.128:2034): pid=14245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1940" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 1023.444253][T14257] input: syz1 as /devices/virtual/input/input141 [ 1023.700454][ T910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1024.115419][ T910] usb 2-1: Using ep0 maxpacket: 16 [ 1024.137018][ T910] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1024.143266][ T30] audit: type=1800 audit(2000000941.928:2035): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1951" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1024.145242][ T910] usb 2-1: config 0 has no interface number 0 [ 1024.155648][ T910] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1024.336991][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.535511][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1024.612169][ T910] usb 2-1: Product: syz [ 1024.634905][ T910] usb 2-1: Manufacturer: syz [ 1024.641030][ T910] usb 2-1: SerialNumber: syz [ 1024.648558][ T910] usb 2-1: config 0 descriptor?? [ 1024.731107][T14283] syz.2.1957 (14283): drop_caches: 2 [ 1024.747339][T14283] syz.2.1957 (14283): drop_caches: 2 [ 1024.813752][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1025.309208][ T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1025.501992][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 1025.577774][ T24] usb 5-1: config 0 has no interface number 0 [ 1025.596402][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1025.624753][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.632790][ T24] usb 5-1: Product: syz [ 1025.647133][ T24] usb 5-1: Manufacturer: syz [ 1025.651940][ T24] usb 5-1: SerialNumber: syz [ 1025.659493][ T24] usb 5-1: config 0 descriptor?? [ 1025.676859][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 1025.703303][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 1025.751167][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 1026.055359][T14300] input: syz1 as /devices/virtual/input/input142 [ 1026.524811][T14302] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1026.866625][ T5861] usb 2-1: USB disconnect, device number 26 [ 1026.899083][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 1026.910296][ T30] audit: type=1400 audit(2000000944.698:2036): avc: denied { nlmsg_read } for pid=14308 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1027.225998][T14321] syz.1.1972 (14321): drop_caches: 2 [ 1027.250004][ T30] audit: type=1800 audit(2000000945.048:2037): pid=14319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1969" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1027.256059][ T24] usb 5-1: USB disconnect, device number 29 [ 1027.342929][T14321] syz.1.1972 (14321): drop_caches: 2 [ 1027.942849][T14327] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1028.320390][T14335] syz.1.1977: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1028.455040][ T30] audit: type=1400 audit(2000000946.118:2038): avc: denied { setopt } for pid=14331 comm="syz.1.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1028.455089][ T30] audit: type=1400 audit(2000000946.138:2039): avc: denied { getopt } for pid=14336 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1028.544951][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.1.1977 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 1028.544981][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.544993][T14335] Call Trace: [ 1028.544999][T14335] [ 1028.545006][T14335] dump_stack_lvl+0x16c/0x1f0 [ 1028.545036][T14335] warn_alloc+0x248/0x3a0 [ 1028.545055][T14335] ? __pfx_warn_alloc+0x10/0x10 [ 1028.545072][T14335] ? stack_depot_save_flags+0x3e6/0xa50 [ 1028.545105][T14335] ? kasan_save_stack+0x42/0x60 [ 1028.545119][T14335] ? kasan_save_stack+0x33/0x60 [ 1028.545134][T14335] ? kasan_save_track+0x14/0x30 [ 1028.545149][T14335] ? __kasan_kmalloc+0xaa/0xb0 [ 1028.545172][T14335] ? xskq_create+0x52/0x1d0 [ 1028.545192][T14335] ? do_sock_setsockopt+0x224/0x470 [ 1028.545214][T14335] ? __sys_setsockopt+0x1a0/0x230 [ 1028.545229][T14335] ? __x64_sys_setsockopt+0xbd/0x160 [ 1028.545253][T14335] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 1028.545286][T14335] ? xskq_create+0xfb/0x1d0 [ 1028.545312][T14335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1028.545344][T14335] ? xskq_create+0xfb/0x1d0 [ 1028.545365][T14335] vmalloc_user_noprof+0x6b/0x90 [ 1028.545389][T14335] ? xskq_create+0xfb/0x1d0 [ 1028.545417][T14335] xskq_create+0xfb/0x1d0 [ 1028.545441][T14335] xsk_setsockopt+0x640/0x840 [ 1028.545464][T14335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1028.545492][T14335] ? selinux_socket_setsockopt+0x6a/0x80 [ 1028.545517][T14335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1028.545537][T14335] do_sock_setsockopt+0x224/0x470 [ 1028.545560][T14335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1028.545599][T14335] __sys_setsockopt+0x1a0/0x230 [ 1028.545623][T14335] __x64_sys_setsockopt+0xbd/0x160 [ 1028.545641][T14335] ? do_syscall_64+0x91/0x260 [ 1028.545665][T14335] ? lockdep_hardirqs_on+0x7c/0x110 [ 1028.545689][T14335] do_syscall_64+0xcd/0x260 [ 1028.545717][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.545736][T14335] RIP: 0033:0x7fdc4f18e969 [ 1028.545751][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.545768][T14335] RSP: 002b:00007fdc500a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.545787][T14335] RAX: ffffffffffffffda RBX: 00007fdc4f3b5fa0 RCX: 00007fdc4f18e969 [ 1028.545798][T14335] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1028.545809][T14335] RBP: 00007fdc4f210ab1 R08: 0000000000000052 R09: 0000000000000000 [ 1028.545820][T14335] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.545831][T14335] R13: 0000000000000000 R14: 00007fdc4f3b5fa0 R15: 00007fff594ca908 [ 1028.545858][T14335] [ 1028.545865][T14335] Mem-Info: [ 1028.725479][ T30] audit: type=1400 audit(2000000946.528:2040): avc: denied { read } for pid=14342 comm="syz.3.1980" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1028.990502][T14343] binder: 14342:14343 ioctl c00c6211 0 returned -14 [ 1028.994784][ T30] audit: type=1400 audit(2000000946.788:2041): avc: denied { open } for pid=14342 comm="syz.3.1980" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1028.994822][ T30] audit: type=1400 audit(2000000946.788:2042): avc: denied { ioctl } for pid=14342 comm="syz.3.1980" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1028.995394][T14335] active_anon:25597 inactive_anon:0 isolated_anon:0 [ 1028.995394][T14335] active_file:18905 inactive_file:41397 isolated_file:0 [ 1028.995394][T14335] unevictable:768 dirty:269 writeback:0 [ 1028.995394][T14335] slab_reclaimable:7101 slab_unreclaimable:109840 [ 1028.995394][T14335] mapped:32719 shmem:14339 pagetables:1170 [ 1028.995394][T14335] sec_pagetables:0 bounce:0 [ 1028.995394][T14335] kernel_misc_reclaimable:0 [ 1028.995394][T14335] free:1289211 free_pcp:648 free_cma:0 [ 1028.995469][T14335] Node 0 active_anon:102388kB inactive_anon:0kB active_file:75620kB inactive_file:165384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130876kB dirty:1076kB writeback:0kB shmem:55820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1028.995499][T14335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1028.995526][T14335] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.995557][T14335] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 1028.995579][T14335] Node 0 DMA32 free:1234168kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:102364kB inactive_anon:0kB active_file:75620kB inactive_file:163552kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2543908kB mlocked:0kB bounce:0kB free_pcp:2564kB local_pcp:1468kB free_cma:0kB [ 1028.995610][T14335] lowmem_reserve[]: 0 0 1 1 1 [ 1028.995631][T14335] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1028.995660][T14335] lowmem_reserve[]: 0 0 0 0 0 [ 1028.995681][T14335] Node 1 Normal free:3907300kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.995710][T14335] lowmem_reserve[]: 0 0 0 0 0 [ 1028.995731][T14335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1028.995833][T14335] Node 0 DMA32: 58*4kB (UME) 234*8kB (UME) 430*16kB (UME) 286*32kB (UME) 123*64kB (UME) 80*128kB (UME) 61*256kB (UME) 29*512kB (UME) 20*1024kB (ME) 12*2048kB (UME) 274*4096kB (UM) = 1234072kB [ 1028.995927][T14335] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1028.995988][T14335] Node 1 Normal: 209*4kB (UE) 54*8kB (UME) 37*16kB (UME) 227*32kB (UME) 99*64kB (UME) 29*128kB (UME) 16*256kB (UME) 12*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 944*4096kB (UM) = 3907300kB [ 1028.996083][T14335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.996092][T14335] Node 0 hugepages_total=6 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 1028.996101][T14335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.996110][T14335] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1028.996118][T14335] 74637 total pagecache pages [ 1028.996123][T14335] 0 pages in swap cache [ 1028.996127][T14335] Free swap = 124996kB [ 1028.996131][T14335] Total swap = 124996kB [ 1028.996135][T14335] 2097051 pages RAM [ 1028.996152][T14335] 0 pages HighMem/MovableOnly [ 1028.996156][T14335] 428968 pages reserved [ 1028.996160][T14335] 0 pages cma reserved [ 1029.529249][T14346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1976'. [ 1030.044756][ T30] audit: type=1400 audit(2000000947.838:2043): avc: denied { ioctl } for pid=14365 comm="syz.1.1990" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1030.084778][T14368] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 1030.130899][T14371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.144687][T14368] netlink: 'syz.0.1991': attribute type 2 has an invalid length. [ 1030.223371][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 1030.580353][T14379] overlayfs: missing 'workdir' [ 1032.952580][T14413] overlayfs: missing 'workdir' [ 1034.254210][T14429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1034.415363][T14434] overlayfs: missing 'workdir' [ 1036.524363][ T30] audit: type=1400 audit(2000000954.298:2044): avc: denied { append } for pid=14435 comm="syz.0.2020" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1036.627811][T14446] netlink: 'syz.4.2024': attribute type 11 has an invalid length. [ 1036.684930][ T30] audit: type=1400 audit(2000000954.298:2045): avc: denied { open } for pid=14435 comm="syz.0.2020" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1036.698525][T14446] netlink: 'syz.4.2024': attribute type 11 has an invalid length. [ 1036.960048][T14457] overlayfs: missing 'workdir' [ 1037.821530][ T30] audit: type=1400 audit(2000000954.398:2046): avc: denied { getopt } for pid=14437 comm="syz.2.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1037.841388][ T30] audit: type=1400 audit(2000000954.528:2047): avc: denied { write } for pid=14447 comm="syz.1.2026" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1037.845744][T14446] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1038.038892][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1038.379704][T14462] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1038.646522][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1038.653511][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1038.663814][ T24] usb 4-1: config 0 has no interface number 0 [ 1038.672508][ T24] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1038.692114][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.744655][ T24] usb 4-1: Product: syz [ 1038.748852][ T24] usb 4-1: Manufacturer: syz [ 1038.753449][ T24] usb 4-1: SerialNumber: syz [ 1038.785197][ T24] usb 4-1: config 0 descriptor?? [ 1039.736511][T14483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.761592][T14481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2031'. [ 1040.176155][T14493] input: syz1 as /devices/virtual/input/input143 [ 1040.759253][ T5861] usb 4-1: USB disconnect, device number 21 [ 1040.937460][T14497] binder: BC_ATTEMPT_ACQUIRE not supported [ 1040.945437][T14501] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1041.224543][T14497] binder: 14496:14497 ioctl c0306201 2000000001c0 returned -22 [ 1041.800025][T14507] overlayfs: missing 'workdir' [ 1042.055414][T14511] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2046'. [ 1042.248148][ T30] audit: type=1800 audit(2000000960.048:2048): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2047" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1042.656014][T14527] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1042.966507][ T30] audit: type=1400 audit(2000000960.758:2049): avc: denied { ioctl } for pid=14534 comm="syz.2.2045" path="socket:[43810]" dev="sockfs" ino=43810 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1042.966958][T14533] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1043.512067][T14544] input: syz1 as /devices/virtual/input/input144 [ 1043.779304][ T30] audit: type=1400 audit(2000000961.578:2050): avc: denied { getopt } for pid=14548 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1043.814816][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.076127][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 1044.110866][T14556] netlink: 'syz.2.2062': attribute type 4 has an invalid length. [ 1044.547025][T14563] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1044.798509][T14576] fuse: Bad value for 'fd' [ 1045.789515][ T5868] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1045.822699][T14583] lo speed is unknown, defaulting to 1000 [ 1046.474642][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 1046.635303][ T5868] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1046.804743][ T5868] usb 4-1: config 0 has no interface number 0 [ 1046.836881][ T5868] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1046.873887][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.890083][ T5868] usb 4-1: Product: syz [ 1046.990535][ T5868] usb 4-1: Manufacturer: syz [ 1046.996070][ T5868] usb 4-1: SerialNumber: syz [ 1047.020233][ T5868] usb 4-1: config 0 descriptor?? [ 1047.362073][T14602] input: syz1 as /devices/virtual/input/input145 [ 1047.602075][ T5868] usb 4-1: USB disconnect, device number 22 [ 1047.800625][T14612] binder: 14608:14612 ioctl c0046209 0 returned -22 [ 1047.825848][T14615] fuse: Bad value for 'fd' [ 1048.551282][T14623] overlayfs: missing 'workdir' [ 1049.916222][ T30] audit: type=1400 audit(2000000967.698:2051): avc: denied { setopt } for pid=14630 comm="syz.3.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1050.452829][T14640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2093'. [ 1050.495888][T14647] nft_compat: unsupported protocol 5 [ 1051.406814][T14651] input: syz1 as /devices/virtual/input/input146 [ 1051.532370][T14657] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 1051.680057][T14662] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1051.962518][T14663] fuse: Bad value for 'fd' [ 1052.176691][T14666] overlayfs: missing 'workdir' [ 1054.857785][ T30] audit: type=1400 audit(2000000972.658:2052): avc: denied { write } for pid=14674 comm="syz.1.2108" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1054.945868][T14681] fuse: Bad value for 'fd' [ 1055.292651][ T30] audit: type=1400 audit(2000000972.658:2053): avc: denied { open } for pid=14674 comm="syz.1.2108" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1055.394050][ T30] audit: type=1400 audit(2000000973.188:2054): avc: denied { setopt } for pid=14683 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1055.570266][ T30] audit: type=1400 audit(2000000973.368:2055): avc: denied { getopt } for pid=14690 comm="syz.3.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1055.964746][ T30] audit: type=1800 audit(2000000973.468:2056): pid=14697 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2116" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1056.108646][T14702] fuse: Bad value for 'fd' [ 1056.517347][T14707] syz.1.2121 (14707): drop_caches: 2 [ 1056.527297][T14707] syz.1.2121 (14707): drop_caches: 2 [ 1057.955107][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1058.088452][T14721] fuse: Bad value for 'fd' [ 1058.257333][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1058.455900][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1058.474678][ T24] usb 4-1: config 0 has no interface number 0 [ 1058.486345][ T24] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1058.503993][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.523166][ T24] usb 4-1: Product: syz [ 1058.619714][ T24] usb 4-1: Manufacturer: syz [ 1058.624749][ T24] usb 4-1: SerialNumber: syz [ 1058.632311][ T24] usb 4-1: config 0 descriptor?? [ 1058.755981][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 1059.180610][ T30] audit: type=1400 audit(2000000976.978:2057): avc: denied { create } for pid=14736 comm="syz.0.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1059.210113][ T30] audit: type=1400 audit(2000000976.978:2058): avc: denied { bind } for pid=14736 comm="syz.0.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1059.211752][T14735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.826487][T14752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2138'. [ 1059.876833][T14753] overlayfs: missing 'workdir' [ 1060.469745][ T5868] usb 4-1: USB disconnect, device number 23 [ 1060.810210][ T30] audit: type=1400 audit(2000000978.578:2059): avc: denied { write } for pid=14755 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1060.830229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.915925][ T30] audit: type=1400 audit(2000000978.698:2060): avc: denied { getopt } for pid=14761 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1060.938601][T14764] fuse: Bad value for 'fd' [ 1061.511062][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1061.767860][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 1062.204937][ T30] audit: type=1800 audit(2000000979.958:2061): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2152" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 1062.244687][T14792] overlayfs: missing 'workdir' [ 1062.775679][T14804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1062.897997][T14808] fuse: Bad value for 'fd' [ 1063.154609][ T5868] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1063.455460][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1063.471611][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.557981][ T5868] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1063.952710][ T5868] usb 2-1: config 1 has no interface number 1 [ 1063.970617][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1063.985448][ T30] audit: type=1400 audit(2000000981.788:2062): avc: denied { read } for pid=14820 comm="syz.0.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1064.014757][ T5868] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 201, changing to 7 [ 1064.035522][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.052705][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.062117][ T5868] usb 2-1: Product: syz [ 1064.066652][ T5861] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1064.081930][ T5868] usb 2-1: Manufacturer: syz [ 1064.087073][ T5868] usb 2-1: SerialNumber: syz [ 1064.224763][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 1064.238733][ T5861] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1064.252650][ T5861] usb 4-1: config 0 has no interface number 0 [ 1064.313248][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 1064.926740][ T5861] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1064.944743][ T5868] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1064.952767][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.180180][ T5861] usb 4-1: Product: syz [ 1065.184386][ T5861] usb 4-1: Manufacturer: syz [ 1065.203971][ T5868] usb 2-1: USB disconnect, device number 27 [ 1065.216819][ T5861] usb 4-1: SerialNumber: syz [ 1065.245315][ T5861] usb 4-1: config 0 descriptor?? [ 1065.394413][T14836] overlayfs: missing 'workdir' [ 1066.199906][ T6711] udevd[6711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.257131][T14852] overlayfs: missing 'workdir' [ 1067.900620][ T5868] usb 4-1: USB disconnect, device number 24 [ 1067.911444][ T30] audit: type=1400 audit(2000000985.708:2063): avc: denied { write } for pid=14856 comm="syz.4.2178" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1067.935940][ T30] audit: type=1400 audit(2000000985.708:2064): avc: denied { open } for pid=14856 comm="syz.4.2178" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1068.052786][ T30] audit: type=1400 audit(2000000985.838:2065): avc: denied { connect } for pid=14859 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1068.183891][T14863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1068.512745][T14869] syz.1.2182 (14869): drop_caches: 2 [ 1068.538151][T14869] syz.1.2182 (14869): drop_caches: 2 [ 1069.664759][T14874] input: syz1 as /devices/virtual/input/input147 [ 1069.839499][T14866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1070.748951][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 1071.238184][T14885] netlink: 'syz.4.2187': attribute type 7 has an invalid length. [ 1072.867236][ T30] audit: type=1400 audit(2000000990.668:2066): avc: denied { create } for pid=14912 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1073.235311][T14914] input: syz1 as /devices/virtual/input/input148 [ 1073.255199][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1073.273008][T14915] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1073.273758][ T30] audit: type=1400 audit(2000000991.058:2067): avc: denied { getopt } for pid=14912 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1073.430041][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1073.557624][T14915] ptrace attach of ""[14918] was attempted by "./syz-executor exec"[14915] [ 1073.565826][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1073.590036][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1073.681495][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1073.702485][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1073.714279][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1073.730456][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1073.824690][ T30] audit: type=1400 audit(2000000991.608:2068): avc: denied { bind } for pid=14921 comm="syz.2.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1073.826778][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1073.897627][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1073.941811][ T24] usb 4-1: Product: syz [ 1073.960951][ T24] usb 4-1: Manufacturer: syz [ 1073.966710][ T24] usb 4-1: SerialNumber: syz [ 1073.973767][ T24] usb 4-1: config 0 descriptor?? [ 1073.981174][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1073.998357][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1074.650915][T14931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1074.845536][ T30] audit: type=1400 audit(2000000992.638:2069): avc: denied { write } for pid=14937 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1075.126061][T14901] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1075.164971][ T5868] usb 4-1: USB disconnect, device number 25 [ 1075.185122][ T5868] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1075.742809][T14953] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1075.914022][ T30] audit: type=1400 audit(2000000993.698:2070): avc: denied { getopt } for pid=14956 comm="syz.0.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1075.934858][T14953] ptrace attach of ""[14955] was attempted by "./syz-executor exec"[14953] [ 1079.137387][T14999] input: syz1 as /devices/virtual/input/input149 [ 1080.148217][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1080.156627][T15015] QAT: failed to copy from user cfg_data. [ 1080.511076][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1081.101085][T15032] input: syz1 as /devices/virtual/input/input150 [ 1081.187899][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1081.226865][T15023] ceph: No mds server is up or the cluster is laggy [ 1082.634406][T15027] Bluetooth: hci2: command 0x0406 tx timeout [ 1083.228001][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 1083.267200][T15063] netlink: 'syz.3.2248': attribute type 4 has an invalid length. [ 1084.999548][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2257'. [ 1086.072113][ T30] audit: type=1800 audit(2000001003.868:2071): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2265" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 1086.605219][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1086.787569][ T30] audit: type=1400 audit(2000001004.588:2072): avc: denied { read } for pid=15123 comm="syz.4.2274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1086.834216][ T30] audit: type=1400 audit(2000001004.588:2073): avc: denied { open } for pid=15123 comm="syz.4.2274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1086.865935][ T30] audit: type=1400 audit(2000001004.668:2074): avc: denied { execute } for pid=15126 comm="syz.3.2275" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1086.921544][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1087.139448][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1087.397366][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1087.423770][ T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1087.452667][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.541926][ T24] usb 2-1: Product: syz [ 1087.546496][ T24] usb 2-1: Manufacturer: syz [ 1087.574794][ T24] usb 2-1: SerialNumber: syz [ 1087.749957][ T24] usb 2-1: config 0 descriptor?? [ 1087.762767][ T24] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1087.905305][T15143] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2279'. [ 1088.037461][ T5861] usb 2-1: USB disconnect, device number 28 [ 1088.251404][ T30] audit: type=1400 audit(2000001006.048:2075): avc: denied { setopt } for pid=15153 comm="syz.2.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1088.661100][T15158] input: syz1 as /devices/virtual/input/input151 [ 1088.766338][T15157] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1091.529767][T15196] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 1092.423792][T15207] input: syz1 as /devices/virtual/input/input152 [ 1092.952028][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1093.669605][T15222] input: syz1 as /devices/virtual/input/input153 [ 1093.763804][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1094.025906][ T24] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1094.034024][ T24] usb 3-1: config 0 has no interface number 0 [ 1094.046824][ T24] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1094.062093][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.062168][ T30] audit: type=1400 audit(2000001011.848:2076): avc: denied { write } for pid=15223 comm="syz.4.2310" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1094.156368][ T24] usb 3-1: Product: syz [ 1094.160566][ T24] usb 3-1: Manufacturer: syz [ 1094.165522][ T24] usb 3-1: SerialNumber: syz [ 1094.191213][ T24] usb 3-1: config 0 descriptor?? [ 1094.205799][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'. [ 1094.531192][T15240] netlink: 'syz.3.2317': attribute type 2 has an invalid length. [ 1094.539318][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 1094.561246][T15240] : entered promiscuous mode [ 1094.919722][T15250] input: syz1 as /devices/virtual/input/input154 [ 1095.317817][T15253] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2319'. [ 1095.677864][T15259] input: syz1 as /devices/virtual/input/input155 [ 1096.057591][ T5868] usb 3-1: USB disconnect, device number 14 [ 1096.114719][ T5861] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1096.614873][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 1096.731205][T15273] overlayfs: failed to resolve './file1': -2 [ 1097.582112][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.638596][T15281] overlayfs: failed to resolve './file1': -2 [ 1097.843204][T15283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1098.398389][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1098.475474][ T5861] usb 4-1: string descriptor 0 read error: -71 [ 1098.481766][ T5861] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1098.512741][ T30] audit: type=1400 audit(2000001016.308:2077): avc: denied { setopt } for pid=15288 comm="syz.4.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1098.570485][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.651979][ T5861] usb 4-1: config 0 descriptor?? [ 1098.668935][ T5861] usb 4-1: can't set config #0, error -71 [ 1098.699495][ T5861] usb 4-1: USB disconnect, device number 26 [ 1098.928543][ T30] audit: type=1400 audit(2000001016.718:2078): avc: denied { setattr } for pid=15303 comm="syz.1.2342" name="NETLINK" dev="sockfs" ino=49275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1099.534634][ T5861] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1099.866927][T15321] overlayfs: failed to resolve './file1': -2 [ 1100.700293][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1100.743189][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.780941][ T5861] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1100.804893][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.830862][ T5861] usb 4-1: Product: syz [ 1100.835912][ T5861] usb 4-1: Manufacturer: syz [ 1100.840489][ T5861] usb 4-1: SerialNumber: syz [ 1100.866992][ T5861] usb 4-1: config 0 descriptor?? [ 1100.894638][ T5861] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1100.972949][T15349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1101.105247][ T5861] usb 4-1: USB disconnect, device number 27 [ 1101.344723][T15363] overlayfs: failed to resolve './file1': -2 [ 1102.015365][T15367] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1102.044100][T15361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2360'. [ 1102.393479][T15359] ptrace attach of ""[15368] was attempted by "./syz-executor exec"[15359] [ 1102.520922][T15373] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1102.879089][ T5868] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1102.930966][T15383] netlink: 'syz.0.2367': attribute type 2 has an invalid length. [ 1102.943134][T15383] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 1102.969849][T15383] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 1103.062548][ T5868] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1103.070681][ T5868] usb 3-1: config 0 has no interface number 0 [ 1103.086602][ T5868] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1103.087561][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1103.114818][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.133082][ T5868] usb 3-1: Product: syz [ 1103.142158][ T5868] usb 3-1: Manufacturer: syz [ 1103.187682][ T5868] usb 3-1: SerialNumber: syz [ 1103.306576][ T5868] usb 3-1: config 0 descriptor?? [ 1103.719311][T15395] input: syz1 as /devices/virtual/input/input156 [ 1103.772036][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1103.786119][ T5868] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1103.834115][ T5868] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1103.890972][ T5868] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1103.921030][T15398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1103.934675][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1103.950158][ T5868] usb 3-1: media controller created [ 1103.962172][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.988868][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1104.019147][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1104.028068][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.035974][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1104.060543][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.196615][ T5868] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1104.217779][ T9] usb 5-1: config 0 descriptor?? [ 1104.220020][ T30] audit: type=1400 audit(2000001022.018:2079): avc: denied { setopt } for pid=15400 comm="syz.0.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1104.394860][ T5868] usb 3-1: USB disconnect, device number 15 [ 1104.964112][T15418] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1105.089347][ T9] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1105.401792][ T9] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -38 [ 1105.512042][ T9] usb 5-1: USB disconnect, device number 30 [ 1105.710674][T15423] fido_id[15423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1105.749205][ T30] audit: type=1400 audit(2000001023.528:2080): avc: denied { write } for pid=15428 comm="syz.2.2386" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1105.806982][T15431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1105.839039][T15434] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1106.856304][T15450] vivid-004: disconnect [ 1106.893170][T15449] vivid-004: reconnect [ 1107.168353][T15457] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1107.648551][ T30] audit: type=1400 audit(2000001025.448:2081): avc: denied { setopt } for pid=15463 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1107.720897][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1107.793243][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1107.819012][T15467] netlink: 'syz.3.2400': attribute type 14 has an invalid length. [ 1109.424257][T15489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2409'. [ 1109.567183][ T30] audit: type=1400 audit(2000001027.368:2082): avc: denied { read } for pid=15499 comm="syz.2.2414" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1109.589951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.674891][T15503] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1109.981579][ T30] audit: type=1400 audit(2000001027.368:2083): avc: denied { open } for pid=15499 comm="syz.2.2414" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1110.011788][ T30] audit: type=1400 audit(2000001027.398:2084): avc: denied { ioctl } for pid=15499 comm="syz.2.2414" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1110.224775][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 1110.962127][T15520] input: syz1 as /devices/virtual/input/input157 [ 1111.004634][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1111.046230][T15522] macvlan2: entered promiscuous mode [ 1111.051526][T15522] macvlan2: entered allmulticast mode [ 1111.265212][ T30] audit: type=1400 audit(2000001029.068:2085): avc: denied { connect } for pid=15525 comm="syz.2.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1111.315274][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1111.334305][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.384743][ T5868] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1111.393344][ T9] usb 2-1: config 0 has no interface number 0 [ 1111.403448][ T30] audit: type=1400 audit(2000001029.088:2086): avc: denied { ioctl } for pid=15525 comm="syz.2.2425" path="socket:[48980]" dev="sockfs" ino=48980 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1111.457044][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1111.466598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.499053][ T9] usb 2-1: Product: syz [ 1111.503243][ T9] usb 2-1: Manufacturer: syz [ 1111.524866][ T9] usb 2-1: SerialNumber: syz [ 1111.543985][ T9] usb 2-1: config 0 descriptor?? [ 1111.642117][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 1111.655450][ T5868] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1111.685724][ T9] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1111.692103][ T9] usb 2-1: No valid video chain found. [ 1111.936101][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.955106][ T5868] usb 4-1: config 0 has no interface number 0 [ 1111.974186][ T5868] usb 4-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 1111.993326][ T5868] usb 4-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1112.016206][ T5868] usb 4-1: config 0 interface 115 has no altsetting 0 [ 1112.034485][ T5868] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1112.048810][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.057777][ T5868] usb 4-1: Product: syz [ 1112.064114][ T5868] usb 4-1: Manufacturer: syz [ 1112.078076][ T5868] usb 4-1: SerialNumber: syz [ 1112.109181][ T5868] usb 4-1: config 0 descriptor?? [ 1112.174518][ T24] usb 2-1: USB disconnect, device number 29 [ 1112.264225][ T30] audit: type=1400 audit(2000001030.058:2087): avc: denied { bind } for pid=15540 comm="syz.2.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1112.383708][ T5868] usb 4-1: USB disconnect, device number 28 [ 1112.754888][ T910] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1113.354956][ T5868] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1113.496139][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1113.517304][ T910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1113.531271][T15552] random: crng reseeded on system resumption [ 1113.534748][ T30] audit: type=1400 audit(2000001031.328:2088): avc: denied { append } for pid=15551 comm="syz.2.2433" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1113.537639][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1113.560512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.562984][ T30] audit: type=1400 audit(2000001031.328:2089): avc: denied { open } for pid=15551 comm="syz.2.2433" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1113.612087][ T910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1113.616358][ T30] audit: type=1400 audit(2000001031.378:2090): avc: denied { firmware_load } for pid=15179 comm="kworker/u8:9" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1113.634302][ T910] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1113.657545][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.665745][ T910] usb 5-1: Product: syz [ 1113.669898][ T910] usb 5-1: Manufacturer: syz [ 1113.675824][ T910] usb 5-1: SerialNumber: syz [ 1113.680283][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1113.687596][ T5868] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1113.695365][ T910] usb 5-1: config 0 descriptor?? [ 1113.702871][ T910] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1113.706376][ T5868] usb 2-1: config 0 has no interface number 0 [ 1113.714638][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1113.734263][ T5868] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1113.752014][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.760794][ T5868] usb 2-1: Product: syz [ 1113.769732][ T5868] usb 2-1: Manufacturer: syz [ 1113.774523][ T5868] usb 2-1: SerialNumber: syz [ 1113.783925][ T5868] usb 2-1: config 0 descriptor?? [ 1113.874663][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1113.882689][ T24] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1113.891102][ T24] usb 4-1: config 8 has no interface number 0 [ 1113.897333][ T24] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1113.909374][ T24] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1113.919864][T15544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1113.919861][ T24] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1113.926373][T15544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1113.935345][T15544] vhci_hcd vhci_hcd.0: Device attached [ 1113.936704][ T24] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1113.959931][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1113.960368][T15556] vhci_hcd: connection closed [ 1113.969227][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.969253][ T24] usb 4-1: Product: syz [ 1113.969267][ T24] usb 4-1: Manufacturer: syz [ 1113.969280][ T24] usb 4-1: SerialNumber: syz [ 1114.003429][ T7416] vhci_hcd: stop threads [ 1114.003441][ T910] scsi host1: usb-storage 5-1:0.0 [ 1114.022777][ T7416] vhci_hcd: release socket [ 1114.024922][ T910] usb 5-1: USB disconnect, device number 31 [ 1114.030057][ T7416] vhci_hcd: disconnect device [ 1114.215095][T15027] Bluetooth: hci2: command 0x0406 tx timeout [ 1114.229306][ T24] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1114.238252][ T24] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 1114.250838][ T24] usb 4-1: USB disconnect, device number 29 [ 1114.652196][T15563] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1114.723182][T15563] ptrace attach of ""[15565] was attempted by "./syz-executor exec"[15563] [ 1115.378000][ T30] audit: type=1400 audit(2000001033.178:2091): avc: denied { setopt } for pid=15570 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1115.895360][ T9] usb 2-1: USB disconnect, device number 30 [ 1115.964872][ T5868] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1116.000890][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1116.094027][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1116.123608][T15584] netlink: 'syz.2.2442': attribute type 12 has an invalid length. [ 1116.195151][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 1116.203388][T15584] netlink: 'syz.2.2442': attribute type 11 has an invalid length. [ 1116.204965][ T5868] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1116.284049][T15597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1116.310786][ T5868] usb 5-1: config 0 has no interface number 0 [ 1116.325996][ T5868] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1116.346877][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.362085][ T5868] usb 5-1: Product: syz [ 1116.366676][ T5868] usb 5-1: Manufacturer: syz [ 1116.379414][ T5868] usb 5-1: SerialNumber: syz [ 1116.401640][ T5868] usb 5-1: config 0 descriptor?? [ 1116.419464][T15599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2443'. [ 1116.774310][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 1116.832501][T15603] netlink: 'syz.2.2446': attribute type 4 has an invalid length. [ 1117.748698][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1117.778608][T15608] netlink: 'syz.2.2447': attribute type 4 has an invalid length. [ 1118.216182][ T5868] usb 5-1: USB disconnect, device number 32 [ 1118.344582][T15611] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1119.118748][T15621] syz.1.2451 (15621): drop_caches: 2 [ 1119.121720][ T30] audit: type=1800 audit(2000001036.888:2092): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2449" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1119.133612][T15621] syz.1.2451 (15621): drop_caches: 2 [ 1120.105411][ T30] audit: type=1400 audit(2000001037.898:2093): avc: denied { create } for pid=15626 comm="syz.1.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1120.192304][T15631] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 1121.654693][T15650] input: syz1 as /devices/virtual/input/input158 [ 1121.834585][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1122.254692][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1122.738404][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.767600][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 1122.784697][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1122.887355][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.898495][T15657] ceph: No mds server is up or the cluster is laggy [ 1122.904044][T15665] syz.1.2465 (15665): drop_caches: 2 [ 1122.911521][T15665] syz.1.2465 (15665): drop_caches: 2 [ 1122.917962][ T24] usb 3-1: config 0 descriptor?? [ 1123.768254][T10662] libceph: mon0 (1)[c::]:6789 connect error [ 1123.856116][ T910] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1124.121699][ T24] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1124.135895][ T24] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1124.148601][ T24] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1124.155983][ T24] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1124.164191][ T24] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1124.173405][ T24] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 1124.185057][ T910] usb 5-1: Using ep0 maxpacket: 32 [ 1124.202627][ T24] savu 0003:1E7D:2D5A.0005: parse failed [ 1124.209441][ T24] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 1124.543855][T10662] libceph: mon0 (1)[c::]:6789 connect error [ 1124.552862][ T910] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1124.570618][ T24] usb 3-1: USB disconnect, device number 16 [ 1124.578089][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.598322][ T910] usb 5-1: Product: syz [ 1124.609898][ T910] usb 5-1: Manufacturer: syz [ 1124.614701][ T9827] Bluetooth: hci2: command 0x0406 tx timeout [ 1124.638555][ T910] usb 5-1: SerialNumber: syz [ 1124.668944][ T910] usb 5-1: config 0 descriptor?? [ 1124.757683][T15683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2467'. [ 1124.800498][T15676] ceph: No mds server is up or the cluster is laggy [ 1125.005195][T10662] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1125.156294][T10662] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1125.164354][T10662] usb 2-1: config 0 has no interface number 0 [ 1125.172002][ T910] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1125.184595][ T910] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1125.193238][T10662] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1125.224289][T10662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.253259][T10662] usb 2-1: config 0 descriptor?? [ 1125.268990][T10662] usb 2-1: selecting invalid altsetting 1 [ 1125.277426][T10662] dvb_ttusb_budget: ttusb_init_controller: error [ 1125.286158][ T910] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1125.304956][T10662] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1125.330706][ T910] usb 5-1: USB disconnect, device number 33 [ 1125.751434][T10662] DVB: Unable to find symbol cx22700_attach() [ 1125.830567][T10662] DVB: Unable to find symbol tda10046_attach() [ 1125.847661][T10662] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1125.949189][T10662] usb 2-1: USB disconnect, device number 31 [ 1125.974419][T15699] program syz.2.2475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.450797][T15700] input: syz1 as /devices/virtual/input/input159 [ 1126.499115][T15703] IPVS: Error during creation of socket; terminating [ 1127.135314][ T5868] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1127.174620][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1127.591301][ T30] audit: type=1800 audit(2000001045.338:2094): pid=15719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2480" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1127.643574][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1127.827237][ T5868] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1127.848428][ T5868] usb 3-1: config 0 has no interface number 0 [ 1127.933222][ T5868] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1127.942574][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.951324][ T5868] usb 3-1: Product: syz [ 1127.955730][ T5868] usb 3-1: Manufacturer: syz [ 1127.960452][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1127.973571][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.982877][ T5868] usb 3-1: SerialNumber: syz [ 1127.988940][ T9] usb 4-1: Product: syz [ 1127.994061][ T5868] usb 3-1: config 0 descriptor?? [ 1128.007624][ T9] usb 4-1: Manufacturer: syz [ 1128.012605][ T9] usb 4-1: SerialNumber: syz [ 1128.036490][ T9] usb 4-1: config 0 descriptor?? [ 1128.596601][ T30] audit: type=1800 audit(2000001046.348:2095): pid=15733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2486" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 1129.009539][ T9] usb 4-1: USB disconnect, device number 30 [ 1130.046419][ T9] usb 3-1: USB disconnect, device number 17 [ 1130.099012][ T5868] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1130.401431][T10662] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1130.606131][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1130.696285][ T5868] usb 2-1: config 0 has no interface number 0 [ 1130.723051][ T5868] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1130.746808][ T30] audit: type=1400 audit(2000001048.538:2096): avc: denied { append } for pid=15756 comm="syz.2.2496" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1130.763768][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.797256][T10662] usb 5-1: Using ep0 maxpacket: 16 [ 1130.813464][T10662] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1130.826015][T10662] usb 5-1: config 0 has no interface number 0 [ 1130.838249][T10662] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1130.842094][ T5868] usb 2-1: config 0 descriptor?? [ 1130.852915][T10662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.852942][T10662] usb 5-1: Product: syz [ 1130.852957][T10662] usb 5-1: Manufacturer: syz [ 1130.852972][T10662] usb 5-1: SerialNumber: syz [ 1130.855530][T10662] usb 5-1: config 0 descriptor?? [ 1130.886716][ T5868] usb 2-1: selecting invalid altsetting 1 [ 1130.897062][ T5868] dvb_ttusb_budget: ttusb_init_controller: error [ 1130.903468][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1130.990975][ T5868] DVB: Unable to find symbol cx22700_attach() [ 1131.265583][ T5868] DVB: Unable to find symbol tda10046_attach() [ 1131.271800][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1131.282717][ T5868] usb 2-1: USB disconnect, device number 32 [ 1131.460137][T10662] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1131.675159][T10662] usb 4-1: Using ep0 maxpacket: 16 [ 1131.687416][T10662] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1131.696897][T10662] usb 4-1: config 0 has no interface number 0 [ 1131.709355][T10662] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1131.719675][T10662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.730712][T10662] usb 4-1: Product: syz [ 1131.888846][T10662] usb 4-1: Manufacturer: syz [ 1131.924854][T10662] usb 4-1: SerialNumber: syz [ 1131.999462][T10662] usb 4-1: config 0 descriptor?? [ 1132.484653][ T5868] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1132.544980][T10662] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1132.634799][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 1132.645053][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1132.653107][ T5868] usb 2-1: config 0 has no interface number 0 [ 1132.662085][ T5868] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1132.671636][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.680082][ T5868] usb 2-1: Product: syz [ 1132.684631][ T5868] usb 2-1: Manufacturer: syz [ 1132.689482][ T5868] usb 2-1: SerialNumber: syz [ 1132.696749][ T5868] usb 2-1: config 0 descriptor?? [ 1132.714413][ T5868] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1132.724475][ T5868] usb 2-1: selecting invalid altsetting 1 [ 1132.730743][ T5868] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1132.742996][ T5868] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1132.761934][ T910] usb 5-1: USB disconnect, device number 34 [ 1132.764841][ T5868] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1132.776940][T10662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.793022][T10662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.803412][T10662] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1132.804359][ T5868] usb 2-1: media controller created [ 1132.817064][T10662] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.831385][T10662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.842248][T10662] usb 3-1: config 0 descriptor?? [ 1132.869891][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.244614][ T5861] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1133.260422][T10662] plantronics 0003:047F:FFFF.0006: unbalanced delimiter at end of report description [ 1133.270998][T10662] plantronics 0003:047F:FFFF.0006: parse failed [ 1133.277605][T10662] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 1133.394620][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 1133.401218][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.413254][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.424505][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1133.438553][ T5861] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1133.447789][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.458532][ T5861] usb 5-1: config 0 descriptor?? [ 1133.490207][T10662] usb 3-1: USB disconnect, device number 18 [ 1133.863445][T13056] usb 4-1: USB disconnect, device number 31 [ 1133.890378][ T5861] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1133.904227][ T5861] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1133.914560][ T5861] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1133.921724][ T5861] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1133.936572][ T5861] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1133.975117][ T5861] input: HID 0955:7214 Haptics as /devices/virtual/input/input162 [ 1133.985883][ T5868] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1134.002194][T15775] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 1134.024358][ T5868] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1134.057440][ T5868] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1134.073654][ T5861] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 1134.082665][ T30] audit: type=1400 audit(2000001051.878:2097): avc: denied { read write } for pid=15786 comm="syz.4.2508" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1134.082927][T15787] random: crng reseeded on system resumption [ 1134.106288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.165366][ T5861] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1134.188864][ T30] audit: type=1400 audit(2000001051.878:2098): avc: denied { ioctl } for pid=15786 comm="syz.4.2508" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1134.201506][ T5868] usb 2-1: USB disconnect, device number 33 [ 1134.431985][T11339] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1134.432280][T13056] usb 5-1: USB disconnect, device number 35 [ 1134.449130][T11339] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1134.479622][T11339] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1134.492027][T11339] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1134.607490][ T5861] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1134.752528][ T30] audit: type=1800 audit(2000001052.528:2099): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2513" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1134.777550][ T30] audit: type=1400 audit(2000001052.578:2100): avc: denied { accept } for pid=15802 comm="syz.1.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1134.777554][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.777599][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.819679][ T5861] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1134.831500][ T30] audit: type=1400 audit(2000001052.598:2101): avc: denied { read } for pid=15802 comm="syz.1.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1134.838010][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.874239][ T5861] usb 4-1: config 0 descriptor?? [ 1135.311063][ T5861] gembird 0003:11FF:3331.0008: item fetching failed at offset 5/7 [ 1135.329240][ T5861] gembird 0003:11FF:3331.0008: probe with driver gembird failed with error -22 [ 1135.504907][T13056] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1135.887283][T13056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1135.887327][T13056] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1135.887352][T13056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.896302][T13056] usb 2-1: config 0 descriptor?? [ 1135.897548][ T5861] usb 4-1: USB disconnect, device number 32 [ 1136.488804][T13056] uclogic 0003:5543:0005.0009: No inputs registered, leaving [ 1136.526126][T13056] uclogic 0003:5543:0005.0009: hidraw0: USB HID v4.01 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 1136.551782][ T30] audit: type=1400 audit(2000001054.348:2102): avc: denied { mount } for pid=15837 comm="syz.2.2529" name="/" dev="configfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1137.041446][ T5861] usb 2-1: USB disconnect, device number 34 [ 1137.202535][ T30] audit: type=1400 audit(2000001054.998:2103): avc: denied { write } for pid=15849 comm="syz.4.2534" path="socket:[51714]" dev="sockfs" ino=51714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1137.886130][T15855] input: syz1 as /devices/virtual/input/input163 [ 1137.899223][T10662] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1138.065281][T10662] usb 4-1: Using ep0 maxpacket: 32 [ 1138.072562][T10662] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1138.084695][T10662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.106598][T10662] usb 4-1: config 0 descriptor?? [ 1138.307998][ T30] audit: type=1800 audit(2000001056.088:2104): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2536" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 1138.352991][T15864] IPv6: addrconf: prefix option has invalid lifetime [ 1138.447669][T10662] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1138.458318][T10662] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1138.481152][T10662] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1138.493109][T10662] usb 4-1: media controller created [ 1138.517904][T10662] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1138.574826][T13056] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1138.624696][ T910] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1138.650477][T10662] az6027: usb out operation failed. (-71) [ 1138.664320][T10662] az6027: usb out operation failed. (-71) [ 1138.674043][T10662] stb0899_attach: Driver disabled by Kconfig [ 1138.681451][T10662] az6027: no front-end attached [ 1138.681451][T10662] [ 1138.689397][T10662] az6027: usb out operation failed. (-71) [ 1138.696093][T10662] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1138.721030][T10662] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input164 [ 1138.737273][T13056] usb 2-1: Using ep0 maxpacket: 16 [ 1138.743863][T13056] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.759194][T10662] dvb-usb: schedule remote query interval to 400 msecs. [ 1138.767990][T13056] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.778256][T10662] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1138.789372][T13056] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1138.796834][T10662] usb 4-1: USB disconnect, device number 33 [ 1138.805501][ T910] usb 5-1: Using ep0 maxpacket: 16 [ 1138.812793][T13056] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1138.828324][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.858063][T13056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.868716][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2545'. [ 1138.874818][ T910] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1138.978900][T13056] usb 2-1: config 0 descriptor?? [ 1138.988749][T10662] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1139.002026][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.061969][ T910] usb 5-1: config 0 descriptor?? [ 1139.354677][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1139.399245][T13056] hid (null): report_id 0 is invalid [ 1139.414654][T13056] hid (null): invalid report_size 4076 [ 1139.420285][T13056] hid (null): unknown global tag 0xc [ 1139.430321][T13056] hid (null): invalid report_size 59118 [ 1139.441001][T13056] hid (null): global environment stack underflow [ 1139.454939][T13056] hid (null): unknown global tag 0xd [ 1139.465868][T13056] hid (null): global environment stack underflow [ 1139.510327][ T910] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1139.524705][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1139.535903][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.556792][ T24] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1139.575008][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.595531][ T24] usb 3-1: config 0 descriptor?? [ 1139.602784][ T24] usb 3-1: bad CDC descriptors [ 1139.612837][ T24] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1139.616569][ T5861] usb 2-1: USB disconnect, device number 35 [ 1139.634884][ T24] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1139.641417][ T24] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1139.831134][T11339] usb 3-1: USB disconnect, device number 19 [ 1139.843193][T15899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2550'. [ 1139.960622][ T910] usb 5-1: USB disconnect, device number 36 [ 1140.184978][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1140.479919][T15904] overlayfs: missing 'workdir' [ 1141.084035][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1141.122296][ T24] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1141.148526][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.218708][ T24] usb 4-1: Product: syz [ 1141.250494][ T24] usb 4-1: Manufacturer: syz [ 1141.291043][ T24] usb 4-1: SerialNumber: syz [ 1141.325597][ T24] usb 4-1: config 0 descriptor?? [ 1141.411227][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1141.484475][T15914] syz.1.2556 (15914): drop_caches: 2 [ 1141.555984][T15914] syz.1.2556 (15914): drop_caches: 2 [ 1142.285989][ T24] gspca_stk1135: reg_w 0x5 err -71 [ 1142.316200][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.322611][ T24] gspca_stk1135: Sensor write failed [ 1142.346201][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.352611][ T24] gspca_stk1135: Sensor write failed [ 1142.390820][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.398574][ T24] gspca_stk1135: Sensor read failed [ 1142.403850][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.424972][ T24] gspca_stk1135: Sensor read failed [ 1142.430228][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 1142.439938][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.447077][ T24] gspca_stk1135: Sensor read failed [ 1142.452336][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.462842][ T24] gspca_stk1135: Sensor read failed [ 1142.468284][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.483318][ T24] gspca_stk1135: Sensor write failed [ 1142.492319][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1142.500029][ T24] gspca_stk1135: Sensor write failed [ 1142.509286][ T24] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1142.521157][ T24] usb 4-1: USB disconnect, device number 34 [ 1142.535023][T11339] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1142.564687][ T910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1142.699734][T15934] overlayfs: missing 'workdir' [ 1142.704977][T11339] usb 5-1: Using ep0 maxpacket: 16 [ 1142.715750][T11339] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 1142.726026][T11339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.762480][T11339] usb 5-1: config 0 descriptor?? [ 1143.149029][ T910] usb 3-1: Using ep0 maxpacket: 16 [ 1143.556498][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.560604][T11339] asus 0003:0B05:1A30.000C: hidraw0: USB HID v0.00 Device [HID 0b05:1a30] on usb-dummy_hcd.4-1/input0 [ 1143.571122][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.588500][ T910] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1143.599405][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.609629][ T910] usb 3-1: config 0 descriptor?? [ 1143.653349][T11339] asus 0003:0B05:1A30.000C: Asus input not registered [ 1143.705686][T11339] asus 0003:0B05:1A30.000C: probe with driver asus failed with error -12 [ 1143.769800][T11339] usb 5-1: USB disconnect, device number 37 [ 1144.057056][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 1144.102596][T15946] netlink: 'syz.3.2565': attribute type 4 has an invalid length. [ 1144.387320][ T910] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1144.414759][ T5861] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1144.487942][T15950] sp0: Synchronizing with TNC [ 1144.502453][ T910] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 1144.508380][ T7416] [ 1144.513786][ T7416] ===================================================== [ 1144.520736][ T7416] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1144.528206][ T7416] 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 Not tainted [ 1144.535334][ T7416] ----------------------------------------------------- [ 1144.542261][ T7416] kworker/u8:10/7416 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1144.550134][ T7416] ffffffff8f577938 (disc_data_lock#4){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 1144.558495][ T7416] [ 1144.558495][ T7416] and this task is already holding: [ 1144.565853][ T7416] ffffffff9adfa078 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1144.574548][ T7416] which would create a new lock dependency: [ 1144.580414][ T7416] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3} [ 1144.588233][ T7416] [ 1144.588233][ T7416] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1144.597660][ T7416] (&port_lock_key){-.-.}-{3:3} [ 1144.597679][ T7416] [ 1144.597679][ T7416] ... which became HARDIRQ-irq-safe at: [ 1144.610214][ T7416] lock_acquire+0x179/0x350 [ 1144.614809][ T7416] _raw_spin_lock_irqsave+0x3a/0x60 [ 1144.620081][ T7416] serial8250_handle_irq+0x95/0xcb0 [ 1144.625354][ T7416] serial8250_default_handle_irq+0x9a/0x210 [ 1144.631348][ T7416] serial8250_interrupt+0x106/0x210 [ 1144.636642][ T7416] __handle_irq_event_percpu+0x22c/0x7d0 [ 1144.642346][ T7416] handle_irq_event+0xab/0x1e0 [ 1144.647179][ T7416] handle_edge_irq+0x263/0xd10 [ 1144.652009][ T7416] __common_interrupt+0xe2/0x250 [ 1144.657027][ T7416] common_interrupt+0xba/0xe0 [ 1144.661775][ T7416] asm_common_interrupt+0x26/0x40 [ 1144.666881][ T7416] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1144.672609][ T7416] uart_write+0x2a4/0xb30 [ 1144.677025][ T7416] n_tty_write+0x40f/0x1160 [ 1144.681641][ T7416] file_tty_write.constprop.0+0x502/0x9b0 [ 1144.687428][ T7416] redirected_tty_write+0xd4/0x150 [ 1144.692607][ T7416] vfs_write+0x5ba/0x1180 [ 1144.697016][ T7416] ksys_write+0x12a/0x240 [ 1144.701423][ T7416] do_syscall_64+0xcd/0x260 [ 1144.705999][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.711960][ T7416] [ 1144.711960][ T7416] to a HARDIRQ-irq-unsafe lock: [ 1144.718978][ T7416] (disc_data_lock#4){.+.+}-{3:3} [ 1144.719006][ T7416] [ 1144.719006][ T7416] ... which became HARDIRQ-irq-unsafe at: [ 1144.731860][ T7416] ... [ 1144.731866][ T7416] lock_acquire+0x179/0x350 [ 1144.739016][ T7416] _raw_read_lock+0x5f/0x70 [ 1144.743595][ T7416] sp_get+0x18/0xf0 [ 1144.747475][ T7416] sixpack_receive_buf+0x59/0x1c90 [ 1144.752661][ T7416] tty_ioctl+0x580/0x1610 [ 1144.757076][ T7416] __x64_sys_ioctl+0x193/0x200 [ 1144.761929][ T7416] do_syscall_64+0xcd/0x260 [ 1144.766512][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.772470][ T7416] [ 1144.772470][ T7416] other info that might help us debug this: [ 1144.772470][ T7416] [ 1144.782765][ T7416] Possible interrupt unsafe locking scenario: [ 1144.782765][ T7416] [ 1144.791062][ T7416] CPU0 CPU1 [ 1144.796405][ T7416] ---- ---- [ 1144.801746][ T7416] lock(disc_data_lock#4); [ 1144.806238][ T7416] local_irq_disable(); [ 1144.812987][ T7416] lock(&port_lock_key); [ 1144.819832][ T7416] lock(disc_data_lock#4); [ 1144.826841][ T7416] [ 1144.830288][ T7416] lock(&port_lock_key); [ 1144.834773][ T7416] [ 1144.834773][ T7416] *** DEADLOCK *** [ 1144.834773][ T7416] [ 1144.843070][ T7416] 6 locks held by kworker/u8:10/7416: [ 1144.848418][ T7416] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1144.859536][ T7416] #1: ffffc9000445fd18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1144.870571][ T7416] #2: ffff8880256f0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 1144.879607][ T7416] #3: ffff88803161c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1144.888907][ T7416] #4: ffffffff9adfa078 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1144.898039][ T7416] #5: ffff88803161c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1144.907343][ T7416] [ 1144.907343][ T7416] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1144.917726][ T7416] -> (&port_lock_key){-.-.}-{3:3} { [ 1144.923007][ T7416] IN-HARDIRQ-W at: [ 1144.926971][ T7416] lock_acquire+0x179/0x350 [ 1144.933112][ T7416] _raw_spin_lock_irqsave+0x3a/0x60 [ 1144.939945][ T7416] serial8250_handle_irq+0x95/0xcb0 [ 1144.946785][ T7416] serial8250_default_handle_irq+0x9a/0x210 [ 1144.954313][ T7416] serial8250_interrupt+0x106/0x210 [ 1144.961156][ T7416] __handle_irq_event_percpu+0x22c/0x7d0 [ 1144.968428][ T7416] handle_irq_event+0xab/0x1e0 [ 1144.974826][ T7416] handle_edge_irq+0x263/0xd10 [ 1144.981222][ T7416] __common_interrupt+0xe2/0x250 [ 1144.987812][ T7416] common_interrupt+0xba/0xe0 [ 1144.994116][ T7416] asm_common_interrupt+0x26/0x40 [ 1145.000769][ T7416] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1145.008038][ T7416] uart_write+0x2a4/0xb30 [ 1145.013999][ T7416] n_tty_write+0x40f/0x1160 [ 1145.020137][ T7416] file_tty_write.constprop.0+0x502/0x9b0 [ 1145.027489][ T7416] redirected_tty_write+0xd4/0x150 [ 1145.034258][ T7416] vfs_write+0x5ba/0x1180 [ 1145.040225][ T7416] ksys_write+0x12a/0x240 [ 1145.046194][ T7416] do_syscall_64+0xcd/0x260 [ 1145.052335][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.059875][ T7416] IN-SOFTIRQ-W at: [ 1145.063843][ T7416] lock_acquire+0x179/0x350 [ 1145.069994][ T7416] _raw_spin_lock_irqsave+0x3a/0x60 [ 1145.076829][ T7416] serial8250_handle_irq+0x95/0xcb0 [ 1145.083676][ T7416] serial8250_default_handle_irq+0x9a/0x210 [ 1145.091225][ T7416] serial8250_interrupt+0x106/0x210 [ 1145.098067][ T7416] __handle_irq_event_percpu+0x22c/0x7d0 [ 1145.105332][ T7416] handle_irq_event+0xab/0x1e0 [ 1145.111725][ T7416] handle_edge_irq+0x263/0xd10 [ 1145.118120][ T7416] __common_interrupt+0xe2/0x250 [ 1145.124697][ T7416] common_interrupt+0x61/0xe0 [ 1145.131011][ T7416] asm_common_interrupt+0x26/0x40 [ 1145.137664][ T7416] stack_access_ok+0x53/0x200 [ 1145.143971][ T7416] unwind_next_frame+0xb7d/0x20a0 [ 1145.150632][ T7416] arch_stack_walk+0x94/0x100 [ 1145.156941][ T7416] stack_trace_save+0x8e/0xc0 [ 1145.163249][ T7416] kasan_save_stack+0x33/0x60 [ 1145.169554][ T7416] kasan_save_track+0x14/0x30 [ 1145.175858][ T7416] kasan_save_free_info+0x3b/0x60 [ 1145.182518][ T7416] __kasan_slab_free+0x51/0x70 [ 1145.188928][ T7416] kmem_cache_free+0x2d4/0x4d0 [ 1145.195330][ T7416] rcu_core+0x79c/0x14e0 [ 1145.201205][ T7416] handle_softirqs+0x216/0x8e0 [ 1145.207619][ T7416] __irq_exit_rcu+0x109/0x170 [ 1145.213953][ T7416] irq_exit_rcu+0x9/0x30 [ 1145.219847][ T7416] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1145.227115][ T7416] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1145.234727][ T7416] pv_native_safe_halt+0xf/0x20 [ 1145.241210][ T7416] default_idle+0x13/0x20 [ 1145.247189][ T7416] default_idle_call+0x6d/0xb0 [ 1145.253597][ T7416] do_idle+0x391/0x510 [ 1145.259313][ T7416] cpu_startup_entry+0x4f/0x60 [ 1145.265720][ T7416] start_secondary+0x21d/0x2b0 [ 1145.272119][ T7416] common_startup_64+0x13e/0x148 [ 1145.278688][ T7416] INITIAL USE at: [ 1145.282564][ T7416] lock_acquire+0x179/0x350 [ 1145.288617][ T7416] _raw_spin_lock_irqsave+0x3a/0x60 [ 1145.295361][ T7416] serial8250_do_set_termios+0x310/0x1710 [ 1145.302645][ T7416] serial8250_set_termios+0x6e/0x80 [ 1145.309415][ T7416] uart_set_options+0x31a/0x5f0 [ 1145.315819][ T7416] serial8250_console_setup+0x189/0x450 [ 1145.322914][ T7416] univ8250_console_setup+0x1eb/0x2e0 [ 1145.329834][ T7416] try_enable_preferred_console+0x2fd/0x530 [ 1145.337274][ T7416] register_console+0x3ab/0x11b0 [ 1145.343757][ T7416] univ8250_console_init+0x5f/0x90 [ 1145.350417][ T7416] console_init+0x14f/0x680 [ 1145.356462][ T7416] start_kernel+0x29f/0x4d0 [ 1145.362514][ T7416] x86_64_start_reservations+0x18/0x30 [ 1145.369541][ T7416] x86_64_start_kernel+0xb0/0xc0 [ 1145.376032][ T7416] common_startup_64+0x13e/0x148 [ 1145.382515][ T7416] } [ 1145.384992][ T7416] ... key at: [] port_lock_key+0x0/0x40 [ 1145.392607][ T7416] [ 1145.392607][ T7416] the dependencies between the lock to be acquired [ 1145.392614][ T7416] and HARDIRQ-irq-unsafe lock: [ 1145.406188][ T7416] -> (disc_data_lock#4){.+.+}-{3:3} { [ 1145.411562][ T7416] HARDIRQ-ON-R at: [ 1145.415523][ T7416] lock_acquire+0x179/0x350 [ 1145.421666][ T7416] _raw_read_lock+0x5f/0x70 [ 1145.427811][ T7416] sp_get+0x18/0xf0 [ 1145.433278][ T7416] sixpack_receive_buf+0x59/0x1c90 [ 1145.440038][ T7416] tty_ioctl+0x580/0x1610 [ 1145.446017][ T7416] __x64_sys_ioctl+0x193/0x200 [ 1145.452413][ T7416] do_syscall_64+0xcd/0x260 [ 1145.458552][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.466074][ T7416] SOFTIRQ-ON-R at: [ 1145.470042][ T7416] lock_acquire+0x179/0x350 [ 1145.476183][ T7416] _raw_read_lock+0x5f/0x70 [ 1145.482345][ T7416] sp_get+0x18/0xf0 [ 1145.487808][ T7416] sixpack_receive_buf+0x59/0x1c90 [ 1145.494583][ T7416] tty_ioctl+0x580/0x1610 [ 1145.500560][ T7416] __x64_sys_ioctl+0x193/0x200 [ 1145.506959][ T7416] do_syscall_64+0xcd/0x260 [ 1145.513103][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.520628][ T7416] INITIAL USE at: [ 1145.524505][ T7416] lock_acquire+0x179/0x350 [ 1145.530563][ T7416] _raw_write_lock_irq+0x36/0x50 [ 1145.537048][ T7416] sixpack_close+0x1e/0x2f0 [ 1145.543104][ T7416] tty_ldisc_close+0x111/0x1a0 [ 1145.549410][ T7416] tty_ldisc_kill+0x8e/0x150 [ 1145.555539][ T7416] tty_ldisc_release+0x109/0x2e0 [ 1145.562017][ T7416] tty_release_struct+0x23/0xe0 [ 1145.568412][ T7416] tty_release+0xe2d/0x1430 [ 1145.574457][ T7416] __fput+0x402/0xb70 [ 1145.579989][ T7416] task_work_run+0x150/0x240 [ 1145.586122][ T7416] do_exit+0xafb/0x2c30 [ 1145.591832][ T7416] __x64_sys_exit+0x42/0x50 [ 1145.597881][ T7416] x64_sys_call+0xea3/0x1730 [ 1145.604020][ T7416] do_syscall_64+0xcd/0x260 [ 1145.610071][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.617507][ T7416] INITIAL READ USE at: [ 1145.621812][ T7416] lock_acquire+0x179/0x350 [ 1145.628298][ T7416] _raw_read_lock+0x5f/0x70 [ 1145.634782][ T7416] sp_get+0x18/0xf0 [ 1145.640571][ T7416] sixpack_receive_buf+0x59/0x1c90 [ 1145.647666][ T7416] tty_ioctl+0x580/0x1610 [ 1145.653971][ T7416] __x64_sys_ioctl+0x193/0x200 [ 1145.660720][ T7416] do_syscall_64+0xcd/0x260 [ 1145.667206][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.675078][ T7416] } [ 1145.677553][ T7416] ... key at: [] disc_data_lock+0x18/0xfe0 [ 1145.685430][ T7416] ... acquired at: [ 1145.689209][ T7416] lock_acquire+0x179/0x350 [ 1145.693870][ T7416] _raw_read_lock+0x5f/0x70 [ 1145.698527][ T7416] sp_get+0x18/0xf0 [ 1145.702495][ T7416] sixpack_write_wakeup+0x20/0x390 [ 1145.707767][ T7416] tty_wakeup+0xe5/0x120 [ 1145.712160][ T7416] tty_port_default_wakeup+0x2a/0x40 [ 1145.717600][ T7416] serial8250_tx_chars+0x68e/0x860 [ 1145.722868][ T7416] __start_tx+0x3e9/0x4a0 [ 1145.727358][ T7416] serial8250_start_tx+0x368/0x530 [ 1145.732624][ T7416] __uart_start+0x292/0x4c0 [ 1145.737287][ T7416] uart_write+0x218/0xb30 [ 1145.741770][ T7416] sixpack_receive_buf+0x3d3/0x1c90 [ 1145.747130][ T7416] tty_ldisc_receive_buf+0x157/0x1a0 [ 1145.752568][ T7416] tty_port_default_receive_buf+0x70/0xb0 [ 1145.758443][ T7416] flush_to_ldisc+0x26b/0x780 [ 1145.763273][ T7416] process_one_work+0x9cf/0x1b70 [ 1145.768382][ T7416] worker_thread+0x6c8/0xf10 [ 1145.773126][ T7416] kthread+0x3c2/0x780 [ 1145.777348][ T7416] ret_from_fork+0x45/0x80 [ 1145.781918][ T7416] ret_from_fork_asm+0x1a/0x30 [ 1145.786841][ T7416] [ 1145.789144][ T7416] [ 1145.789144][ T7416] stack backtrace: [ 1145.795014][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: kworker/u8:10 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 1145.795033][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1145.795043][ T7416] Workqueue: events_unbound flush_to_ldisc [ 1145.795058][ T7416] Call Trace: [ 1145.795064][ T7416] [ 1145.795070][ T7416] dump_stack_lvl+0x116/0x1f0 [ 1145.795089][ T7416] check_irq_usage+0x7dc/0x920 [ 1145.795114][ T7416] ? check_path.constprop.0+0x24/0x50 [ 1145.795135][ T7416] ? __lock_acquire+0x1189/0x1ba0 [ 1145.795155][ T7416] __lock_acquire+0x1189/0x1ba0 [ 1145.795177][ T7416] ? lock_acquire+0x179/0x350 [ 1145.795199][ T7416] lock_acquire+0x179/0x350 [ 1145.795218][ T7416] ? sp_get+0x18/0xf0 [ 1145.795239][ T7416] ? ldsem_down_read_trylock+0x11a/0x180 [ 1145.795256][ T7416] ? ldsem_down_read_trylock+0x120/0x180 [ 1145.795274][ T7416] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1145.795295][ T7416] _raw_read_lock+0x5f/0x70 [ 1145.795311][ T7416] ? sp_get+0x18/0xf0 [ 1145.795329][ T7416] sp_get+0x18/0xf0 [ 1145.795348][ T7416] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1145.795368][ T7416] sixpack_write_wakeup+0x20/0x390 [ 1145.795389][ T7416] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1145.795409][ T7416] tty_wakeup+0xe5/0x120 [ 1145.795421][ T7416] tty_port_default_wakeup+0x2a/0x40 [ 1145.795438][ T7416] serial8250_tx_chars+0x68e/0x860 [ 1145.795457][ T7416] __start_tx+0x3e9/0x4a0 [ 1145.795473][ T7416] serial8250_start_tx+0x368/0x530 [ 1145.795491][ T7416] __uart_start+0x292/0x4c0 [ 1145.795511][ T7416] uart_write+0x218/0xb30 [ 1145.795527][ T7416] sixpack_receive_buf+0x3d3/0x1c90 [ 1145.795549][ T7416] ? ldsem_down_read_trylock+0x120/0x180 [ 1145.795567][ T7416] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1145.795586][ T7416] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1145.795607][ T7416] tty_ldisc_receive_buf+0x157/0x1a0 [ 1145.795623][ T7416] tty_port_default_receive_buf+0x70/0xb0 [ 1145.795639][ T7416] flush_to_ldisc+0x26b/0x780 [ 1145.795655][ T7416] ? rcu_is_watching+0x12/0xc0 [ 1145.795673][ T7416] process_one_work+0x9cf/0x1b70 [ 1145.795690][ T7416] ? __pfx_process_one_work+0x10/0x10 [ 1145.795707][ T7416] ? assign_work+0x1a0/0x250 [ 1145.795721][ T7416] worker_thread+0x6c8/0xf10 [ 1145.795738][ T7416] ? __pfx_worker_thread+0x10/0x10 [ 1145.795753][ T7416] kthread+0x3c2/0x780 [ 1145.795765][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795777][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795789][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795801][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795813][ T7416] ? rcu_is_watching+0x12/0xc0 [ 1145.795829][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795841][ T7416] ret_from_fork+0x45/0x80 [ 1145.795854][ T7416] ? __pfx_kthread+0x10/0x10 [ 1145.795866][ T7416] ret_from_fork_asm+0x1a/0x30 [ 1145.795890][ T7416] [ 1146.068841][ T910] usb 3-1: USB disconnect, device number 20 [ 1146.157262][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.174828][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.185466][ T5861] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1146.194553][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.211306][ T5861] usb 2-1: config 0 descriptor?? [ 1146.625860][ T5861] lenovo 0003:17EF:6047.000E: item fetching failed at offset 2/5 [ 1146.633795][ T5861] lenovo 0003:17EF:6047.000E: hid_parse failed [ 1146.640034][ T5861] lenovo 0003:17EF:6047.000E: probe with driver lenovo failed with error -22 [ 1146.836051][ T5861] usb 2-1: USB disconnect, device number 36